Scaling New Walls with Old Ladders

This article by a TrustedSec researcher describes a lightweight, disk‑minimal service proxy architecture (service proxy + broker + client library wrapper) that enables an attacker with a low-privilege webshell on Windows to proxy TCP and DNS through a victim to reach internal networks, bypass firewalls/NAT and VPN split-tunnel restrictions, and support multiple simultaneous connections for browsing and enumeration.