+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Hacking Tools (https://sinister.ly/Forum-Hacking-Tools)
+--- Thread: Legends Ligolo-ng — Tunneling/Pivoting Without SOCKS (/Thread-Legends-Ligolo-ng-%E2%80%94-Tunneling-Pivoting-Without-SOCKS)
Ligolo-ng — Tunneling/Pivoting Without SOCKS - The High Roller - 09-12-2026
```
LIGOLO-NG — TUNNELING/PIVOTING WITHOUT SOCKS
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
What It Is
Ligolo-ng is a simple, lightweight and fast tool that allows pentesters to establish tunnels from a reverse TCP/TLS connection using a tun interface, meaning no more messing with SOCKS or proxychains.
Why It's Different
Instead of using a SOCKS proxy or TCP/UDP forwarders, Ligolo-ng creates a userland network stack using Gvisor. When the relay/proxy server runs, a tun interface handles translated packets straight to the agent's remote network, so tools like nmap just work without proxychains slowing everything down.
Key Features
- Tun interface (no more SOCKS/proxychains)
- Simple UI with agent selection and network info
- Automatic Let's Encrypt certificate configuration
- High performance via multiplexing
- Agent requires no privileges to run
- Socket listening/binding on the agent
- Cross-platform agent support
- Handles multiple simultaneous tunnels
- Reverse or bind connections
- Automatic tunnel/listener recovery on network issues
- WebSocket support
New in 0.8
- API + web interface for multiplayer use
- Simple config file for tunneling/proxy settings
- Daemon mode to run as a service
- Auto-bind: automatic tunneling when a specific agent connects
- Auto route/interface management on Windows, Linux, macOS, and BSD
- Agent kill, for remotely terminating an agent
Requirements
The agent side needs zero admin/root access. The relay/proxy server side does need permission to create a tun interface.
Supported Protocols
- TCP
- UDP
- ICMP (echo requests)
Performance
Easily hits 100+ Mbits/sec in real-world iperf tests between 200Mbits/s links.
Caveats
Since the agent runs unprivileged, raw packet forwarding isn't possible. Use nmap's --unprivileged or -PE flags to avoid false positives on SYN scans.
LINKS
4.9k stars, 467 forks, GPL-3.0 licensed. Written in Go.
```