multi-layer-network

Coordinate multi-hop SSH, FRP, and Chisel tunnels with SOCKS proxies to pivot from a DMZ to internal networks.

1.6k|234|Updated Dec 7, 2019
One-click install
npx skills add https://github.com/wgpsec/AboutSecurity --skill multi-layer-network
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: multi-layer-network
Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/lateral/multi-layer-network
Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill multi-layer-network

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Enables penetration across segmented networks by establishing multi-hop tunnels and proxy chains from a DMZ to internal networks, bypassing firewalls and isolations when direct access is blocked.

Core Features & Use Cases

  • Multi-hop tunneling: Chain SSH/frp/chisel across intermediate hosts to reach protected segments.
  • Proxy orchestration: Deploy and coordinate SOCKS proxies and port forwards for persistent access.
  • Cross-segment pivots: Navigate DMZ -> internal networks and domain controllers with documented strategies.

Quick Start

Start from a DMZ host, configure frp/chisel/SSH tunnels as described, and build a multi-layer path to the target internal network.

Frequently Asked Questions about multi-layer-network

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I pivot from a DMZ to an internal network using multi-hop tunnels?

To pivot from a DMZ to an internal network, multi-hop tunnels chain SSH, frp, or chisel across intermediate hosts to reach protected segments and bypass firewalls. This establishes layered proxy paths for cross-subnet exploitation.

What is the best way to configure chisel and frp for cross-subnet proxying?

Configuring chisel and frp for cross-subnet proxying involves deploying coordinated SOCKS proxies and port forwards across intermediate hosts. This orchestrates persistent access routes to navigate segmented network boundaries.

Can I use SSH tunneling to bypass layered firewalls and reach domain controllers?

SSH tunneling can bypass layered firewalls to reach domain controllers by chaining connections across intermediate hosts. This cross-segment pivot strategy navigates from DMZ hosts directly into protected internal network segments.

How do I set up proxychains with multi-layer network tunnels?

Setting up proxychains with multi-layer network tunnels requires configuring SOCKS proxies via SSH, frp, or chisel on intermediate hosts. This routes traffic sequentially through chained hops to reach isolated internal networks.

When do I need multi-hop tunneling for lateral movement across segmented networks?

Multi-hop tunneling for lateral movement is needed when direct access to internal networks is blocked by firewalls or isolation. It enables cross-segment pivoting from a compromised DMZ host to reach isolated subnets.

Does multi-layer tunneling support port forwarding across intermediate hosts?

Multi-layer tunneling supports port forwarding across intermediate hosts by chaining SSH, frp, and chisel connections. This coordinates persistent proxy routes to navigate segmented networks and reach protected domain controllers.