<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Darknet - The Darkside &#187; p2p detection</title>
	<atom:link href="http://www.darknet.org.uk/tag/p2p-detection/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.darknet.org.uk</link>
	<description>Ethical Hacking, Penetration Testing &#38; Computer Security</description>
	<lastBuildDate>Tue, 07 Feb 2012 18:34:17 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Nat Probe &#8211; NAT Detection Tool</title>
		<link>http://www.darknet.org.uk/2009/10/nat-probe-nat-detection-tool/</link>
		<comments>http://www.darknet.org.uk/2009/10/nat-probe-nat-detection-tool/#comments</comments>
		<pubDate>Fri, 09 Oct 2009 08:06:26 +0000</pubDate>
		<dc:creator>Darknet</dc:creator>
				<category><![CDATA[Hacking Tools]]></category>
		<category><![CDATA[Network Hacking]]></category>
		<category><![CDATA[hacking-networks]]></category>
		<category><![CDATA[icmp redirect]]></category>
		<category><![CDATA[nat detection]]></category>
		<category><![CDATA[nat detection tool]]></category>
		<category><![CDATA[nat discovery tool]]></category>
		<category><![CDATA[nat probe]]></category>
		<category><![CDATA[natprobe]]></category>
		<category><![CDATA[p2p]]></category>
		<category><![CDATA[p2p detection]]></category>

		<guid isPermaLink="false">http://www.darknet.org.uk/?p=1960</guid>
		<description><![CDATA[This little, but very useful program, try to sends ICMP packet out the LAN, and detect all the host that allow it. Whit this you can find bugs in your (company?) network ( or others), for example hosts that allow p2p connections. Explanation When we use a Gateway, we send the packets with IP destination [...]]]></description>
			<content:encoded><![CDATA[<p></p>
<p>This little, but very useful program, try to sends ICMP packet out the LAN, and detect all the host that allow it. Whit this you can find bugs in your (company?) network ( or others), for example hosts that allow p2p connections.</p>
<p><strong>Explanation</strong></p>
<p>When we use a Gateway, we send the packets with IP destination of the target, but the destination MAC on the ethernet is the MAC at the Gateway. If we send a packet to the different MACs in the LAN, we can know who is the gateway when we receive an response from this MAC.</p>
<p>Some times we can discover more than one box configured to be an gateway, generally, this is an wrong configuration, and the box will response with an ICMP-Redirect. This is the same, because the script only verify if the mac response.</p>
<p>NatProbe is develop in Python with the Scapy library.</p>
<p>You can download Nat Probe here:</p>
<p><a href="http://natprobe.googlecode.com/files/natprobe.1.0.tar.gz">natprobe.1.0.tar.gz</a></p>
<p></p>
<p>Or read more <a href="http://code.google.com/p/natprobe/">here</a>.</p>
<div class="tweetthis" style="text-align:left;"><p> <a class="tt" href="http://twitter.com/intent/tweet?text=Nat+Probe+%E2%80%93+NAT+Detection+Tool+http%3A%2F%2Fdarknet.org.uk%2F%3Fp%3D1960+from+%40THEdarknet" title="Post to Twitter"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/twitter/tt-twitter-micro3.png" alt="Post to Twitter" /></a> <a class="tt" href="http://www.facebook.com/share.php?u=http://www.darknet.org.uk/2009/10/nat-probe-nat-detection-tool/&amp;t=Nat+Probe+%E2%80%93+NAT+Detection+Tool" title="Post to Facebook"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/facebook/tt-facebook-micro3.png" alt="Post to Facebook" /></a> <a class="tt" href="http://www.google.com/buzz/post?url=http://www.darknet.org.uk/2009/10/nat-probe-nat-detection-tool/&amp;imageurl=" title="Post to Google Buzz"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/gbuzz/tt-gbuzz-micro3.png" alt="Post to Google Buzz" /></a> <a class="tt" href="http://delicious.com/post?url=http://www.darknet.org.uk/2009/10/nat-probe-nat-detection-tool/&amp;title=Nat+Probe+%E2%80%93+NAT+Detection+Tool" title="Post to Delicious"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/delicious/tt-delicious-micro3.png" alt="Post to Delicious" /></a> <a class="tt" href="http://digg.com/submit?url=http://www.darknet.org.uk/2009/10/nat-probe-nat-detection-tool/&amp;title=Nat+Probe+%E2%80%93+NAT+Detection+Tool" title="Post to Digg"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/digg/tt-digg-micro3.png" alt="Post to Digg" /></a> <a class="tt" href="http://reddit.com/submit?url=http://www.darknet.org.uk/2009/10/nat-probe-nat-detection-tool/&amp;title=Nat+Probe+%E2%80%93+NAT+Detection+Tool" title="Post to Reddit"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/reddit/tt-reddit-micro3.png" alt="Post to Reddit" /></a> <a class="tt" href="http://stumbleupon.com/submit?url=http://www.darknet.org.uk/2009/10/nat-probe-nat-detection-tool/&amp;title=Nat+Probe+%E2%80%93+NAT+Detection+Tool" title="Post to StumbleUpon"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/su/tt-su-micro3.png" alt="Post to StumbleUpon" /></a></p></div><div class="AWD_like_button "><iframe src="http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.darknet.org.uk%2F2009%2F10%2Fnat-probe-nat-detection-tool%2F&amp;send=false&amp;layout=standard&amp;width=&amp;show_faces=false&amp;action=like&amp;colorscheme=light&amp;font=arial&amp;height=40" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:px; height:40px;" allowTransparency="true"></iframe></div>]]></content:encoded>
			<wfw:commentRss>http://www.darknet.org.uk/2009/10/nat-probe-nat-detection-tool/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
	</channel>
</rss>

