Blessed NAT Slipstreaming, Who Slipped Past the Router

Patron of home routers that inspect packets, overly helpful NATs, and browsers that open ports without knowing it.

Life

On 31 October 2020 Samy Kamkar presented NAT Slipstreaming: simply making a victim visit a malicious web page let the browser, with the help of the mechanisms routers use for protocols like SIP, trick the NAT into opening a port to a service inside the victim's network. The router, trying to be helpful, was fooled into routing outside traffic into the home network. A version 2.0 extended the attack to any internal device.

Prayer

O Blessed NAT Slipstreaming, who slips past the router like a shadow, let our NATs not open ports out of courtesy. Amen.

How to celebrate

Celebrated by updating the router firmware and disabling application-layer inspection (ALG) where it is not needed.

An over-courteous router opens the door to the stranger.