Overview
Plink is PuTTY’s command-line SSH client. Useful for pivoting from Windows targets that don’t have native SSH.
Download
Pre-installed on many Windows systems with PuTTY. Otherwise:
Binary: plink.exe
Local Port Forward
Access internal service from attacker via Windows pivot.
Example
Remote Port Forward
Expose Windows pivot’s local service to attacker.
Example — Expose RDP
Attacker accesses localhost:3390 → Windows pivot RDP.
Dynamic Port Forward (SOCKS)
Non-Interactive (Scripted)
Accept host key automatically and provide password via echo:
Password visible in process list. Use SSH keys when possible.
With SSH Key
Convert OpenSSH key to PPK with PuTTYgen if needed.
Common Pivoting Scenario
Quick Reference