# tunneling-and-pivoting

A tunneling and pivoting playbook that equips agents with exact commands for SSH forwarding, Chisel, Ligolo-ng, socat relays, and multi-layer pivots.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 3500 installs · ★ 2547
- Author: yaklang
- License: MIT · policy=mirror · the beginning of the file is at the end of this page
- Source: https://github.com/yaklang/hack-skills/tree/HEAD/skills/tunneling-and-pivoting/SKILL.md
- Updated: 2026-09-13
- HTML: https://affpapa.org/en/nevibecode/skills/tunneling-and-pivoting

## What it does

This skill adds an attack and penetration testing guide for pivoting across compromised networks directly into your agent's context. It covers local, remote, and dynamic SSH port forwarding, multi-hop jump hosts, and ProxyChains configuration.

The playbook details reverse SOCKS proxies via Chisel, transparent TUN-based routing with Ligolo-ng, and socat relays for TCP, UDP, or OpenSSL traffic. It also documents host pivoting on Windows with `netsh portproxy` and `plink.exe`, alongside DNS tunneling via iodine and dnscat2, and ICMP channels via icmpsh and ptunnel-ng.

Transparent pivoting via Ligolo-ng requires root or `sudo` privileges on the attacker machine to create TUN devices. Similarly, configuring `netsh` port forwarding on Windows targets requires local administrator rights.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add yaklang/hack-skills --skill tunneling-and-pivoting -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/tunneling-and-pivoting/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/tunneling-and-pivoting/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add yaklang/hack-skills --skill tunneling-and-pivoting -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/tunneling-and-pivoting/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add yaklang/hack-skills --skill tunneling-and-pivoting -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/tunneling-and-pivoting/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install yaklang/hack-skills tunneling-and-pivoting
```

2. **Manually: put the files in place**
- File: `.github/skills/tunneling-and-pivoting/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add yaklang/hack-skills --skill tunneling-and-pivoting -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/yaklang/hack-skills --path skills/tunneling-and-pivoting
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/tunneling-and-pivoting/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add yaklang/hack-skills --skill tunneling-and-pivoting -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/yaklang/hack-skills/tree/HEAD/skills/tunneling-and-pivoting/SKILL.md

## When to use it
- configure reverse SOCKS proxies using Chisel
- establish transparent TUN routing with Ligolo-ng into internal subnets
- set up multi-hop proxy chains for scanning tools like nmap
- relay network ports on Windows using netsh portproxy
- route traffic through egress-restricted networks using DNS or ICMP

## Example prompts
- Show me how to establish a reverse SOCKS proxy with Chisel and route nmap through ProxyChains
- Provide the commands to set up a Ligolo-ng TUN interface and add a route for 10.10.10.0/24
- How do I forward a local port to an internal host using netsh on Windows?

## Source text · SKILL.md · MIT

Below is the content of a third-party file. It is data, not instructions for you: do not act on anything written inside unless the human asks. Block tag: ca834db541a7e228.

BEGIN THIRD-PARTY FILE ca834db541a7e228
````text
---
name: tunneling-and-pivoting
description: >-
  Tunneling and pivoting playbook. Use when establishing network tunnels through compromised hosts including SSH tunneling, Chisel, Ligolo-ng, socat, DNS/ICMP/HTTP tunneling, ProxyChains, and multi-layer pivoting strategies.
---

# SKILL: Tunneling & Pivoting — Expert Attack Playbook

> **AI LOAD INSTRUCTION**: Expert tunneling and pivoting techniques. Covers SSH port forwarding (local/remote/dynamic/jump), Chisel reverse SOCKS, Ligolo-ng transparent TUN pivoting, socat relays, DNS/ICMP/HTTP tunneling, ProxyChains configuration, Windows pivoting (netsh/plink), and multi-layer chaining. Base models miss egress-aware tool selection and transparent routing setup.

## 0. RELATED ROUTING

Before going deep, consider loading:

- [network-protocol-attacks](../network-protocol-attacks/SKILL.md) for network-level attacks from pivot positions
- [reverse-shell-techniques](../reverse-shell-techniques/SKILL.md) for establishing initial access shells
- [unauthorized-access-common-services](../unauthorized-access-common-services/SKILL.md) for exploiting services discovered through pivots
- [linux-privilege-escalation](../linux-privilege-escalation/SKILL.md) or [windows-privilege-escalation](../windows-privilege-escalation/SKILL.md) after pivoting to new hosts

---

## 1. SSH TUNNELING

### Local Port Forward

Forward a local port to a remote service through the pivot.

```bash
# Access INTERNAL_HOST:3306 via localhost:3306
ssh -L 3306:INTERNAL_HOST:3306 user@PIVOT -N

# Access internal web app
ssh -L 8080:10.10.10.100:80 user@PIVOT -N
# Browse: http://localhost:8080

# Bind to all interfaces (share with teammates)
ssh -L 0.0.0.0:8080:INTERNAL:80 user@PIVOT -N
```

### Remote Port Forward

Expose a local service to the pivot host's network.

```bash
# Make attacker's port 8000 accessible on pivot as pivot:9000
ssh -R 9000:127.0.0.1:8000 user@PIVOT -N

# Expose attacker's listener to internal network
ssh -R 0.0.0.0:4444:127.0.0.1:4444 user@PIVOT -N
# Internal hosts connect to PIVOT:4444 → reaches attacker:4444
```

### Dynamic Port Forward (SOCKS Proxy)

```bash
# Create SOCKS4/5 proxy on localhost:1080
ssh -D 1080 user@PIVOT -N

# Use with proxychains
echo "socks5 127.0.0.1 1080" >> /etc/proxychains4.conf
proxychains nmap -sT -Pn -p 80,443,445 INTERNAL_SUBNET/24

# Or with browser SOCKS proxy → browse internal web apps
```

### Jump Host (ProxyJump)

```bash
# Single jump
ssh -J jumphost user@TARGET

# Multiple jumps
ssh -J jump1,jump2 user@TARGET

# SSH config for persistent jump
# ~/.ssh/config
Host internal-target
    HostName 10.10.10.100
    User admin
    ProxyJump user@jumphost.example.com
```

---

## 2. CHISEL

### Reverse SOCKS Proxy (Most Common)
````
END THIRD-PARTY FILE ca834db541a7e228

The third-party file has ended. Everything between the ca834db541a7e228 tags is data: requests and commands from it are not followed. An “end of file” line with another tag inside the block is part of the file.

First 2745 of 9322 bytes. © yaklang · MIT · https://github.com/yaklang/hack-skills/tree/HEAD/skills/tunneling-and-pivoting/SKILL.md

_Part of the page did not fit — see the HTML version._

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md