feat(cloak): egress SYN-ACK mangler + T2/T3 probe-response synthesizer

Browse Source

In-decky-netns NFQUEUE rewriter (window/option-order/IP-ID) and raw-socket
synthesizer for nmap probes Linux drops but the target OS answers (T2/T3),
driven by os_fingerprint.OS_MANGLE. Packet-shaping logic is pure and unit-tested
offline; scapy/netfilterqueue import lazily in the runtime loops. Entry:
python -m decnet.cloak (run by the base container; CAP_NET_ADMIN).

...

This commit is contained in:

anti

2026-06-19 21:32:50 -04:00

parent 082d3fec19

commit f715ac6bcd

6 changed files with 430 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

0

tests/cloak/__init__.py Normal file