Hacker GitHub

← All repos

samyk/pwnat

View on GitHub ↗ ★ 3,937 C

The only tool/technique to punch holes through firewalls/NATs where multiple clients & server can be behind separate NATs without any 3rd party involvement. Pwnat is a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, DNS, router admin requirements, STUN/TURN/UPnP/ICE, or spoofing.

10 mentions on Hacker News by 10 people: 2 stories, 8 comments · first 2017-10-11 · latest 2025-07-27

Mentions per year 10 mentions · busiest year 2024 (4)
20082026
AllStoriesComments NewestTopOldest
  1. Older solution that seems to have issues with some modern routers: https://github.com/samyk/pwnat/issues/18
    comment by rsyring · 2025-07-27 · in Dumb Pipe
  2. I've always found this path to be more compelling: https://github.com/samyk/pwnat It has more edges and doesn't handle all cases, but it also avoids the need for any kind of intermediary.
    comment by bob1029 · 2025-07-27 · in Dumb Pipe
  3. Not bad, though you don't even need STUN or ICE; https://github.com/samyk/pwnat https://github.com/samyk/slipstream
    comment by Fnoord · 2024-08-18 · in Magic Wormhole: get things from one computer to another, safely
  4. …https://github.com/schollz/croc Or a NAT traversal tool: https://github.com/shawwwn/Gole https://github.com/samyk/pwnat Or can just manually ncat simultaneously from both sides to proper addresses and ports, probably with the help of some…
    comment by ogurechny · 2024-02-15 · in How to copy a file between devices? (2022)
  5. …my stealth browser project. [1] https://blogs.akamai.com/2017/09/introduction-to-dns-data-ex... [2] https://github.com/samyk/pwnat [3] https://cookie.engineer/weblog/articles/implementers-guide-t... [4]…
    comment by cookiengineer · 2021-03-13 · in How Git servers work, and how to keep yours secure
  6. > To connect between NATted hosts, you need control of a host that is not Um, no? https://github.com/samyk/pwnat
    comment by quantumofalpha · 2020-12-17 · in WireGuard Bounce Server Setup
  7. …found this thing called pwnat which bypasses nat routers without the need for UDP hole punching ! https://github.com/samyk/pwnat I feel like if someone made a high level wrapper combining these two, we can have a very good framework.
    comment by devxpy · 2018-04-09 · in Ask HN: Recommendations for Peer to Peer Frameworks?
  8. …kinds of NATs, and firewalls can kill it. I think you're referring to this? Clever hack indeed. https://github.com/samyk/pwnat
    comment by ac2u · 2017-10-11 · in Firefox Send: Private, Encrypted File Sharing