{"enrichment":{"faq":[{"a":"tunneling-and-pivoting is a skill for establishing network tunnels through compromised hosts to access internal systems. It enables you to pivot from an initial foothold into deeper network layers, bypass egress filtering, and chain multiple hops together for lateral movement and reconnaissance.","q":"What is tunneling-and-pivoting and why use it?"},{"a":"tunneling-and-pivoting covers SSH port forwarding techniques where you configure local or remote port forwards through a compromised host. You can also establish dynamic SOCKS proxies via SSH to route traffic through the pivot point, allowing tools like ProxyChains to transparently redirect connections through the tunnel.","q":"How do you set up SSH tunneling and port forwarding for pivoting?"},{"a":"tunneling-and-pivoting includes Chisel, a fast TCP/UDP tunnel over HTTP. You deploy a Chisel server on your control machine and run a client on the compromised host in reverse mode, creating a SOCKS proxy that routes your traffic back through the pivot for multi-layer network access.","q":"What is Chisel reverse SOCKS proxy setup?"},{"a":"tunneling-and-pivoting teaches DNS tunneling (iodine, dnscat2), ICMP tunneling (ptunnel-ng, icmpsh), and HTTP tunneling (Neo-reGeorg) to bypass egress restrictions. These techniques encapsulate traffic in allowed protocols, enabling command and control or data exfiltration when standard ports are blocked.","q":"How does tunneling-and-pivoting handle egress filtering bypass?"},{"a":"tunneling-and-pivoting covers Windows pivoting with netsh portproxy for local forwarding, plink for SSH-based tunnels, and SSH dynamic SOCKS configuration. These methods let you chain Windows hosts together and access internal services even when direct egress is restricted.","q":"How do you establish tunnel through firewall on Windows?"},{"a":"tunneling-and-pivoting includes Ligolo-ng for transparent TUN-based routing and socat TCP relays for flexible chaining. These enable multi-layer pivoting where traffic flows transparently through multiple compromised hosts, creating complex attack paths for deep internal network access.","q":"What transparent routing and multi-layer pivoting tools does tunneling-and-pivoting teach?"}],"shadow_tags":["network-tunneling","pivot-techniques","egress-bypass","socks-proxy","port-forwarding","multi-hop-routing","firewall-evasion","internal-access","command-and-control"],"summary_rewrite":"Master network tunneling and pivoting techniques to access internal systems from compromised hosts. This skill covers SSH port forwarding, reverse SOCKS proxies via Chisel, transparent TUN-based pivoting with Ligolo-ng, socat relays, DNS/ICMP/HTTP tunneling, ProxyChains configuration, Windows pivoting methods, and multi-layer chaining strategies."},"files":[{"bytes":9322,"path":"skills/tunneling-and-pivoting/SKILL.md","sha256":"d3e413765f2dac9f5d770f61ab3d5459746fa55660f8431497ab32b7ecd783e5","url":"https://skillfed.io/files/yaklang/hack-skills/tunneling-and-pivoting/0d62fd6e/SKILL.md"}],"id":"yaklang/hack-skills/tunneling-and-pivoting","links":{"html":"https://skillfed.io/yaklang/hack-skills/tunneling-and-pivoting","md":"https://skillfed.io/yaklang/hack-skills/tunneling-and-pivoting.md","repo":"https://github.com/yaklang/hack-skills"},"meta":{"agents_supported":[],"first_seen":"2026-07-28","forks":196,"language":"CSS","last_updated":"2026-06-16","license":"MIT","name":"tunneling-and-pivoting","publisher":"yaklang","stars":1480},"relations":{"similar":[{"id":"blacklanternsecurity/red-run/pivoting-tunneling"},{"id":"hypnguyen1209/offensive-claude/network-attack"},{"id":"yaklang/hack-skills/linux-lateral-movement"},{"id":"yaklang/hack-skills/windows-lateral-movement"},{"id":"zebbern/claude-code-guide/ssh-penetration-testing"},{"id":"Aradotso/security-skills/awesome-pentest-tools-catalog"},{"id":"blacklanternsecurity/red-run/auth-coercion-relay"},{"id":"blacklanternsecurity/red-run/network-recon"},{"id":"Unclecheng-li/VulnClaw/intranet-pentest-advanced"},{"id":"yaklang/hack-skills/reverse-shell-techniques"}]},"slug":{"owner":"yaklang","repo":"hack-skills","skill":"tunneling-and-pivoting"},"version":"0d62fd6e"}