pivoting-agent

A network-pivoting subagent that creates tunnels through an accessed computer to reach networks behind it.

In plain words
What is it for?
It sets up SSH tunnels, sshuttle, ligolo-ng, chisel, or socat connections as directed by the orchestrator.
Why use it?
It helps when the first computer can access internal systems that the tester cannot reach directly.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/blacklanternsecurity/red-run/pivoting-agent
Clone the repo
git clone --depth 1 https://github.com/blacklanternsecurity/red-run
Per session 74 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 2,468 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 2 findings. Scan, not verified.
Origin unknown No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00074 $0.02468
Opus 5 $0.00037 $0.01234
Sonnet 5 $0.00015 $0.00494
Haiku 4.5 $0.00007 $0.00247

Measured 2d ago against content hash 714aea4bb7e4, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

pivoting-agent scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

2. **sshuttle** — transparent routing via SSH, no SOCKS proxy needed (requires sudo on attackbox)

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

- Connectivity tests (`curl`, `ping`, `nc`, `proxychains nmap`) — use Bash
agents/pivoting-agent.md · 246 lines

The source is not reproduced here

Licensed GPL-3.0

The repository is licensed GPL-3.0, which this catalogue does not treat as permission to reproduce the file. Read it at the source.

Read it on GitHub

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 246 lines · 74 tokens per session scan B 714aea4bb7e4

Subscribe to this mod's changes

pivoting-agent is an agent published in the GitHub repository blacklanternsecurity/red-run (266 stars, last pushed 5mo ago), licensed GPL-3.0. It adds 74 tokens to every session and 2,468 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it B with 2 findings (asks for root, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other agents, from other repositories

supply-chain-auditor

Delegates to this agent when the user wants to audit software supply chain risk, generate or review an SBOM, hunt for dependency confusion and typosquatting exposure, inspect lockfile and package integrity, review install-time scripts in third-party packages, assess build and artifact provenance, or evaluate the blast…

0xSteph/pentest-ai-agents · 78 tokens

database-attacker

Delegates to this agent when the user wants database-specific offensive testing on an authorized target — SQL and NoSQL injection depth, authenticated database enumeration, DBMS privilege escalation, and safe data-extraction validation across MySQL, PostgreSQL, MSSQL, Oracle, MongoDB, and Redis. Executes with…

0xSteph/pentest-ai-agents · 71 tokens

persistence-planner

Delegates to this agent when the user wants to plan and document persistence during an authorized red team engagement — host persistence (Windows/Linux), Active Directory persistence (golden/silver tickets, DCShadow, AdminSDHolder, GPO), and cloud persistence — with mandatory cleanup tracking and detection guidance…

0xSteph/pentest-ai-agents · 67 tokens

wireless-pentester

Delegates to this agent when the user asks about wireless security testing, WiFi pentesting, WPA/WPA2/WPA3 attacks, Bluetooth security, wireless reconnaissance, rogue access points, evil twin attacks, or RF security.

0xSteph/pentest-ai-agents · 51 tokens

ad-attacker

Delegates to this agent when the user wants to perform Active Directory attacks, run BloodHound analysis, use Impacket tools, execute Kerberos attacks, perform AD enumeration with CrackMapExec or NetExec, test AD delegation abuse, or conduct lateral movement through Active Directory environments during authorized…

0xSteph/pentest-ai-agents · 64 tokens

reverse-engineer

Binary analysis agent — disassembly, decompilation, vulnerability discovery in compiled code, firmware analysis, protocol reverse engineering.

hypnguyen1209/offensive-claude · 27 tokens