```shell-session git clone https://github.com/utoni/ptunnel-ng.git ``` ```shell sudo ./autogen.sh ``` Copy over using to pivot host ### Pivot Host ```shell-session sudo ./ptunnel-ng -r10.129.202.64 -R22 ``` The IP address following `-r` should be the IP we want ptunnel-ng to accept connections on. In this case, whatever IP is reachable from our attack host would be what we would use. We would benefit from using this same thinking & consideration during an actual engagement. ### Attack Host ```shell-session sudo ./ptunnel-ng -p10.129.202.64 -l2222 -r10.129.202.64 -R22 ``` With the ptunnel-ng ICMP tunnel successfully established, we can attempt to connect to the target using SSH through local port 2222 (`-p2222`). ```shell-session ssh -p2222 -lubuntu 127.0.0.1 ```