nicocha30/ligolo-ng

Health v2 · maintenance only

Adoption not part of the score

4893 stars · 462 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Ligolo-ng is a tunneling and pivoting tool written in Go that establishes tunnels over reverse TCP/TLS connections using a TUN interface instead of SOCKS proxies. It creates a userland network stack with Gvisor, letting pentesters run tools like nmap through the tunnel without proxychains, with no privileges required on the agent side.

Use cases

• pivot into an internal network during a pentest
• tunnel traffic through a compromised host without SOCKS or proxychains
• run nmap and other tools against remote internal networks
• establish reverse tunnels from agents behind firewalls
• set up multiplayer tunneling with a web interface for red team operations
• bind and listen on sockets on a remote agent

When to choose

• you need VPN-like pivoting without SOCKS proxies or proxychains
• you cannot get elevated privileges on the target agent
• you want fast multiplexed tunnels with TCP/UDP/ICMP support
• you need cross-platform agents (Windows, Linux, macOS, BSD) with a single Go binary

When to avoid

• you only need simple port forwarding that SSH or chisel already covers
• you cannot create a TUN interface on your relay/proxy server
• you need a stealth-focused C2 rather than an explicit tunneling tool

Facets

cli-tool · maturity active

networking security proxy vpn security penetration-testing networking windows bsd go cross-platform cli tunneling pivoting red-team post-exploitation tun-interface reverse-tunnel pentesting socks-alternative command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="nicocha30/ligolo-ng")