# Tunneling and pivoting challenge 1.2

**URL:** <https://forums.cybrary.it/t/tunneling-and-pivoting-challenge-1-2/441902>\
**Category:** Career Paths\
**Created:** [March 20, 2025, 11:21am UTC](https://forums.cybrary.it/t/tunneling-and-pivoting-challenge-1-2/441902 "2025-03-20T11:21:18Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![joao-cybersecurity](https://forums.cybrary.it/user_avatar/forums.cybrary.it/joao-cybersecurity/32/11_2.png) [@joao-cybersecurity](https://forums.cybrary.it/u/joao-cybersecurity)\
**Post date:** [March 20, 2025, 11:21am UTC](https://forums.cybrary.it/t/tunneling-and-pivoting-challenge-1-2/441902/1 "2025-03-20T11:21:18Z")

</div>

I always get stuck here, tried already 5 times:  
TCP header times out all the time:

 ![image](https://forums.cybrary.it/uploads/default/original/3X/b/1/b1617e7fce0c5b46a7fc74eeb98c8c054178bfa1.jpeg)

ANY Help??

---

<div class="post-metadata">

**Author:** ![joao-cybersecurity](https://forums.cybrary.it/user_avatar/forums.cybrary.it/joao-cybersecurity/32/11_2.png) [@joao-cybersecurity](https://forums.cybrary.it/u/joao-cybersecurity)\
**Post date:** [March 20, 2025, 11:24am UTC](https://forums.cybrary.it/t/tunneling-and-pivoting-challenge-1-2/441902/2 "2025-03-20T11:24:17Z")

</div>

one must see this:

 ![image](https://forums.cybrary.it/uploads/default/original/3X/5/5/551d2c84cba456a35a2b5decc7ebfb419ec34376.png)

---

<div class="post-metadata">

**Author:** ![CalmQuail2332](https://forums.cybrary.it/user_avatar/forums.cybrary.it/calmquail2332/32/33622_2.png) [@CalmQuail2332](https://forums.cybrary.it/u/CalmQuail2332)\
**Post date:** [March 20, 2025, 2:52pm UTC](https://forums.cybrary.it/t/tunneling-and-pivoting-challenge-1-2/441902/3 "2025-03-20T14:52:51Z")

</div>

It looks like you’re using Metasploit to complete the challenge. The intended solution path involves using the tools cited specifically in the Challenge prompt: hydra, ssh, ping, nmap, proxychains, and curl.

Said differently, you will want to lean on what you learned in Part 2 of the Guided Exercise, rather than Part 1.

---

<div class="post-metadata">

**Author:** ![joao-cybersecurity](https://forums.cybrary.it/user_avatar/forums.cybrary.it/joao-cybersecurity/32/11_2.png) [@joao-cybersecurity](https://forums.cybrary.it/u/joao-cybersecurity)\
**Post date:** [March 20, 2025, 3:20pm UTC](https://forums.cybrary.it/t/tunneling-and-pivoting-challenge-1-2/441902/4 "2025-03-20T15:20:08Z")

</div>

Thanks for the reply. But I am following exactly the guidelines from the exercise 🤔. Or shouldn’t I?

---

<div class="post-metadata">

**Author:** ![CalmQuail2332](https://forums.cybrary.it/user_avatar/forums.cybrary.it/calmquail2332/32/33622_2.png) [@CalmQuail2332](https://forums.cybrary.it/u/CalmQuail2332)\
**Post date:** [March 20, 2025, 5:20pm UTC](https://forums.cybrary.it/t/tunneling-and-pivoting-challenge-1-2/441902/5 "2025-03-20T17:20:48Z")

</div>

You should be following the overview and hints in the Challenge Exercise, which is based on the Guided Exercise - but specifically Part 2 of the Guided Exercise.

As a hint, you should begin by using hydra to obtain the password for the “sam” account on the Challenge server. You can then use that account to connect to ssh on the challenge server.