sshuttle

Install

apt install sshuttle
pip install sshuttle

Requires Python on pivot host. No setup needed on pivot — uses SSH.

Basic Usage

Route all traffic to subnet through pivot.

sshuttle -r user@PIVOT_IP 10.10.10.0/24

With Key

sshuttle -r user@PIVOT_IP 10.10.10.0/24 --ssh-cmd "ssh -i /path/to/key"

With Password (sshpass)

sshpass -p 'password' sshuttle -r user@PIVOT_IP 10.10.10.0/24

Multiple Subnets

sshuttle -r user@PIVOT_IP 10.10.10.0/24 172.16.0.0/16

Route All Traffic

sshuttle -r user@PIVOT_IP 0.0.0.0/0

Exclude Subnets

sshuttle -r user@PIVOT_IP 10.10.10.0/24 -x 10.10.10.1/32

DNS Forwarding

sshuttle --dns -r user@PIVOT_IP 10.10.10.0/24

Non-Standard SSH Port

sshuttle -r user@PIVOT_IP:2222 10.10.10.0/24

Verbose / Debug

sshuttle -vvr user@PIVOT_IP 10.10.10.0/24

Advantages Over SSH SOCKS

No ProxyChains needed — transparent routing
Works with any tool (nmap TCP, curl, etc.)
DNS forwarding support
No SOCKS configuration per tool

Limitations

Requires Python on pivot
TCP only (no UDP/ICMP)
Needs root on attacker (iptables)

Quick Reference

Task	Command
Route subnet	`sshuttle -r user@PIVOT 10.10.10.0/24`
All traffic	`sshuttle -r user@PIVOT 0.0.0.0/0`
With DNS	`sshuttle --dns -r user@PIVOT 10.10.10.0/24`
With key	`sshuttle -r user@PIVOT SUBNET --ssh-cmd "ssh -i key"`

Recon

Traffic Analysis

Pivoting

Attacks

Install

Basic Usage

With Key

With Password (sshpass)

Multiple Subnets

Route All Traffic

Exclude Subnets

DNS Forwarding

Non-Standard SSH Port

Verbose / Debug

Advantages Over SSH SOCKS

Limitations

Quick Reference

​Install

​Basic Usage

​With Key

​With Password (sshpass)

​Multiple Subnets

​Route All Traffic

​Exclude Subnets

​DNS Forwarding

​Non-Standard SSH Port

​Verbose / Debug

​Advantages Over SSH SOCKS

​Limitations

​Quick Reference

Install

Basic Usage

With Key

With Password (sshpass)

Multiple Subnets

Route All Traffic

Exclude Subnets

DNS Forwarding

Non-Standard SSH Port

Verbose / Debug

Advantages Over SSH SOCKS

Limitations

Quick Reference