SANS reading room - Pivoting for Web App Pentest

Nice and simple document.


From the Doc:

There are many channels that can be used as avenues for pivoting.

This paper examines five commonly used channels for pivoting: Netcat relays, SSH local port  forwarding, SSH dynamic port forwarding (SOCKS proxy), Meterpreter session and Ncat HTTP proxy.

For more info:

https://www.sans.org/reading-room/whitepapers/testing/tunneling-pivoting-web-application-penetration-testing-36117