.. /playit.gg
Star

playit.gg is a SaaS tunneling service originally aimed at game server hosting. The playit agent installs as a background service (Windows service, macOS LaunchAgent, or systemd/OpenRC unit on Linux) that keeps outbound tunnels online and reconnects automatically, exposing local TCP/UDP ports through playit’s edge network.

Paths:

%ProgramData%\playit_gg\logs
~/Library/Application Support/playit_gg/playit.toml
/etc/playit (Linux service configuration)

Resources:

Detections:

Domain: *.playit.gg
Domain: *.ply.gg
Command: Execution of playit or playitd, or installation of the playit.gg/playitd Windows service, LaunchAgent or systemd/OpenRC unit.

Exfiltration

Starts the command-line agent, which signs in (or resumes an existing agent secret) and keeps configured tunnels online.
```
playit
```
Use case
Exposing a local TCP/UDP service to the internet through playit's edge network.

Privileges required
User

Operating systems
Windows, Linux, MacOS

Persistence

The background service/daemon installed alongside the agent, which keeps tunnels online across reboots without user interaction.
```
playitd
```
Use case
Persistent outbound tunnel that survives reboots.

Privileges required
Administrator/root

Operating systems
Windows, Linux, MacOS