How Hackers Move Through Networks (with Ligolo)
Source: YouTube · John Hammond · published Jan 17, 2024 · 20:03
This video demonstrates how penetration testers can pivot between networks using Lolo NG, a tool that creates secure tunnels to access internal network resources without complex configurations 1:39-2:16.
Key Takeaways:
• Network pivoting allows hackers to move from a compromised DMZ system to internal networks using techniques like lateral movement 0:00-0:11
• Lolo NG is a cross-platform tool written in Go that simplifies network pivoting by establishing secure tunnels through reverse TCP or TLS connections 1:39-2:16
• Setting up Lolo NG requires creating a tunnel interface on the attacker machine and running both proxy and agent components with proper certificate configurations 7:44-9:59
• Once connected, Lolo NG allows direct access to internal network resources without proxy chains, enabling tools like nmap and RDP to work normally 13:00-14:33
• Advanced features include port forwarding for reverse shells and accessing local services on the pivot machine using a special "magic IP address" 15:43-19:24
Lolo NG provides penetration testers with a streamlined approach to network pivoting, eliminating complex configurations while maintaining secure connections between networks.
Sources:
- 0:00-0:11 Explanation of lateral movement and network pivoting
- 1:39-2:16 Introduction to Lolo NG tool and its capabilities
- 7:44-9:59 Setting up tunnel interface and certificate configuration
- 13:00-14:33 Accessing internal network resources using Lo
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
how do hackers move through computer networks once they've gained access to one computer how do they move on to compromise others the technique is called lateral movement using one device to reach another but even ethical hackers who do what's called a penetration testing for their professional job they need to move from one whole network to another if a penetration tester compromises a website or a publicly accessible service like email servers or any other technology they usually land in What's called the DMZ or the demilitarized zone Network computers and servers inside the DMZ Network can be access from the public internet but a company's internal Network cannot so those DMZ computers act as the boundary between the internal land or the local area network and the outside world but beca…