01 — Networking beginner map

Learning objectives

• Draw attacker (A) → bastion (B) → internal service (C)
• Pick -L, -R, or -D for a one-sentence scenario
• Know why ligolo/chisel are step 2, not step 0

Intuition

SSH forwarding is a controlled hose through a host you already own. Narrowest hose first: one port (-L) before SOCKS (-D) before reverse (-R).

Friend wording

Both -L and -R are usually typed from your laptop. Roles flip only if the target SSHes back to you.

Full diagrams: whiteboard · ops handout SSH Tunneling.

Park for later

Ligolo-ng, chisel, multi-hop SOCKS, masscan-through-proxy — see operator pivoting note.