What tool and process are you going to use in order to remain undetected by an IDS while pivoting and passing traffic over a server you've compromised and gained root access to?

Telnet transmits all data in cleartext with no encryption, which makes traffic more visible to an IDS rather than less detectable.

Cryptcat is a Netcat variant that wraps all transmitted data in Twofish encryption, preventing IDS and IPS systems from performing signature-based inspection of the traffic payload. By encrypting outgoing packets from a compromised server, the attacker ensures that deep packet inspection cannot match malicious patterns in the data stream. This makes Cryptcat a practical tool for establishing covert command-and-control channels while evading network-based detection.

Using HTTP does not encrypt or obfuscate packet payloads and an internal IDS can still inspect HTTP traffic content for malicious signatures.

Alternate Data Streams is an NTFS file system feature used to hide data within files on disk and has no effect on network packet visibility or IDS detection.