Remote Access — Hub
Tools to connect to targets, transfer files, and pivot through compromised hosts.
OSCP use: SSH for Linux boxes & tunnels → evil-winrm for Windows post-exploit → xfreerdp or rdesktop for GUI → Chisel when you need a SOCKS pivot.
For tunneling concepts and more techniques, see Tunneling.
📌 Tools in This Folder
| Note | Purpose | Port |
|---|---|---|
| SSH | Linux remote shell, keys, SCP, -L / -R / -D SOCKS | 22 |
| SSH Errors | Too many authentication failures · IdentitiesOnly=yes · id_rsa perms | — |
| ssh-audit | SSH server/client config security audit | 22 |
| evil-winrm | WinRM shell, Pass-the-Hash, file upload | 5985/5986 |
| xfreerdp | RDP client to Windows desktop | 3389 |
| rdesktop | Legacy RDP client (simple rdesktop IP) | 3389 |
| Chisel | TCP/UDP tunnel & SOCKS proxy through pivot | — |
| FTP | File transfer, anonymous login enum | 21 |
| powercat | PowerShell Netcat — reverse/bind shell, file xfer on Windows | — |
| Penelope | Shell handler — PTY upgrade, upload/download, modules, HTTP -s | 4444+ |
Also see Netcat in Linux for raw shells · Penelope replaces rlwrap nc for most privesc workflows.
📌 Quick Decision Guide
| Situation | Tool |
|---|---|
| Linux SSH creds / key | SSH |
| Windows admin hash / password | evil-winrm or Impacket psexec |
| Need Windows GUI | xfreerdp or rdesktop |
| Catch reverse shell (Linux/Windows) | Penelope (penelope -O -p 4444) or rlwrap + Netcat |
| Windows shell, no nc.exe | powercat (PowerShell Netcat) |
| Pivot to internal subnet | Chisel + SSH tunnel |
| Anonymous FTP / file drop | FTP |