samyk/slipstream

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1984 stars · 214 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

NAT Slipstreaming is a security research tool by Samy Kamkar that demonstrates remotely opening arbitrary firewall pinholes through a victim's NAT by exploiting browser behavior and Application Level Gateway (ALG) connection tracking. It chains timing attacks, WebRTC IP extraction, packet fragmentation control, and protocol confusion to bypass NAT/firewall port restrictions.

Use cases

• test whether a NAT router is vulnerable to slipstreaming attacks
• demonstrate firewall pinhole bypass via browser exploitation
• research ALG connection tracking vulnerabilities in routers
• verify NAT/firewall protections against protocol confusion attacks
• study packet fragmentation and MTU manipulation techniques
• audit network perimeter security against browser-driven NAT attacks

When to choose

• you are a security researcher studying NAT/ALG vulnerabilities
• you need to test router or firewall resilience to pinhole attacks
• you want a reference implementation of the NAT Slipstreaming attack chain

When to avoid

• you need a general-purpose penetration testing suite
• you want a supported tool with a license or active maintenance
• you are looking for defensive firewall configuration tooling rather than an exploit demo

Facets

cli-tool · maturity maintenance

security networking penetration-testing security networking penetration-testing cli nat-slipstreaming firewall-bypass nat-pinhole alg-exploit attack-research proof-of-concept perl linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="samyk/slipstream")