USA-26-Stagg-Breaking-Trust-Boundaries-REV-01.pdf

This Black Hat presentation documents "NATJACK", a new class of NAT table manipulation attacks that can break assumed network isolation and enable DNS hijacking, TCP connection hijacking, victim IP/port disclosure, and cross-tenant cloud attacks; the author demonstrates PoCs across routers, containers, virtualization, and cloud NATs, coordinates disclosure with vendors, and reports partial mitigations and CVEs issued.