A Go-based network analysis tool that captures IP addresses from P2P voice and video calls by intercepting STUN/TURN packets.
Uses tshark (Wireshark CLI) to monitor network traffic and capture STUN Binding Request/Response packets that contain IP address information.
When a P2P call is initiated (WhatsApp, Telegram, etc.), the application establishes direct connection between peers, exposing real IP addresses in STUN negotiation.
Parses XOR-MAPPED-ADDRESS attributes from STUN packets to extract both public and private IP addresses of the remote peer.
Outputs discovered IP addresses in real-time with timestamps, allowing immediate identification of peer locations.
Go programming language version 1.16 or higher required for compilation.
Wireshark command-line tool for packet capture. Auto-installs on macOS, Debian/Ubuntu, CentOS/RHEL.
golang.org/x/term, golang.org/x/sys - Terminal handling and system calls.
Tested on macOS (with Homebrew) and Linux distributions. Windows support limited.
Compiled binary for macOS & Linux. Requires root/sudo for packet capture.
[ DOWNLOAD BINARY ]