anti f715ac6bcd feat(cloak): egress SYN-ACK mangler + T2/T3 probe-response synthesizer ...

In-decky-netns NFQUEUE rewriter (window/option-order/IP-ID) and raw-socket
synthesizer for nmap probes Linux drops but the target OS answers (T2/T3),
driven by os_fingerprint.OS_MANGLE. Packet-shaping logic is pure and unit-tested
offline; scapy/netfilterqueue import lazily in the runtime loops. Entry:
python -m decnet.cloak (run by the base container; CAP_NET_ADMIN).

2026-06-19 21:32:50 -04:00

4.8 KiB

Raw Blame History

View Raw