pivot_ligolo_start

What pivot_ligolo_start does on Zebbern Kali MCP

AI agents invoke pivot_ligolo_start to trigger actions in Zebbern Kali MCP. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why pivot_ligolo_start is rated High

This tool executes network tunneling infrastructure that fundamentally alters network access patterns and enables lateral movement attacks. While not destructive in the deletion sense, it establishes persistent network connections and pivoting capability whose effects (network access granted to restricted segments) depend entirely on agent intent and cannot be easily revoked.

From the tool's definition Tool name 'pivot_ligolo_start' and description 'Start a Ligolo-ng proxy server for pivoting' indicate execution of a network pivoting tool. Ligolo-ng is a tunneling/pivoting utility that establishes network proxies to access otherwise unreachable systems.

The rule that runs pivot_ligolo_start safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Zebbern Kali MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For pivot_ligolo_start, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "pivot_ligolo_start": {
      "limits": [
        {
          "counter": "pivot_ligolo_start_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about pivot_ligolo_start