[Tool] - Nat Probe

I'm plased to present NatProbe 1.0


Nat Probe is little, but very usefull program, try to sends ICMP
packet out the LAN,
and detect all the host that allow it. Whit this you can find bugs in
your (company?) network ( or others),
for example hosts tha allow p2p connections.

- Explanation -

When we use a Gateway, we send the packets with IP dest of the target,
but the dest mac on the ethernet is the mac at the Gateway.
If we send a packet to the diferents macs in the lan, we can know who
is the gateway when we recive an response from this mac.

Some times we can discover more than one box configured to be an
gateway, generally, this is an wrong configuration,
and the box will response with an ICMP-Redirect.
This is the same, becouse the script only verify if the mac response
an ICMP packet.

NatProbe is develop in Python with the Scapy library.

You can donwload the release in:
http://code.google.com/p/natprobe/



--
---------------------------------------
- El conocimiento es poder -
- y el saber nos hace libres. -
----------------------------------
netvulcano.wordpress.com
Linux User #405757
Machine Linux #310536

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

Relevant Pages

  • Re: Strange pings from 127.0.0.1
    ... I know you said the MAC address is also spoofed but this might help anyway: ... that are reporting port scans to their network all of which have a source ... Infected host picks address as source address and sends Syn packet to ... TCP/IP stack receives packet, responds with reset (if there is nothing ...
    (Security-Basics)
  • Re: Ip forwarding
    ... Packets that are meant to be forwarded by a router must be sent to its MAC address on the link. ... The gateway column optionnally contains the address of the next hop router if the destination is not directly reachable on the network attached to the output interface. ... In both cases the packet is sent on the link to the next hop MAC address. ...
    (comp.os.linux.networking)
  • Re: Default Gateway outside of subnet
    ... reference the same default gateway address that is located in one of the ... four subnets? ... the ARPs are sent to the all-1's MAC broadcast ... when the packet returns to an IP that the ...
    (comp.dcom.sys.cisco)
  • Re: Bypassing "smart" IDSes with misdirected frames? (long and boring)
    ... an extra attack step involves host A sending an IP packet addressed ... > to host X and containing a valid message (be it a DATA command, ... The attack then continues ... > appears to me that only those systems that specifically look for "MAC ...
    (Vuln-Dev)
  • [Full-Disclosure] Re: Bypassing "smart" IDSes with misdirected frames? (long and boring)
    ... an extra attack step involves host A sending an IP packet addressed ... > to host X and containing a valid message (be it a DATA command, ... The attack then continues ... > appears to me that only those systems that specifically look for "MAC ...
    (Full-Disclosure)
Loading