Skip to content
Tech News
← Back to articles

Show HN: BitBang – Reach machines behind NAT from a browser, no account

read original more articles
Why This Matters

BitBang offers a simple, secure, and browser-based solution for remote machine access, even behind NAT or firewalls, eliminating the need for complex network configurations. Its peer-to-peer encryption and pairing features enhance security and ease of use for both technical and non-technical users, making remote management more accessible and private for consumers and the tech industry alike.

Key Takeaways

BitBang CLI

BitBang CLI is a single static binary remote-access multitool: open an interactive shell, browse and transfer files, and access web apps on the remote machine's network from any browser, no port forwarding, no configuring, and no account.

On the machine you want to reach:

curl -sSfL bitba.ng/install | sh bitbang serve

serve prints a URL. Open it in any browser and you get a terminal, a file browser, and a proxy to that machine's network -- or connect from another terminal with bitbang connect <url> using the same binary. The connection is end-to-end encrypted and peer-to-peer; the bitba.ng server introduces the two ends, then steps aside.

bitbang is a single static Go binary. It's part of the BitBang project; this whitepaper covers the design in depth.

Pairing with a 6-digit code

When you can't paste a URL or scan a QR code, such as when you're on the phone, or within yelling distance, bitbang serve also prints a short pairing code. The other party opens bitba.ng/<code> (or runs bitbang connect <code> ), their screen shows a second 6-digit number, and they read that one back to you. You type it in to approve. A machine-in-the-middle can't make the two numbers match, and pairing saves the device connection credentials for next time, e.g. bitbang connect nas1 . If you know Magic Wormhole, the shape is similar -- a spoken code that securely introduces two machines.

Nothing to forward or configure. Works from behind NAT, CGNAT, or a locked-down network -- no router changes, no VPN, no tunnel daemon.

Works from behind NAT, CGNAT, or a locked-down network -- no router changes, no VPN, no tunnel daemon. Nothing to install on the connecting side. A browser is enough. A CLI is there when you want scripting, pipes, and file copy.

... continue reading