tunneling-and-pivoting

Name: tunneling-and-pivoting
Availability: InStock
Author: Prohao42

Establish network tunnels and pivot paths from compromised hosts.

120|8|Updated Jun 2, 2026

Search Tags:#ssh #red-team #tunneling #penetration-testing #network-security #pivoting

Ready to run

npx skills add https://github.com/Prohao42/aimy-sikll --skill tunneling-and-pivoting-prohao42

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: tunneling-and-pivoting
Source: https://github.com/Prohao42/aimy-sikll/tree/main/ai-mian/hack-skills/skills/tunneling-and-pivoting
Command: npx skills add https://github.com/Prohao42/aimy-sikll --skill tunneling-and-pivoting-prohao42

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Tunneling and pivoting playbook for establishing network access through compromised hosts, enabling controlled exploration of internal networks via multiple techniques and routes.

Core Features & Use Cases

SSH tunneling with local/remote/dynamic forwards and multi-hop pivots
Chisel, Ligolo-ng, socat, DNS/ICMP/HTTP tunneling, DNS tunneling, and ProxyChains configuration
Use cases include accessing internal services through a pivot, multi-layer pivoting, and Windows pivoting considerations

Quick Start

Provide a pivoting scenario and I will generate a tunneling plan with concrete commands.

Frequently Asked Questions about tunneling-and-pivoting

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I set up SSH tunneling and multi-hop pivoting to access internal networks?▼

SSH tunneling establishes network access through compromised hosts using local, remote, and dynamic port forwards. Multi-hop pivoting chains these SSH tunnels to route connections sequentially across multiple internal hosts.

What is the best way to pivot through a compromised host during penetration testing?▼

Pivoting through a compromised host involves creating a tunneling plan using techniques like reverse SOCKS proxies, Chisel, or Ligolo-ng. This enables controlled exploration and routing traffic into otherwise unreachable internal network segments.

Can I tunnel network traffic over DNS or ICMP if standard ports are blocked?▼

Yes, DNS tunneling and ICMP tunneling encapsulate network traffic within allowed protocol packets to bypass port restrictions. This Skill provides step-by-step guidance for configuring these alternative tunneling methods during penetration testing.

Does this tunneling playbook support Windows pivoting and proxychains configuration?▼

Yes, the playbook covers Windows pivoting considerations and detailed ProxyChains configuration. It provides structured commands for routing traffic through established tunnels across diverse operating system environments.

When should I use Chisel or Ligolo-ng instead of standard SSH dynamic port forwarding?▼

Use Chisel or Ligolo-ng when standard SSH dynamic port forwarding is insufficient or blocked. These tools establish reverse SOCKS proxies and alternative tunneling paths, offering flexible routing for complex, multi-layered internal network access scenarios.