skills.rest
LeoWSY-hashblue
LeoWSY-hashblueCOMMUNITY
Explore all skills by this author →
GitHub

tunneling

Establish secure tunnels into internal networks via supported pivoting tools.

3|1|Updated May 26, 2026
Search Tags:#network#ssh#tunneling#penetration-testing#security-testing#pivoting#dns-tunneling
One-click install
npx skills add https://github.com/LeoWSY-hashblue/-communitytools-custom --skill tunneling
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: tunneling
Source: https://github.com/LeoWSY-hashblue/-communitytools-custom/tree/main/skills/tunneling
Command: npx skills add https://github.com/LeoWSY-hashblue/-communitytools-custom --skill tunneling

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Establishes secure tunnels to pivot into internal networks from an external vantage point, enabling controlled access during security assessments.

Core Features & Use Cases

  • Multi-tool pivoting: supports Ligolo-ng, Chisel, FRP, SSH, ReGeorg, DNS tunneling, EarthWorm, Ngrok for various network egress scenarios.
  • Internal access through pivots: enables access to segmented internal hosts via tunneled paths.
  • Use Case: Imagine a tester at the edge of a network needing to reach a protected subnet; deploy a tunnel and route traffic through a pivot to reach the target.

Quick Start

Establish a tunnel from the attack machine to a suitable pivot using a chosen tunneling tool.

Frequently Asked Questions about tunneling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I pivot into an internal network through a secure tunnel during a penetration test?▼

Secure tunneling establishes encrypted paths from an external attack machine to an internal pivot, enabling controlled access to segmented hosts during security assessments. You deploy a compatible tunneling tool to route traffic through a network-accessible pivot point.

When do I need DNS tunneling for network access?▼

DNS tunneling is needed when outbound connectivity is restricted and standard ports are blocked, requiring DNS protocols to route traffic. It enables access to segmented internal hosts via tunneled paths during red-team operations where standard egress is unavailable.

Does this tunneling approach work with Ligolo-ng and Chisel?▼

This approach supports multi-tool pivoting with Ligolo-ng, Chisel, FRP, SSH, ReGeorg, EarthWorm, and Ngrok. You can deploy any of these compatible tunneling tools to establish a tunnel from the attack machine to a suitable pivot for internal access.

What is the best way to reach a protected subnet from the network edge?▼

The best way to reach a protected subnet is deploying a secure tunnel to route traffic through a pivot with network reachability. This enables a tester at the network edge to bypass restrictions and establish controlled access to the target internal hosts.

Do I need prior authorization to establish tunnels for internal access?▼

Proper authorization is required before establishing secure tunnels to pivot into internal networks. This approach is applied to penetration testing and internal assessment workflows, ensuring controlled access for security assessments remains within authorized boundaries.

Related Skills

Explore More Software Engineering Skills→
ersinkocersinkoc
2

Tunneling and Covert Channels

Identify SSH, DNS, ICMP, HTTP and TCP tunneling techniques to bypass network controls in lab environments.

Community
Advanced
infantesromeroadrianinfantesromeroadrian

web2-recon

Automate web2 reconnaissance with subdomain enumeration, live host discovery, and vulnerability scanning.

Community
Advanced
blacklanternsecurityblacklanternsecurity
253

pivoting-tunneling

Establish SSH, Ligolo-ng, Chisel, socat, and DNS/ICMP tunnels through compromised hosts.

Official
Advanced
wgpsecwgpsec
1.6k

multi-layer-network

Coordinate multi-hop SSH, FRP, and Chisel tunnels with SOCKS proxies to pivot from a DMZ to internal networks.

Official
Advanced