Post Exploitationpivotingtunnelingnetworkproxypentesting

ligolo-mp

Ligolo-MP is an advanced multiplayer pivoting solution based on Ligolo-ng, featuring a client-server architecture for collaborative use with multiple concurrent tunnels. It automatically manages TUN interfaces and provides a clean GUI for tracking.

Description

Ligolo-MP enables pentesters to establish and manage multiple concurrent tunnels collaboratively through its client-server architecture. This makes it ideal for team-based penetration testing scenarios where shared access to network pivots is required.

The tool handles all TUN interfaces automatically, reducing manual configuration overhead. Its GUI offers a clear view of tunnel status, connections, and activity, improving operational awareness during engagements.

Designed as an enhancement over Ligolo-ng, it supports advanced pivoting workflows in complex network environments.

How It Works

Ligolo-MP operates with a client-server model where the server listens for agent connections and manages TUN interfaces automatically. It supports multiple concurrent tunnels, connection pooling, and inflight TCP connection limits, enabling efficient proxying and pivoting across networks via a GUI-tracked interface.

Installation

bash
sudo apt install ligolo-mp

Flags

-agent-addrlistening address (default "0.0.0.0:11601")
-daemonenable daemon mode
-max-connectionper tunnel connection pool size (default 1024)
-max-inflightmax inflight TCP connections (default 4096)

Examples

Display help and usage information for the ligolo-mp server
ligolo-mp -h
Display help and usage information for the ligolo-mp-client
ligolo-mp-client -h
Start server listening on default agent address
ligolo-mp -agent-addr 0.0.0.0:11601
Run server in daemon mode
ligolo-mp -daemon
Set per tunnel connection pool size to 2048
ligolo-mp -max-connection 2048
Set max inflight TCP connections to 8192
ligolo-mp -max-inflight 8192
Updated 2026-04-16kali.org ↗