Using Metasploit

Well, this is a post exploitation technique. Which means you should have the connection to the victim's system. Maybe a meterpreter shell.

Commands

# Add a route
meterpreter> run autoroute -h

# Specify the subnet
meterpreter> run autoroute -s <IP address/cidr>

# Print the routes
route print

Metasploit Autoroute Module

run post/multi/manage/autoroute
route print

# Scan open ports
use auxiliary/scanner/portscan/tcp
set RHOSTS 10.0.2.0/24
set PORTS 1-100
run

Pivoting Output

---

REFERENCES

• https://docs.metasploit.com/docs/using-metasploit/intermediate/pivoting-in-metasploit.html

• https://medium.com/@an0nymiss/pivoting-using-metasploit-framework-1f3e93c7a724