Pivoting Between Corporate IT and OT Networks with Network Shell

This report demonstrates how the native Windows Netsh utility can be abused to create port-proxy rules that forward RDP from a compromised corporate host into OT/SCADA DMZ assets, enabling lateral movement and potential operational impact; it walks through a penetration-test scenario, persistence and obfuscation considerations, methods to detect such misuse (netstat -b, PowerShell registry queries, network monitoring), and defensive recommendations.