ssh -L [LOCALPORT]:[REMOTEIP]:[REMOTE PORT] user@sshserverip -fN.
1,. commonly used when ingress traffic are block by firewalls.
ssh-keygen~/.ssh/authorized_keys on our attacker machine.command="echo 'This account can only be used for port forwarding'",no-agent-forwarding,no-x11-forwarding,no-pty before you put the public key in there BOYYYYY.sudo systemctl status sshsudo systemctl start ssh.ssh -R LOCALPORT:TARGET_IP:TARGET_PORT kiwids@kiwidsIP -i id_rsa -fN. NOTE the targetIP can be 127.0.0.1:443 or it can be 172.16.0.10:80.