Nat Probe v1.0
Little program to test which hosts allow NAT in your Local Area Network (LAN).
This little, but very usefull program, try to sends ICMP packet out the LAN, and detect all the host that allow it. Whit this you can find bugs in your (company?) network (or others), for example hosts tha allow p2p connections.
Explanation
When we use a Gateway, we send the packets with IP dest of the target, but the dest mac on the ethernet is the mac at the Gateway. If we send a packet to the diferents macs in the lan, we can know who is the gateway when we recive an response from this mac.
Some times we can discover more than one box configured to be an gateway, generally, this is an wrong configuration, and the box will response with an ICMP-Redirect. This is the same, becouse the script only verify if the mac response.
Use
python natprobe.py -m 00:00:0d:ff:11 -d 2xx.x4.1x.xx
We can send an packet to a singular mac,
python natprobe.py -f /tmp/ethers.log -d 2xx.x4.1x.xx
/tmp/ethers must be a list of macs separated by a newline.
More information: here.
Post scriptum
Compliance Mandates
|
Related Articles
| Connectivity |
|
| Enumeration |
|
| Nat Probe |
|
| Network Monitoring |
|
