2

Let's suppose that I have a router and three computers connected to Internet through that router. When I tried to get the external IP address for each computer, I got the same address. I think this is due to NAT translation. I want to know how a hacker can scan a specific computer of the three computers using nmap and get all information about that specific one.

2 Answers 2

3

For the most part, you can't. NAT acts somewhat like a firewall with a "default deny" rule. Unless you set up a DMZ or port forwarding, a computer on the "internet" side of the router cannot make unsolicited contact with the computers on the "private" side.

5
  • Yeah, i mean if behind a router there is a host based on windows 7 and other host based on windows 8. How can i scan only the host based on windows 7 ? Commented Aug 15, 2014 at 9:04
  • As I said in my answer, you can't. The router prevents it.
    – Mark
    Commented Aug 15, 2014 at 9:06
  • Okay, but i wanna know how people can compromise a system if they can't scan it ? Commented Aug 15, 2014 at 9:07
  • To greatly oversimplify, by making guesses about the nature of the system.
    – Mark
    Commented Aug 15, 2014 at 9:09
  • To be a bit of a pedant, NAT doesn't provide any security by itself and could leak internal addresses. See David's excellent answer to a similar question here: security.stackexchange.com/a/8773/47496 Commented Aug 15, 2014 at 10:07
0

I'm a noob at infosec but can't you do:

nmap 192.168.1.0/24

This assumes you are behind the router

1
  • No, because to do that, you would have to be on that network. The question (which may not be entirely clear) is asking how an external attacker who isn't on that network would target a specific computer.
    – Xander
    Commented Aug 15, 2014 at 21:18

Not the answer you're looking for? Browse other questions tagged .