Sniffing & Spoofingtunnelhttptcpudpsshfirewall

Chisel

Chisel is a fast TCP/UDP tunnel over HTTP, secured via SSH. It provides a single executable for both client and server modes, useful for bypassing firewalls and secure network access.

Description

Chisel is a lightweight tool designed for creating fast TCP/UDP tunnels transported over HTTP, with security provided via SSH. It is particularly useful for passing through firewalls and providing a secure endpoint into networks. The single executable includes both client and server functionality, making it easy to deploy in various scenarios.

Common use cases include tunneling traffic through restrictive firewalls, enabling remote access to internal services, and creating secure proxies. It supports both TCP and UDP protocols, offering flexibility for different networking needs. Chisel is maintained as an open-source project and is available in Kali Linux repositories.

The tool is referenced in advanced training like PEN-200 for HTTP tunneling theory and practice, and PEN-300 for Windows lateral movement techniques such as reverse RDP proxying.

How It Works

Chisel operates by encapsulating TCP/UDP traffic within HTTP requests and responses, secured using SSH for encryption and authentication. It runs in server mode to listen for connections or client mode to establish tunnels, leveraging HTTP to evade deep packet inspection while maintaining high performance through efficient multiplexing.

Installation

bash
sudo apt install chisel

Flags

--helpDisplay help information

Examples

Runs chisel in server mode to listen for client connections
chisel server
Runs chisel in client mode to connect to a server
chisel client
Shows the usage help with available commands and version
chisel -h
Displays help for server mode options
chisel server --help
Displays help for client mode options
chisel client --help
Starts chisel server on a specific port (common usage pattern)
chisel server --port 8080
Updated 2026-04-16kali.org ↗