sysdream/ligolo

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1788 stars · 227 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Ligolo is a lightweight Go tool for establishing SOCKS5 or TCP tunnels over reverse TLS connections, aimed at penetration testers pivoting into internal networks. It consists of a relay server (localrelay) run on the attacker's machine and an agent run on the compromised target.

Use cases

• pivot into an internal network after compromising a server during a pentest
• establish a SOCKS5 proxy through a reverse connection
• relay RDP or other TCP connections through a compromised host
• tunnel traffic out of a LAN without SSH or Meterpreter
• set up encrypted reverse tunnels with TLS certificates

When to choose

• you need a stable, fast alternative to Meterpreter autoroute/Socks4a for pivoting
• you want a simple single-binary reverse tunnel with TLS encryption
• you are doing external or internal network penetration testing

When to avoid

• you need a general-purpose VPN or full network-layer tunneling solution
• you require ongoing feature development, as the project has seen no releases since early 2023
• you need a GUI or non-command-line workflow

Facets

cli-tool · maturity maintenance

networking proxy security cli security penetration-testing networking windows go cross-platform reverse-tunnel socks5 pentesting pivoting tls command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="sysdream/ligolo")