RC RANDOM CHAOS

vpn

2 posts

Keepalive packets bypass Android lockdown
Article

Keepalive packets bypass Android lockdown

A normal Android app can drive NAT-T keepalive packets onto UDP/4500 past Always-on VPN lockdown, leaking the device's real IP.

Android leaks keepalive packets past its VPN kill switch
Article

Android leaks keepalive packets past its VPN kill switch

A normal Android app can push NAT-T keepalive packets to the physical network on UDP/4500 while Always-on VPN lockdown is enabled, leaking the real IP.