• Introduction.
• Part 1: Setting Up the Target Web Server:
➡Installing Apache2 on the Target Machine;
➡Creating a Custom Web Directory and HTML File;
➡Configuring Apache2 to Listen Only on Loopback Port 8080;
➡Configuring the Apache2 Virtual Host;
➡Enabling the Site and Restarting Apache2;
➡Verifying Local Access on the Target Machine;
➡Confirming the Service is Not Remotely Accessible.

• Part 2: Local Port Forwarding:
➡Verifying Port 8000 is Closed Before Tunnelling;
➡Establishing the SSH Local Port Forward;
➡Running the Tunnel in the Background;
➡Verifying the Tunnel with Nmap;
➡Accessing the Remote Service Through the Tunnel;
➡Verifying the Active Tunnel with Netstat.

• Part 3: Dynamic Port Forwarding (SOCKS Proxy):
➡Establishing the Dynamic Port Forward;
➡Verifying the SOCKS Proxy with Netstat;
➡Configuring Proxychains;
➡Launching Firefox Through Proxychains;
➡Accessing the Internal Service via Dynamic Proxy.

• Part 4: Remote Port Forwarding:
➡Establishing the SSH Remote Port Forward;
➡Verifying the Remote Forward with Netstat on the SSH Server.

• Part 5: RDP Access via Dynamic Port Forwarding and Proxychains:
➡Establishing the SSH Dynamic Tunnel from Kali;
➡Launching rdesktop Through Proxychains;
➡Windows RDP Login Screen via Proxychains;
➡Accessing the Windows Desktop.

• Part 6: RDP Access via SSH Remote Port Forwarding from the Pivot Host:
➡Initiating Remote Port Forward from Ubuntu to Kali;
➡Verifying the Remote Forward on Kali with Netstat;
➡Accessing RDP Directly on Kali’s Loopback.

• Part 7: RDP Access via GatewayPorts — Exposing the Tunnel to the Network:
➡Checking the Default GatewayPorts Setting;
➡Enabling GatewayPorts;
➡Restarting the SSH Service;
➡Initiating Remote Port Forward from Windows to Ubuntu;
➡Direct RDP Connection from Kali Using the Network IP;
➡Full Windows Desktop via GatewayPorts RDP Tunnel.

• Conclusion.
• Mitigation Strategies.