How to make nmap work with proxychain with SSH -D? (Pivoting)

I don’t want to use third party tools such as ligolo, assume the target machine has ssh open and can see an internal network, I am ssh ing into the first machine via the VPN connection (HackTheBox).

The problem is that even tho I am using SYN scan only and not doing host discovery and suggested on the internet, nmap still is not working via proxychain, but curl works!

proxychains nmap -Pn -sT -p80 -v 172.20.128.2

For example above will show that the port is closed even tho its open when I do it from the machine I ssh into, but doing curl with proxychain on that internal IP works?? but also ping doesn’t work with proxychain?

Is there anyway I can make this work without having to upload third party tools on the target machine?

How can I make proxychain work?

I am doing the following:

ssh -D 3333 [entry@10.10.211.76](mailto:entry@10.10.211.76)

also added

socks5 127.0.0.1 3333

to the proxychain4 config.

submitted by /u/BitDrill
[link] [comments]

June 23, 2025
Read More >>