Ligolo-ng

What it is

Ligolo-ng is a free open-source tunneling tool for authorised network engagements (github.com/nicocha30/ligolo-ng, docs at docs.ligolo.ng). An agent on a compromised or permitted host connects back to an operator proxy that presents a tun interface, so reachable networks can be pivoted without traditional SOCKS-only workflows. It is a staple of modern HTB Academy pivoting and post-exploitation labs.

What it helps with

- Building reverse tunnels from authorised footholds into operator-controlled routes.
- Pivoting into internal segments during HTB-style multi-host and AD network labs.
- Avoiding some of the friction of older SOCKS-centric pivoting chains when a tun interface fits the engagement.
- Supporting red-team and pentest lateral movement exercises under clear rules of engagement.
- Running cross-platform agents and proxies under GPL-3.0 without a commercial licence for the core tool.
- Pairing with enumeration and AD tooling already used in Academy paths after initial access.

Who it's for

Penetration testers and HTB Academy students practising authorised pivoting and tunneling, as a modern peer to Chisel-style workflows.

Worth knowing

Ligolo-ng is free and open source (GPL-3.0). Official repository: github.com/nicocha30/ligolo-ng. Documentation: docs.ligolo.ng. Authorised network testing and lab use only; tunneling into networks without permission is illegal.