Security tool · pivot
chisel
Fast TCP/UDP tunnel over HTTP, secured by SSH. The standard way to pivot through a foothold and reach internal services during authorized testing.
Overview
Where chisel fits
Fast TCP/UDP tunnel over HTTP, secured by SSH. The standard way to pivot through a foothold and reach internal services during authorized testing.
Detection-first use
Start with the least intrusive template that can distinguish your hypothesis from a normal response. Preserve raw output and a negative control.
Install
Installation references
Install with goAuthorization required
go install github.com/jpillora/chisel@latest- Positive signal
- Tool-specific output that supports the stated hypothesis.
- Negative control
- No result, or identical behavior against a known-safe control.
- Intrusiveness
- Review flags and target scope before execution.
Install with scriptAuthorization required
curl https://i.jpillora.com/chisel! | bash- Positive signal
- Tool-specific output that supports the stated hypothesis.
- Negative control
- No result, or identical behavior against a known-safe control.
- Intrusiveness
- Review flags and target scope before execution.
Test safely
Command templates
Server (your box)Authorization required
Populate placeholders only with assets that are explicitly in scope.
chisel server -p {port} --reverse- Positive signal
- Tool-specific output that supports the stated hypothesis.
- Negative control
- No result, or identical behavior against a known-safe control.
- Intrusiveness
- Review flags and target scope before execution.
Client → reverse SOCKSAuthorization required
Populate placeholders only with assets that are explicitly in scope.
chisel client {server}:{port} R:socks- Positive signal
- Tool-specific output that supports the stated hypothesis.
- Negative control
- No result, or identical behavior against a known-safe control.
- Intrusiveness
- Review flags and target scope before execution.
Related
Continue the workflow
Sources
Attribution and verification
Version history: normalized permanent page created 2026-08-20. Upstream activity and popularity are separate signals and do not establish tool safety.