Re: Discovering hosts behind NAT

[Javier Fernandez-Sanguino Peña <jfernandez () sgi es>]

> There are two known network devices: a cisco, which seems totally silent, and a wellfleet router.


        Have you tried SNMP access? First try to check if the SNMP ports (udp) are open
(nmap -sU) and then do a dictionary attack against the router. A common
misconfiguration is to have SNMP open to the outside world and with well-known
communities.
        If so, you could probably get the information the router holds in its internal
tables and (maybe) configure it to allow you access to the "hidden" network.

        Javi