nicocha30

    nicocha30/ligolo-ng

    An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

    security
    golang
    offensive-security
    pentest-tool
    pentesting
    pivoting
    Go
    GPL-3.0
    5.1K stars
    497 forks
    5.1K GitHub watchers
    Updated Oct 29, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    2 releases in the last 90 days, the latest 33 days ago, with 14 contributors on GitHub.

    Use Cases & Benefits

    • Provides an advanced tunneling tool using a TUN interface to create userland network stacks for secure pivoting and post-exploitation.
    • Eliminates the need for SOCKS proxies by translating packets directly via a tun interface, enabling faster and simpler network tunneling.
    • Use for pentesters needing seamless TCP/UDP/ICMP tunneling without administrative privileges on the target agent.
    • Use for red teams requiring automatic tunnel recovery and multiplexing across Windows, Linux, MacOS, and BSD platforms.
    • Use for security researchers wanting to run network scanning tools like nmap without proxychains, leveraging direct TCP connect() translation.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    GPL 3.0

    Copyleft: distributing software that includes it generally requires releasing your source under the same license.

    Community files

    • README: present

    Watch-outs

    • GPL-style copyleft: including it in distributed software generally requires releasing your source under the same license.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    An advanced, yet simple, tunneling tool that uses TUN interfaces.

    Ligolo-ng is a simple, lightweight and fast tool that allows pentesters to establish tunnels from a reverse TCP/TLS connection using a tun interface (without the need of SOCKS).

    Excerpt from the nicocha30/ligolo-ng README on GitHub (GPL-3.0 license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Sep 14: +12Sep 15: +5Oct 2: +4

    +172 stars over 47 days across 7 snapshot days; best day +12 on Sep 14.

    Forks

    497+18

    Open issues

    18-2

    Compared with peers in Security

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth

    nicocha30/ligolo-ng compared with Security repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    cloudflare/security-audit-skill61.7K+8.8K17—
    KeygraphHQ/shannon51.2K+1.1K328 days ago
    vxcontrol/pentagi33.5K+7123831 days ago
    Asymptote-Labs/agent-beacon3.3K+36040today
    caddyserver/caddy78.8K+267601 day ago
    nicocha30/ligolo-ng5.1K—3233 days ago
    Category median51.2K+71238—

    Discover Repositories

    Search across tracked repositories by name or description