Blog · corpus.blog/blogs/netacoding.com/posts
netacoding.com
netacoding.com
2026
The Trailer Frame Bug Class: RFC 9114 §4.1 as a Universal HTTP/3 State Machine Attack Surfaceoriginal ↗
4 Sept 2026
WebTransport Zombie Connections: RFC 9114 Trailer Frame Triggers Permanent Stream Leak & OOM in Microsoft Edge and Chromium | Protocol REoriginal ↗
3 Sept 2026
18 Aug 2026
HTTP/3 Trailer HEADERS Frame Triggers Unhandled Exception in Google ESF: 60s Hang & QUIC INTERNAL_ERROR 0x0001 | Protocol REoriginal ↗
9 Aug 2026
SHA-256 Output Distribution Analysis: Deterministic Cycles, Basin Topology & 42x Rainbow Chain Speedup via CDPoriginal ↗
26 Jul 2026
Windows tcpip.sys ICMP Timestamp Bug: EnableICMPTimestampRep=0 Registry Bypass & RFC 792 Violation | Kernel REoriginal ↗
24 Jul 2026
ICMP-Ghost: Fileless C2 with ICMP & DNS Tunneling in Pure x64 Assembly | Suricata Bypassedoriginal ↗
20 Jul 2026
ICMP Timestamp Type 13/14 Linux Kernel Internals: RFC 792 Deviations & ftrace Call Chain Analysisoriginal ↗
7 Jul 2026
30 Jun 2026
HTTP Request Smuggling: CL.TE, TE.CL & H2 Downgrade | WAF Bypass, Credential Capture & Proxy Chain Exploitationoriginal ↗
21 Jun 2026
CWE-290 Layer 3: IP Source Spoofing via Missing uRPF | Smurf Amplification, ICMP Leak & Pre-Auth Reflection in ArubaOSoriginal ↗
7 Jun 2026
EtherLeak: ICMP Kernel Memory Disclosure via Ethernet Padding | CVE-2003-0001 & CVE-2021-3031original ↗
5 Jun 2026
Smurf Amplification in 2026: Pre-Auth ICMP Reflection via L2 Broadcast | CVE-1999-0513 & Enterprise VLANoriginal ↗
5 Jun 2026
ArubaOS 8.13.2.0 Pre-Auth ICMP Buffer Over-read: EtherLeak via TTL=0 + IP Total Length | HPE Bugcrowdoriginal ↗
1 Jun 2026
ArubaOS 8.13.2.0 Pre-Auth XXE → OOB SSRF & Internal Port Scan on Port 32000 | CWE-611 HPE Bugcrowdoriginal ↗
1 Jun 2026
ArubaOS 8.13.2.0 Smurf Amplification & ICMP Reflection: Pre-Auth uRPF Missing + Broadcast Reply | HPE Bugcrowd N/Aoriginal ↗
1 Jun 2026
DNS State Exhaustion: Water Torture, NXNS Amplification, TsuNAME & DoT/DoH Socket Starvationoriginal ↗
11 May 2026
TCP State Exhaustion: TIME_WAIT Flood, Sockstress Persist Timer Abuse & Conntrack DoS | Linux Kerneloriginal ↗
11 May 2026
BYOVD vs User-Space Injection: EDR Evasion Comparison | SROP + process_vm_writev vs Kernel Driver Exploitoriginal ↗
29 Apr 2026
FUSE Linux Kernel Integer Overflow: pgoff_t Arithmetic Wrap, Maple Tree OOB Write & VMA Corruptionoriginal ↗
29 Apr 2026
FUSE Linux Kernel UAF: drop_caches + SIGKILL Race Condition | DirtyCred Use-After-Free & LPEoriginal ↗
29 Apr 2026
FUSE Trust Boundary Attack: Malicious Daemon i_size Desync → Kernel Heap Overflow via finit_module & kexecoriginal ↗
29 Apr 2026
Pure Assembly vs C/Rust Malware Evasion: 0/65 VirusTotal, SROP CFG Bypass & Zero Compiler Artifactsoriginal ↗
