Pwnat – Autonomous Nat Traversal (2010)

Re:Pwnat – Autonomous Nat Traversal (2010) by armitron on Tuesday September 17, 2019 @12:47PM (#20997307)

This is old technique from early 2000 and flawed as others have described. Outgoing ICMP is blocked in every corporate environment I have ever been to and never makes it to the Internet facing gateway.

[ Parent | on HN ]

Re:Pwnat – Autonomous Nat Traversal (2010) by testvox on Tuesday September 17, 2019 @02:17PM (#20998398)

I'm on a large corporate network right now and I get responses back from `ping www.google.com`.

But also this technique doesn't depend on ICMP that is just what the example happens to use. Pwnat itself uses only UDP for outgoing requests.

[ Parent | on HN ]

Re:Pwnat – Autonomous Nat Traversal (2010) by armitron on Tuesday September 17, 2019 @03:26PM (#20999109)

ICMP is used by the server in order to find out the IP of the client. Then they switch to UDP. This method does not work without ICMP. Now, of course you can use outgoing UDP in probe fashion instead of ICMP, but that's again most probably blocked.

[ Parent | on HN ]