Ligolo-ng SSH v0.9-ssh.1

Ligolo-ng SSH v0.9-ssh.1

This is an independent fork of
nicocha30/ligolo-ng.
Nicolas Chatelain (@nicocha30) deserves full
credit for the original project, core tunneling engine, and ongoing upstream
work. This is not an official Ligolo-ng release.

What this fork adds

• Real SSH transport from agent to proxy
• Public-key agent authentication by default
• Host-key fingerprint and known_hosts verification
• Explicit no-agent-key mode for constrained assessment environments
• SSH keepalives and automatic reconnect/recovery
• Windows and Linux builds for AMD64 and ARM64
• Normal and Garble-obfuscated agent builds
• Embedded Ligolo-ng Web UI

Downloads

• ligolo-ng-ssh-windows-amd64.zip: Windows x64 bundle
• ligolo-ng-ssh-windows-arm64.zip: Windows ARM64 bundle
• ligolo-ng-ssh-linux-amd64.tar.gz: Linux x64 bundle
• ligolo-ng-ssh-linux-arm64.tar.gz: Linux ARM64 bundle
• Individual Windows .exe files are also attached
• README.md: copy-paste commands with and without agent keys
• SHA256SUMS.txt: release-asset checksums
• TEST-REPORT.md: runtime verification evidence

Each platform bundle contains proxy, agent, agent-garble, and the command
README.

Security warning

The no-agent-key mode still uses encrypted SSH, but it does not authenticate
the agent. Combining it with -ssh-insecure-ignore-host-key also disables
proxy identity verification and permits man-in-the-middle attacks. Use
public-key authentication and host-key pinning whenever possible. Use only on
systems and networks you are authorized to assess.

Verification

The attached binaries are the exact set covered by TEST-REPORT.md. Testing
included SSH with and without agent keys, TCP/UDP/ICMP through TUN, reverse
listeners, reconnect/recovery, normal and Garble agents, Windows and WSL Linux
runtime paths, Linux ARM64 SSH handshakes under QEMU, Web UI/API checks, Go
tests, go vet, and race tests.