Tunnel through RDP

Summary

RDP server allows access to the client's files using the \\tsclient share. By using that share for a File Tunnel, you can route traffic between the local and remotes hosts.

Host A

ft.exe --write "C:\Temp\1.dat" --read "C:\Temp\2.dat" -L 5000:192.168.1.50:8888

Run an RDP client and ensure local drives are shared as shown here.

RDP to Host B.

Host B

ft.exe --read "\\tsclient\c\Temp\1.dat" --write "\\tsclient\c\Temp\2.dat"

Now on Host A, you can connect to 127.0.0.1:5000 and it will be forwarded to 192.168.1.50:8888