tunneling-and-pivoting

Establish network tunnels and pivoting strategies for security operations using SSH, Chisel, Ligolo-ng, and more.

Updated Jun 11, 2026
One-click install
npx skills add https://github.com/utsavthakur/agenticskills --skill tunneling-and-pivoting-utsavthakur
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: tunneling-and-pivoting
Source: https://github.com/utsavthakur/agenticskills/tree/main/tunneling-and-pivoting
Command: npx skills add https://github.com/utsavthakur/agenticskills --skill tunneling-and-pivoting-utsavthakur

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive guide to various network tunneling and pivoting techniques, enabling users to establish secure and stealthy connections through compromised hosts for security operations.

Core Features & Use Cases

  • SSH Tunneling: Establish secure connections between local and remote systems.
  • Chisel: Utilize reverse SOCKS proxies for network traversal.
  • Ligolo-ng: Transparent TUN pivoting for network routing without SOCKS.
  • SOCAT: TCP and UDP port forwarding and relay functionalities.
  • ProxyChains/Proxifier: Configure proxy chains for complex proxy configurations.
  • Windows Pivoting: Techniques for pivoting within Windows environments.
  • DNS/ICMP/HTTP Tunnelling: Methods to tunnel network traffic over restricted protocols.
  • Pivot Decision Matrix: A guide for selecting the appropriate tool based on network conditions.
  • Use Case: A security analyst uses this Skill to establish a secure connection to an internal network through a compromised host and conduct a network scan using Chisel.

Quick Start

Execute the skill to begin exploring the advanced network tunneling and pivoting techniques provided in the guide.

Frequently Asked Questions about tunneling-and-pivoting

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I pivot through a compromised host to scan an internal network?

Network pivoting through a compromised host uses tools like Chisel or Ligolo-ng to route traffic into restricted internal networks, enabling security operations like network scanning from an external connection.

What's the best way to establish a reverse SOCKS proxy for network traversal?

Establishing a reverse SOCKS proxy for network traversal is best handled using Chisel, which creates secure TCP tunnels to bypass network restrictions and route traffic through compromised hosts.

How does Ligolo-ng handle transparent TUN pivoting without SOCKS proxies?

Ligolo-ng handles transparent TUN pivoting by creating a virtual network interface, routing traffic directly without SOCKS proxies, simplifying network traversal during security operations.

Can I tunnel network traffic over restricted protocols like DNS or ICMP?

Yes, you can tunnel network traffic over restricted protocols like DNS, ICMP, and HTTP to bypass network restrictions, utilizing methods provided in the tunneling guide for stealthy access.

Do I need prior knowledge of network protocols to use these pivoting techniques?

Yes, applying these pivoting and tunneling techniques requires prior knowledge of network protocols and security tools to effectively establish secure connections in restricted environments.

When should I use SOCAT instead of SSH tunneling for port forwarding?

Use SOCAT instead of SSH tunneling when you need specialized TCP and UDP port forwarding or relay functionalities, guided by the pivot decision matrix to select the appropriate tool based on network conditions.