Tunneling & Pivoting

socat

Multipurpose relay for bidirectional data transfer (sockets, files, exec).

intermediate

Linux

Post-Exploitation

Lateral Movement

Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.

Port forwards, simple shells, protocol bridging in constrained envs.

Chain addresses (TCP, OPENSSL, EXEC); build reverse shells or relays.

Swiss army knife for network plumbing.

Commands & usage

socat TCP-LISTEN:443,reuseaddr,fork EXEC:/bin/bash,pty,stderr

socat TCP-LISTEN:8080,fork TCP:127.0.0.1:80

Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.

Chisel

Fast TCP/UDP tunnel over HTTP secured with SSH-like crypto.

Ligolo-ng

Advanced pivoting tool using a TUN interface — no SOCKS headaches.

sshuttle

Transparent proxy VPN over SSH without needing admin on remote.

Proxychains-ng

Force TCP connections from dynamic tools through a proxy/SOCKS.

SSH Tunneling

Local/remote/dynamic port forwarding built into SSH.