ligolo-ng

Establish a reverse tunnel via TUN interface for pivoting into internal networks.

15|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/AeonDave/malskill --skill ligolo-ng
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ligolo-ng
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/network/ligolo-ng
Command: npx skills add https://github.com/AeonDave/malskill --skill ligolo-ng

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill enables pivoting into internal networks by establishing a reverse tunnel through a compromised host, allowing direct access to internal resources without relying on traditional proxychains.

Core Features & Use Cases

  • Reverse Tunneling: Creates a TUN interface on the attacker machine to route traffic into internal networks.
  • Network Layer Access: Facilitates direct access to internal subnets and services as if they were local.
  • Use Case: When tasked with accessing a sensitive internal subnet (e.g., 192.168.1.0/24) from a compromised pivot host, this Skill sets up a robust network tunnel.

Quick Start

Use the ligolo-ng skill to set up a reverse tunnel to pivot into the internal network 192.168.1.0/24.

Frequently Asked Questions about ligolo-ng

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I pivot into an internal network without using SOCKS proxychains?▼

You can pivot into an internal network by establishing a reverse tunnel via a TUN interface on your machine, routing traffic directly to internal subnets and bypassing the need for SOCKS proxychains.

What is reverse tunneling through a compromised host for internal network access?▼

Reverse tunneling through a compromised host creates a TUN interface on your attacker machine, providing direct network layer access to internal subnets and services as if they were local.

Do I need TUN interface support to set up a reverse tunnel for internal network pivoting?▼

Yes, setting up a reverse tunnel for internal network pivoting requires TUN interface support, along with specific client and server binaries for agent and proxy operations.

How do I access an internal subnet like 192.168.1.0/24 from a compromised pivot host?▼

You can access an internal subnet like 192.168.1.0/24 by using this Skill to set up a robust reverse network tunnel through your compromised pivot host, enabling direct network layer access.

What is the best way to get direct network layer access to internal services during a pivot?▼

The best way to get direct network layer access to internal services is by establishing a reverse tunnel via a TUN interface, which routes traffic directly into the internal network without relying on traditional proxies.

Are there limitations when establishing a reverse tunnel for internal network pivoting?▼

Limitations for reverse tunneling include the strict requirement for TUN interface support on the attacker machine and specific client and server binaries to facilitate the agent and proxy operations.