SSH through an http proxy

(ncat comming from package nmap or ncat)

ProxyCommand /usr/bin/ncat --proxy-type http --proxy PROXY:PORT --proxy-auth PROXY_USER:PROXY_PASSWORD %h 22

SSH through an SSH hop

ProxyCommand /usr/bin/ssh USER@HOP /bin/nc %h 22

Keeping an agent in WSL

keychain does the trick …