ligolo-ng
Advanced, yet simple, tunneling/pivoting tool that uses a TUN interface
Site oficial:
https://github.com/nicocha30/ligolo-ng
Empacotamento:
https://gitlab.com/kalilinux/packages/ligolo-ng
Versão no Kali: 0.8.3-0kali1 · Arquiteturas: amd64 arm64 · Comandos: 2
Metapacotes:
kali-linux-everything
Documentação do Kali:
https://www.kali.org/tools/ligolo-ng/
Ligolo-ng is a simple, lightweight and fast tool that allows pentesters to establish tunnels from a reverse TCP/TLS connection using a tun interface (without the need of SOCKS).
sudo apt install ligolo-ng (25.74 MB)
Dependências: libc6
Escolha um comando ao lado para ver a descrição e a ajuda completa.
ligolo-agent
root@kali:~# ligolo-agent -h
-accept-fingerprint string
accept certificates matching the following SHA256 fingerprint (hex format)
-bind string
bind to ip:port
-connect string
connect to proxy (domain:port)
-ignore-cert
ignore TLS certificate validation (dangerous), only for debug purposes
-proxy string
proxy URL address (http://admin:secret@127.0.0.1:8080) or socks://admin:secret@127.0.0.1:8080
-reconnect
auto-reconnect after established connection is lost (default true)
-reconnect-delay int
reconnection delay in seconds (default: 20) (default 20)
-reconnect-timeout int
total reconnection timeout in seconds (default: 300 = 5 minutes) (default 300)
-retry
auto-retry on initial connection error
-retry-delay int
retry delay in seconds for initial connection (default: 5) (default 5)
-ua string
HTTP User-Agent (default "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36")
-v enable verbose mode
-version
show the current version
ligolo-proxy
root@kali:~# ligolo-proxy -h
-allow-domains string
autocert authorised domains, if empty, allow all domains, multiple domains should be comma-separated.
-api-laddr string
API server listening address (default: 127.0.0.1:8080)
-autocert
automatically request letsencrypt certificates, requires port 80 to be accessible
-certfile string
TLS server certificate (default "certs/cert.pem")
-config string
the config file to use
-cpuprofile file
write cpu profile to file
-daemon
run as daemon mode (no CLI)
-keyfile string
TLS server key (default "certs/key.pem")
-laddr string
listening address (prefix with http(s):// for websocket) (default "0.0.0.0:11601")
-memprofile file
write memory profile to file
-nobanner
don't show banner on startup
-selfcert
dynamically generate self-signed certificates
-selfcert-domain string
The selfcert TLS domain to use (default "ligolo")
-v enable verbose mode
-version
show the current version
