Legends Ligolo-ng — Tunneling/Pivoting Without SOCKS

The High Roller · 55 minutes ago

```

LIGOLO-NG — TUNNELING/PIVOTING WITHOUT SOCKS

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

What It Is
Ligolo-ng is a simple, lightweight and fast tool that allows pentesters to establish tunnels from a reverse TCP/TLS connection using a tun interface, meaning no more messing with SOCKS or proxychains.

Why It's Different
Instead of using a SOCKS proxy or TCP/UDP forwarders, Ligolo-ng creates a userland network stack using Gvisor. When the relay/proxy server runs, a tun interface handles translated packets straight to the agent's remote network, so tools like nmap just work without proxychains slowing everything down.

Key Features

Tun interface (no more SOCKS/proxychains)
Simple UI with agent selection and network info
Automatic Let's Encrypt certificate configuration
High performance via multiplexing
Agent requires no privileges to run
Socket listening/binding on the agent
Cross-platform agent support
Handles multiple simultaneous tunnels
Reverse or bind connections
Automatic tunnel/listener recovery on network issues
WebSocket support

New in 0.8

API + web interface for multiplayer use
Simple config file for tunneling/proxy settings
Daemon mode to run as a service
Auto-bind: automatic tunneling when a specific agent connects
Auto route/interface management on Windows, Linux, macOS, and BSD
Agent kill, for remotely terminating an agent

Requirements
The agent side needs zero admin/root access. The relay/proxy server side does need permission to create a tun interface.

Supported Protocols

TCP
UDP
ICMP (echo requests)

Performance
Easily hits 100+ Mbits/sec in real-world iperf tests between 200Mbits/s links.

Caveats
Since the agent runs unprivileged, raw packet forwarding isn't possible. Use nmap's --unprivileged or -PE flags to avoid false positives on SYN scans.

LINKS

4.9k stars, 467 forks, GPL-3.0 licensed. Written in Go.

```