exploit NAT/firewalls to access TCP/UDP services bound to any system behind victim's NAT