https://github.com/sshuttle/sshuttle
Sshuttle usage:
On Kali, through PTK:
sshuttle --dns -vr [username]@[IP] 0/0 --ssh-cmd 'ssh -i /root/.ssh/id_rsa.pub' -x [address to exclude]
Sshuttle Mac through PTK:
sshuttle --dns -vr [host/IP] 0/0 -x [exclude address]
On linux host (with your ssh keys and config in place):
sshuttle --dns -l 0.0.0.0 -vr [host/IP] 0/0 -x [exclude IP] -x <local subnet>
On Windows:
route add 0.0.0.0 mask 0.0.0.0 <sshuttle host IP>
Add fqdn (lab.local, etc) to hosts file pointing to DC IP.
runas /netonly /user:domain\user powershell.exe -OR- Mimikatz kerberos::ptc to use a ccache file.