On a compromised Windows host, use netsh interface portproxy to configure an IPv4 TCP listener that forwards incoming connections to a specified IPv4 address and port. This can relay traffic through the host into an internal network as internal-proxy behavior (ATT&CK T1090.001); successful configuration does not itself make the listener reachable or prove the destination service accepted a connection.
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER