The project's method outdated about pwnat HOT 13 OPEN

Not all NATs do this, but yes, more are port munging these days (however it's much less likely for UDP). If one of the NATs is doing this and the other isn't, you can use the birthday paradox to get a 99% chance of packet exchange in ~533 packets (actually less by if you know the port range the opposing side will use).

from pwnat.

I'm not too sure if it is possible to to "proxy" through CGNAT (carrier grade NAT), but its getting more and more common here in Europe, so it would be a great thing to add.

from pwnat.

@Gustavo6046 @master-hax @tlsalex @Zibri Sorry for the late reply, the tool was NAT Slipstreaming: https://samy.pl/slipstream/

from pwnat.

what tool ?

from pwnat.

I think the best way to f*ck any nat would be to use webrtc think about it.

from pwnat.

@bauen1 can you share the specific elements of CGNAT that you found are specifically difficult to bypass?

from pwnat.

@Zibri Agreed -- though it's less the protocols and more the fact that you can induce a browser to perform actions on behalf of the client. STUN+TURN+ICE have some useful properties that can be used to perform fun and bad things to a victim; I'll be releasing a tool shortly :)

from pwnat.

I'm not entirely sure what didn't work since I tested this a long time ago, but if you ping me in a few days, I should have some time to look at it again (more closely)

from pwnat.

@Zibri Agreed -- though it's less the protocols and more the fact that you can induce a browser to perform actions on behalf of the client. STUN+TURN+ICE have some useful properties that can be used to perform fun and bad things to a victim; I'll be releasing a tool shortly :)

What I would do is this:
command line utility that connects to a TURNS relay and opens a listening port for anything

Example:
10.0.05 >>> turn server >> map port YYY to XXXX

anyone else >>> turn server port XXXX >>> connects to 10.0.0.5 port YYY

contact me privately at zibri AT zibri DOT org.. so I can give you some relay servers easily :D

from pwnat.

@Zibri Agreed -- though it's less the protocols and more the fact that you can induce a browser to perform actions on behalf of the client. STUN+TURN+ICE have some useful properties that can be used to perform fun and bad things to a victim; I'll be releasing a tool shortly :)

what tool?

from pwnat.

@Zibri Agreed -- though it's less the protocols and more the fact that you can induce a browser to perform actions on behalf of the client. STUN+TURN+ICE have some useful properties that can be used to perform fun and bad things to a victim; I'll be releasing a tool shortly :)

@samyk any news on this tool? :)

from pwnat.

I'm not entirely sure what didn't work since I tested this a long time ago, but if you ping me in a few days, I should have some time to look at it again (more closely)

Ping!

from pwnat.

Oh, that is perfectly fine, don't sweat! :)

I can't wait to see how this unrolls now.

from pwnat.