# nicocha30/ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Repository: https://github.com/nicocha30/ligolo-ng
Canonical: https://ross.abutalabs.com/products/ligolo-ng
Homepage: https://docs.ligolo.ng
Language: Go
License: GPL-3.0
License Family: copyleft
Topics: redteam, tunneling, golang, post-exploitation, offensive-security, pentest-tool, pentesting, pivoting, security
Last push: 2026-08-11T09:32:55+00:00

## Health v2 (maintenance only)
Score: 98/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 97, release rhythm 97, longevity 100
- inputs: {"age_days": 1862, "days_push": 22, "days_rel": 22, "gap_med": 22.5, "n_releases_24m": 9}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 4893, forks 462 (observed 2026-08-28T04:09:02.020176+00:00)

## What it is
Ligolo-ng is a tunneling and pivoting tool written in Go that establishes tunnels over reverse TCP/TLS connections using a TUN interface instead of SOCKS proxies. It creates a userland network stack with Gvisor, letting pentesters run tools like nmap through the tunnel without proxychains, with no privileges required on the agent side.

## Use cases
- pivot into an internal network during a pentest
- tunnel traffic through a compromised host without SOCKS or proxychains
- run nmap and other tools against remote internal networks
- establish reverse tunnels from agents behind firewalls
- set up multiplayer tunneling with a web interface for red team operations
- bind and listen on sockets on a remote agent

## When to choose
- you need VPN-like pivoting without SOCKS proxies or proxychains
- you cannot get elevated privileges on the target agent
- you want fast multiplexed tunnels with TCP/UDP/ICMP support
- you need cross-platform agents (Windows, Linux, macOS, BSD) with a single Go binary

## When to avoid
- you only need simple port forwarding that SSH or chisel already covers
- you cannot create a TUN interface on your relay/proxy server
- you need a stealth-focused C2 rather than an explicit tunneling tool

## Facets
- artifact type: cli-tool
- maturity: active
- function: networking, security, proxy, vpn
- domain: security, penetration-testing, networking
- platform: windows, bsd, go, cross-platform, cli
- tags: tunneling, pivoting, red-team, post-exploitation, tun-interface, reverse-tunnel, pentesting, socks-alternative, command-line, linux, macos

## Member repositories
- nicocha30/ligolo-ng (main) score 98

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:09:02.020176+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:18:11.059001+00:00, confidence not recorded.
  - readme: https://github.com/nicocha30/ligolo-ng (fetched 2026-08-28T04:09:02.020176+00:00, sha c72e84c9b44d)
  - homepage: https://docs.ligolo.ng (fetched 2026-08-29T09:00:24.599526+00:00, sha ca7c22f462ae)
  - site_page: https://docs.ligolo.ng/InstallBuild (fetched 2026-08-29T09:00:24.601982+00:00, sha fef176a10a3f)
  - site_page: https://docs.ligolo.ng/Quickstart (fetched 2026-08-29T09:00:24.603639+00:00, sha 7c57b3aef83a)
- Data as of 2026-08-30T08:39:29.467469+00:00.