Gallopsled / pwntools / 13050584875

71%

dev: 19%

push

github

Add `ssh -L` / `ssh.connect_remote()` workaround when `AllowTcpForwarding` is disabled

Use a netcat process on the remote to connect to the specified host:port and tunnel the traffic using normal `ssh.process` I/O.

This was inspired by the "Circumventing Disabled SSH Port-Forwarding with a Multiplexer" article by @guysv in the Paged Out! zine no. 5.

It allows to use `gdb.debug(arg, ssh=ssh)` to debug processes on pwn.college.

3626 of 6414 branches covered (56.53%)

2 of 13 new or added lines in 1 file covered. (15.38%)

12858 of 18111 relevant lines covered (71.0%)

0.71 hits per line