Tunneling And Pivoting

This is a comprehensive pivot playbook for moving through compromised networks. It covers SSH tunneling in all variations (local, remote, dynamic, ProxyJump), Chisel for reverse SOCKS proxies, Ligolo-ng for TUN-based transparent routing, and egress-constrained scenarios like DNS tunneling with iodine and ICMP with ptunnel-ng. The decision matrix is the standout piece here, mapping which tool to use based on what's actually allowed outbound (TCP any port, HTTP only, DNS only, etc.). It also handles Windows-specific pivoting with netsh and plink. If you're doing red team work or need to route tools through multi-layer networks, this gives you the syntax and logic for most common scenarios without having to reconstruct it from fragmented blog posts.

skills.sh installs: 3.7K
GitHub stars: 2.6K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add yaklang/hack-skills --skill tunneling-and-pivoting --agent claude-code

Installs into .claude/skills of the current project.

Files

SKILL: Tunneling & Pivoting — Expert Attack Playbook

AI LOAD INSTRUCTION: Expert tunneling and pivoting techniques. Covers SSH port forwarding (local/remote/dynamic/jump), Chisel reverse SOCKS, Ligolo-ng transparent TUN pivoting, socat relays, DNS/ICMP/HTTP tunneling, ProxyChains configuration, Windows pivoting (netsh/plink), and multi-layer chaining. Base models miss egress-aware tool selection and transparent routing setup.