25 Apr 2026
LockBit 5.0 Linux Malware Analysis: ChaCha20 + Curve25519 Offline Encryption, strace Evasion & IOCsoriginal ↗
23 Apr 2026
AI Agent Security: Why Container Isolation & Linux RBAC Beat AI Firewalls | Kernel-Level Access Controloriginal ↗
21 Apr 2026
LCG Jitter x64 Assembly: Randomized nanosleep for C2 Beaconing Evasion & SOC Behavioral Detection Bypassoriginal ↗
20 Apr 2026
CFG Flattening with CMOV: Antivirus & EDR Evasion via Control Flow Obfuscation in x64 Assemblyoriginal ↗
15 Apr 2026
Phantom Evasion Loader: SROP + process_vm_writev Direct Cross-Memory Shellcode Injection | EDR & Falco Bypass in x64 Assemblyoriginal ↗
13 Apr 2026
VESQER: DPCM+RLE Hybrid Shellcode Compression in x64 Assembly | C2 Payload Size Reduction & OPSECoriginal ↗
11 Apr 2026
Position Independent Code (PIC) in x64 Assembly: Stack Anchor Technique, Sectionless Shellcode & ASLR-Safe Payloadsoriginal ↗
3 Apr 2026
TCP Reverse Shell in Pure x64 Assembly: PIC Shellcode, Syscall Chain & dup2 FD Redirection | No libcoriginal ↗
3 Apr 2026
Bare-Metal HTTP Server in x86_64 Assembly: sys_sendfile Zero-Copy, Raw Sockets & Path Traversal Prevention | No libcoriginal ↗
29 Mar 2026
27 Mar 2026
27 Mar 2026
RDTSC Network Timing & Jitter Analysis in x64 Assembly: Nanosecond Packet Measurement & SOC Detection Evasionoriginal ↗
27 Mar 2026
memfd_create Linux: Fileless In-Memory Execution & Anti-Forensics via Syscall 319 in x64 Assemblyoriginal ↗
27 Mar 2026
Linux x64 Assembly Syscall ABI: Registers, File Descriptors & .bss Segment | open, read, write, exitoriginal ↗
27 Mar 2026
CVE-2025-6019: udisks2 TOCTOU Race Condition → Local Privilege Escalation | Polkit Bypass & SUID Exploitoriginal ↗
27 Mar 2026
eBPF Linux: XDP Packet Filtering, Kprobes Runtime Tracing & Kernel-Level Malware Detectionoriginal ↗
27 Mar 2026
ICMP C2 Evasion: IDS/IPS Bypass via Traffic Mimicry, RDTSC Timestamping & Stateless Port Knocking | Suricataoriginal ↗
27 Mar 2026
ICMP OS Fingerprinting & NIDS Evasion: Traffic Mimicry via Linux/Windows Payload Signatures in x64 Assemblyoriginal ↗
27 Mar 2026
ICMP Packet Sniffer in x64 Assembly: Raw Socket Capture, Header Stripping & Binary-to-ASCII IP | No libcoriginal ↗
27 Mar 2026
ICMP Type 3 Protocol Encapsulation: Nested ICMP Firewall Bypass & DPI Evasion via 0xFFFF Boundary Flaworiginal ↗
27 Mar 2026
IP Endianness in x64 Assembly: Big-Endian Network Byte Order to ASCII | Single-Pass div Algorithm Without inet_ntoaoriginal ↗
27 Mar 2026
Linux Anti-Debugging & Memory Dump Prevention: ptrace + prctl in x64 Assembly | EDR Evasionoriginal ↗
27 Mar 2026
RFC 1071 One's Complement Checksum in x64 Assembly: ICMP Carry Folding, Odd-Byte Handling & Packet Verificationoriginal ↗
27 Mar 2026