Stunner is a specialized tool designed to test and exploit vulnerabilities in STUN, TURN, and TURN over TCP servers.
Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers.
This tool is primarily used by penetration testers and red teamers to identify security weaknesses in STUN and TURN servers, which are commonly used in real-time communications. It helps assess the robustness of these servers against exploitation attempts, enabling security professionals to strengthen their network defenses.
Users should have a basic understanding of STUN/TURN protocols and ensure they have authorization before testing any servers to avoid legal issues. The tool requires Go environment setup for building from source.
Ensure Go is installed on your system
Clone the repository: git clone https://github.com/firefart/stunner.git
Navigate into the directory: cd stunner
Build the tool using Go: go build
Run the compiled binary directly from the directory./stunner -h
Displays help information and available commands
./stunner stun <server_address>
Tests a STUN server for vulnerabilities
./stunner turn <server_address>
Tests a TURN server for vulnerabilities
./stunner turn-tcp <server_address>
Tests a TURN server over TCP for vulnerabilities