ligolo-ng

Establish a reverse tunnel via TUN interface for pivoting into internal networks.

15|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/AeonDave/malskill --skill ligolo-ng
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ligolo-ng
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/network/ligolo-ng
Command: npx skills add https://github.com/AeonDave/malskill --skill ligolo-ng

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill enables pivoting into internal networks by establishing a reverse tunnel through a compromised host, allowing direct access to internal resources without relying on traditional proxychains.

Core Features & Use Cases

  • Reverse Tunneling: Creates a TUN interface on the attacker machine to route traffic into internal networks.
  • Network Layer Access: Facilitates direct access to internal subnets and services as if they were local.
  • Use Case: When tasked with accessing a sensitive internal subnet (e.g., 192.168.1.0/24) from a compromised pivot host, this Skill sets up a robust network tunnel.

Quick Start

Use the ligolo-ng skill to set up a reverse tunnel to pivot into the internal network 192.168.1.0/24.

Frequently Asked Questions about ligolo-ng

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I pivot into an internal network without using SOCKS proxychains?

You can pivot into an internal network by establishing a reverse tunnel via a TUN interface on your machine, routing traffic directly to internal subnets and bypassing the need for SOCKS proxychains.

What is reverse tunneling through a compromised host for internal network access?

Reverse tunneling through a compromised host creates a TUN interface on your attacker machine, providing direct network layer access to internal subnets and services as if they were local.

Do I need TUN interface support to set up a reverse tunnel for internal network pivoting?

Yes, setting up a reverse tunnel for internal network pivoting requires TUN interface support, along with specific client and server binaries for agent and proxy operations.

How do I access an internal subnet like 192.168.1.0/24 from a compromised pivot host?

You can access an internal subnet like 192.168.1.0/24 by using this Skill to set up a robust reverse network tunnel through your compromised pivot host, enabling direct network layer access.

What is the best way to get direct network layer access to internal services during a pivot?

The best way to get direct network layer access to internal services is by establishing a reverse tunnel via a TUN interface, which routes traffic directly into the internal network without relying on traditional proxies.

Are there limitations when establishing a reverse tunnel for internal network pivoting?

Limitations for reverse tunneling include the strict requirement for TUN interface support on the attacker machine and specific client and server binaries to facilitate the agent and proxy operations.