Ligolo-ng MCP Server

A Model Context Protocol (MCP) server for managing Ligolo-ng - a lightweight and fast tunneling tool for establishing reverse TCP/TLS tunnels during penetration testing and red team engagements.

Overview

This MCP server enables AI assistants to control Ligolo-ng operations on a remote Kali Linux machine via SSH. It provides tools for managing the proxy server, agents, tunnels, routes, and listeners - all the core functionality needed for network pivoting during security assessments.

Features

• Proxy Management: Start, stop, and monitor the Ligolo-ng proxy server

• Agent Control: List connected agents and manage sessions

• Network Interface: Create and manage TUN interfaces for tunneling

• Tunnel Operations: Start/stop tunnels through agent sessions

• Route Management: Add and remove routes to target networks

• Listener Configuration: Set up port forwarding through agents

• Agent Command Generation: Generate agent connection commands for targets

Prerequisites

• Node.js 18+

• SSH access to a Kali Linux machine with Ligolo-ng installed

• SSH key-based authentication configured (passwordless SSH)

Installation

# Clone the repository
git clone https://github.com/schwarztim/sec-ligolo-ng-mcp.git
cd sec-ligolo-ng-mcp

# Install dependencies
npm install

# Build the project
npm run build

Configuration

Environment Variables

SSH Configuration

Ensure your SSH config (~/.ssh/config) has an entry for your Kali machine:

Host kali
    HostName 192.168.1.100
    User root
    IdentityFile ~/.ssh/id_rsa

Claude Desktop Integration

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "ligolo-ng": {
      "command": "node",
      "args": ["/path/to/sec-ligolo-ng-mcp/dist/index.js"],
      "env": {
        "KALI_HOST": "kali",
        "LIGOLO_PROXY_PORT": "11601"
      }
    }
  }
}

Available Tools

Proxy Management

Session Management

Network Configuration

Routing

Port Forwarding

Utilities

Usage Example

Basic Pivoting Workflow

1. Start the proxy on Kali:

   Use ligolo_proxy_start with selfcert enabled

2. Generate agent command:

   Use ligolo_agent_command with your Kali IP

3. Create TUN interface:

   Use ligolo_interface_create

4. After agent connects, add routes:

   Use ligolo_route_add with network 10.10.10.0/24

5. Start the tunnel:

   Use ligolo_tunnel_start

Now you can access the 10.10.10.0/24 network through your Kali machine.

Setting Up Reverse Shell Callback

Use listeners to receive reverse shells through the pivot:

Use ligolo_listener_add with:
  localAddress: 0.0.0.0:4444
  remoteAddress: 127.0.0.1:4444

This forwards connections from port 4444 on the agent back to your Kali's port 4444.

Security Considerations

• This tool is designed for authorized security testing only

• Always use certificate verification in production environments

• The proxy runs with elevated privileges to manage network interfaces

• SSH keys should be properly secured and not shared

Development

# Watch mode for development
npm run dev

# Build
npm run build

# Start the server
npm start

License

MIT License - See LICENSE for details.

Acknowledgments

• Ligolo-ng by Nicolas Chatelain

• Model Context Protocol by Anthropic

Disclaimer

This tool is intended for authorized security testing and educational purposes only. Users are responsible for ensuring they have proper authorization before using this tool against any systems. The authors are not responsible for any misuse or damage caused by this tool.