Hacker GitHub

← All repos

samyk/pwnat

View on GitHub ↗ ★ 3,937 C

The only tool/technique to punch holes through firewalls/NATs where multiple clients & server can be behind separate NATs without any 3rd party involvement. Pwnat is a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, DNS, router admin requirements, STUN/TURN/UPnP/ICE, or spoofing.

10 mentions on Hacker News by 10 people: 2 stories, 8 comments · first 2017-10-11 · latest 2025-07-27

Mentions per year 10 mentions · busiest year 2024 (4)
20082026
  1. Older solution that seems to have issues with some modern routers: https://github.com/samyk/pwnat/issues/18
    comment by rsyring · 2025-07-27 · in Dumb Pipe
  2. I've always found this path to be more compelling: https://github.com/samyk/pwnat It has more edges and doesn't handle all cases, but it also avoids the need for any kind of intermediary.
    comment by bob1029 · 2025-07-27 · in Dumb Pipe
  3. ▲ 4
    Pwnat: Punch Holes Through Firewalls/NATs Without Any Third Party
    story by yamrzou · 2024-11-04 · 0 comments
  4. Not bad, though you don't even need STUN or ICE; https://github.com/samyk/pwnat https://github.com/samyk/slipstream
  5. ▲ 4
    Samy Kamkar's pwnat: The most advanced NAT hole-punching tool
    story by popcalc · 2024-07-24 · 0 comments
  6. …https://github.com/schollz/croc Or a NAT traversal tool: https://github.com/shawwwn/Gole https://github.com/samyk/pwnat Or can just manually ncat simultaneously from both sides to proper addresses and ports, probably with the help of some…
    comment by ogurechny · 2024-02-15 · in How to copy a file between devices? (2022)
  7. …my stealth browser project. [1] https://blogs.akamai.com/2017/09/introduction-to-dns-data-ex... [2] https://github.com/samyk/pwnat [3] https://cookie.engineer/weblog/articles/implementers-guide-t... [4]…
    comment by cookiengineer · 2021-03-13 · in How Git servers work, and how to keep yours secure
  8. > To connect between NATted hosts, you need control of a host that is not Um, no? https://github.com/samyk/pwnat
    comment by quantumofalpha · 2020-12-17 · in WireGuard Bounce Server Setup
  9. …found this thing called pwnat which bypasses nat routers without the need for UDP hole punching ! https://github.com/samyk/pwnat I feel like if someone made a high level wrapper combining these two, we can have a very good framework.
  10. …kinds of NATs, and firewalls can kill it. I think you're referring to this? Clever hack indeed. https://github.com/samyk/pwnat