awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
samyk avatar

samyk/pwnat

0
View on GitHub↗
3,898 stars·508 forks·C·GPL-3.0·19 viewssamy.pl/pwnat↗

Pwnat

pwnat is a set of software utilities designed for TCP hole punching, network tunneling, and proxy-based port forwarding to bypass network address translation restrictions. It functions as a tool for establishing direct TCP connections between hosts located behind separate network address translators without requiring manual port forwarding, DMZ configurations, or third-party servers.

The project enables peer-to-peer TCP tunnels by exploiting network address translation table properties to bypass firewalls. It provides a proxy that routes local port traffic to remote hosts and ports through penetrating tunnels, facilitating the routing of TCP services such as SSH or HTTP across restrictive network boundaries.

The system includes capabilities for symmetric NAT traversal, network service tunneling, and remote traffic routing. Security is managed through access control list filtering to restrict the destination hosts and ports accessible through the established tunnels.

Features

  • TCP Hole Punching - Establishes direct peer-to-peer TCP connections by synchronizing outgoing connection attempts across different NATs.
  • Connection State Synchronization Protocols - Uses a predefined sequence of signals to synchronize network states before attempting the direct TCP handshake.
  • Firewall Traversal Mechanisms - Provides a utility for creating direct network paths through restrictive firewalls and NATs.
  • NAT Table Manipulation - Exploits NAT translation table properties to force the allow-listing of unsolicited incoming TCP packets.
  • NAT Traversal - Coordinates packet timing and source ports to bypass restrictive symmetric NAT firewall rules.
  • Local Port Forwarding - Forwards connections from a local port to a specified remote host and port using a traversing tunnel.
  • Local Port Mapping - Maps local listening ports to remote destinations for routing external traffic through a tunnel.
  • Peer-to-Peer Tunneling - Creates a network tunnel linking remote hosts via TCP by exploiting NAT translation table properties.
  • Port Forwarding - Forwards traffic from a local port to a specific remote destination across network boundaries.
  • Service Tunnels - Routes TCP services such as SSH or HTTP from a remote host to a local machine.
  • TCP Punchthrough Connections - Establishes direct TCP connections between clients and servers behind separate NATs without manual port forwarding.

Star history

Star history chart for samyk/pwnatStar history chart for samyk/pwnat

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Projects sharing features with Pwnat

These projects share indexed features with Pwnat. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • irungentoo/toxcoreI

    irungentoo/toxcore

    8,751View on GitHub↗

    Toxcore is a peer-to-peer networking library that implements a decentralized communication protocol for secure messaging and media calls without the use of central servers. It provides a core engine for establishing direct encrypted connections between devices using a public-key identity system where unique identifiers serve as both addresses and authentication keys. The project features a decentralized network architecture that utilizes a distributed hash table for peer discovery and Kademlia-based routing to locate participants. To maintain connectivity across restrictive network environmen

    C
    View on GitHub↗8,751
  • lazy-luo/smargatelazy-luo avatar

    lazy-luo/smarGate

    4,363View on GitHub↗

    SmarGate is a network utility designed as an intranet penetration tool, peer-to-peer network tunnel, and remote device management gateway. It functions as a system for bypassing NAT and firewalls to expose internal services to the public internet, while also providing SOCKS5 and HTTP proxy capabilities and SSL/TLS encrypted tunnels. The project distinguishes itself by implementing hybrid routing that combines direct peer-to-peer TCP links with cloud-based proxy relaying to reduce latency. It features real-time dynamic port mapping that allows network redirections to be updated via a mobile cl

    JavaScriptandroidfreeipv6
    View on GitHub↗4,363
  • ntop/n2nntop avatar

    ntop/n2n

    6,954View on GitHub↗

    n2n is a peer-to-peer VPN that creates an encrypted mesh network by establishing layer 2 overlay networks. It uses UDP tunneling to connect remote computers into a shared virtual local area network, allowing devices to communicate as if they were on the same physical Ethernet switch. The system utilizes a centralized signaling registry and federated coordination nodes to facilitate peer discovery and node registration. It implements NAT traversal through UDP hole punching and UPnP port mapping, while using supernode relay routing to ensure connectivity when symmetric NATs prevent direct peer-

    Cpeer-to-peervpn
    View on GitHub↗6,954
  • txn2/kubefwdtxn2 avatar

    txn2/kubefwd

    4,123View on GitHub↗

    kubefwd is a Kubernetes network tunneling and service forwarding utility that maps remote cluster services to local loopback addresses. It synchronizes the local hosts file to resolve Kubernetes service names to local IP addresses, enabling local development environments to use production hostnames. The project implements a Model Context Protocol server, allowing external AI assistants to discover, browse, and control network forwarding through a standardized interface. It also provides a terminal user interface for managing service forwards, monitoring real-time network traffic, and streamin

    Goapi-restdeveloper-toolsdevops
    View on GitHub↗4,123
Compare all 30 related projects→

Frequently asked questions

What does samyk/pwnat do?

pwnat is a set of software utilities designed for TCP hole punching, network tunneling, and proxy-based port forwarding to bypass network address translation restrictions. It functions as a tool for establishing direct TCP connections between hosts located behind separate network address translators without requiring manual port forwarding, DMZ configurations, or third-party servers.

What are the main features of samyk/pwnat?

The main features of samyk/pwnat are: TCP Hole Punching, Connection State Synchronization Protocols, Firewall Traversal Mechanisms, NAT Table Manipulation, NAT Traversal, Local Port Forwarding, Local Port Mapping, Peer-to-Peer Tunneling.

Which projects share features with samyk/pwnat?

Projects with overlapping indexed features include: irungentoo/toxcore — Toxcore is a peer-to-peer networking library that implements a decentralized communication protocol for secure… lazy-luo/smargate — SmarGate is a network utility designed as an intranet penetration tool, peer-to-peer network tunnel, and remote device… ntop/n2n — n2n is a peer-to-peer VPN that creates an encrypted mesh network by establishing layer 2 overlay networks. It uses UDP… txn2/kubefwd — kubefwd is a Kubernetes network tunneling and service forwarding utility that maps remote cluster services to local… firezone/firezone — Firezone is a zero trust network access platform that uses WireGuard to provide identity-based connectivity to… pirate/wireguard-docs — This project is a comprehensive technical documentation site and reference manual for configuring and deploying…