What tool and process are you going to use in order to remain undetected by an IDS while pivoting and passing traffic over a server you've compromised and gained root access to?

Telnet transmits all data in plaintext without any encryption, making it one of the least suitable tools for evading network inspection and IDS detection.

Cryptcat extends Netcat's functionality by adding Twofish encryption to all transmitted data, ensuring that traffic tunneled through a compromised server appears as encrypted, unrecognizable ciphertext to an IDS rather than matching known malicious signatures. This allows an attacker with root access to create covert encrypted channels for pivoting without triggering IDS alerts based on plaintext patterns.

Using HTTP does not encrypt traffic; HTTP payloads are transmitted in cleartext and are fully inspectable by IDS/IPS systems and deep packet inspection engines.

Alternate Data Streams is an NTFS file system feature used to hide data within files on disk, and has no mechanism for concealing or encrypting outgoing network packets from IDS inspection.