Basic usage of Ligolo-ng
Basic commands
To simplify the process during an assessment and avoid unnecessary complications, the following commands can be used to establish a tunnel between the target machine and the attacker machine:
Download: https://github.com/nicocha30/ligolo-ng/releases
For the attacker machine, use the proxy
For the target, use agent.
On the attacker machine, launch Ligolo-ng with administrative (sudo) privileges:
sudo ./proxy -selfcert
On the target machine (when using Windows), execute the following command:
.\agent.exe -connect 192.168.1.2:11601 -accept-fingerprint FC0***054
At this point, a connection will be established. To automatically route traffic through a specified interface, use the following command:
session 1 # Select the session
autoroute # select the interface
Once the connection is established, you can effortlessly execute commands, which will facilitate a connection to the specified proxied network.
Other Ligolo-ng alternatives
- Chisel: A fast TCP/UDP tunnel, perfect for lightweight tasks. GitHub Repository
- Ligolo-MP: A multi-purpose variant of Ligolo. GitHub Repository
- Proxychains: Can be integrated with SSH and other protocols to route traffic through proxies. GitHub Repository