# 隧道代理
English: Tunneling & Proxy
- Entry Count: 13
- Use this file to shortlist relevant payloads, then open the linked source markdown for the full workflow and commands.
## FRP内网穿透
- ID: tunnel-frp
- Difficulty: beginner
- Subcategory: TCP隧道
- Tags: frp, tunnel, proxy, nat
- Original Extracted Source: original extracted intranet-security-wiki source/tunnel-frp.md
Description:
使用FRP建立内网穿透隧道
Prerequisites:
- 公网服务器
- 内网机器可访问公网
- FRP工具
Execution Outline:
1. 服务端配置
2. 客户端配置
3. 启动服务端
4. 启动客户端
Analysis:
FRP可以建立TCP隧道，将内网服务映射到公网。
OPSEC:
- FRP流量可能被检测
- 考虑使用加密传输
- 注意隐藏进程
## Chisel内网穿透
- ID: tunnel-chisel
- Difficulty: beginner
- Subcategory: HTTP隧道
- Tags: chisel, tunnel, proxy, http
- Original Extracted Source: original extracted intranet-security-wiki source/tunnel-chisel.md
Description:
使用Chisel建立内网穿透隧道
Prerequisites:
- 公网服务器
- 内网机器可访问公网
- Chisel工具
Execution Outline:
1. 服务端
2. 反向SOCKS
3. 端口转发
Analysis:
Chisel可以建立HTTP隧道，穿透防火墙。
OPSEC:
- Chisel使用HTTP协议
- 可以绑定域名伪装
- 流量加密
## ReGeorg隧道
- ID: tunnel-regeorg
- Difficulty: intermediate
- Subcategory: ReGeorg
- Tags: tunnel, regeorg, proxy
- Original Extracted Source: original extracted intranet-security-wiki source/tunnel-regeorg.md
Description:
通过Web Shell建立隧道
Prerequisites:
- Web Shell上传
- 支持脚本语言
Execution Outline:
1. 上传隧道脚本
2. 建立隧道
3. 配置代理
## SSH本地转发
- ID: tunnel-ssh-local
- Difficulty: beginner
- Subcategory: SSH
- Tags: ssh, tunnel, local
- Original Extracted Source: original extracted intranet-security-wiki source/tunnel-ssh-local.md
Description:
SSH本地端口转发
Prerequisites:
- SSH访问权限
Execution Outline:
1. 本地转发
## SSH远程转发
- ID: tunnel-ssh-remote
- Difficulty: intermediate
- Subcategory: SSH
- Tags: ssh, tunnel, remote
- Original Extracted Source: original extracted intranet-security-wiki source/tunnel-ssh-remote.md
Description:
SSH远程端口转发
Prerequisites:
- SSH访问权限
Execution Outline:
1. 远程转发
## SSH动态转发
- ID: tunnel-ssh-dynamic
- Difficulty: intermediate
- Subcategory: SSH
- Tags: ssh, tunnel, socks
- Original Extracted Source: original extracted intranet-security-wiki source/tunnel-ssh-dynamic.md
Description:
SSH动态SOCKS代理
Prerequisites:
- SSH访问权限
Execution Outline:
1. 动态转发
2. 使用代理
## DNS隧道
- ID: tunnel-dns
- Difficulty: advanced
- Subcategory: DNS
- Tags: dns, tunnel, covert
- Original Extracted Source: original extracted intranet-security-wiki source/tunnel-dns.md
Description:
通过DNS协议建立隧道
Prerequisites:
- DNS解析权限
- 可控域名
Execution Outline:
1. 使用dnscat2
2. 客户端连接
3. 建立隧道
## ICMP隧道
- ID: tunnel-icmp
- Difficulty: advanced
- Subcategory: ICMP
- Tags: icmp, tunnel, covert
- Original Extracted Source: original extracted intranet-security-wiki source/tunnel-icmp.md
Description:
通过ICMP协议建立隧道
Prerequisites:
- ICMP允许通过
- 管理员权限
Execution Outline:
1. 使用icmptunnel
2. 客户端连接
## Ligolo隧道
- ID: tunnel-ligolo
- Difficulty: intermediate
- Subcategory: Ligolo
- Tags: ligolo, tunnel, proxy
- Original Extracted Source: original extracted intranet-security-wiki source/tunnel-ligolo.md
Description:
Ligolo内网穿透工具
Prerequisites:
- 可执行代理程序
Execution Outline:
1. 启动服务端
2. 运行代理
3. 创建隧道
## SOCKS代理
- ID: socks-proxy
- Difficulty: intermediate
- Subcategory: SOCKS
- Tags: socks, proxy, tunnel
- Original Extracted Source: original extracted intranet-security-wiki source/socks-proxy.md
Description:
建立SOCKS代理访问内网
Prerequisites:
- 已有内网访问点
Execution Outline:
1. SSH SOCKS代理
2. ProxyChains配置
3. Cobalt Strike SOCKS
4. Metasploit SOCKS
## Ngrok内网穿透
- ID: tunnel-ngrok
- Difficulty: beginner
- Subcategory: Ngrok
- Tags: ngrok, tunnel, penetration
- Original Extracted Source: original extracted intranet-security-wiki source/tunnel-ngrok.md
Description:
使用Ngrok建立内网穿透
Prerequisites:
- Ngrok账号
- 可访问外网
Execution Outline:
1. 安装Ngrok
2. HTTP隧道
3. TCP隧道
4. 自定义域名
## EW内网穿透
- ID: tunnel-ew
- Difficulty: intermediate
- Subcategory: EW
- Tags: ew, tunnel, socks
- Original Extracted Source: original extracted intranet-security-wiki source/tunnel-ew.md
Description:
使用EW建立内网穿透
Prerequisites:
- 已有内网访问点
Execution Outline:
1. 正向代理
2. 反向代理
3. 多级级联
## Venom内网穿透
- ID: tunnel-venom
- Difficulty: intermediate
- Subcategory: Venom
- Tags: venom, tunnel, socks
- Original Extracted Source: original extracted intranet-security-wiki source/tunnel-venom.md
Description:
使用Venom建立内网穿透
Prerequisites:
- 已有内网访问点
Execution Outline:
1. 启动服务端
2. 连接客户端
3. 建立SOCKS
4. 端口转发

