Download Toolkit

[>] Feature Matrix

Feature	Status	Notes
Source tree patch check	Deterministic	Reads af_inet.c and tcp_ipv4.c, looks for kfree_rcu in both destructors.
Running kernel check	Deterministic	Compares uname -r against the fixed version table.
Network probe	Deterministic	Opens a TCP connection and sends a minimal HTTP request.
Race oracle	(Prob)	Sends crafted SYNs, observes marker reuse in SYN-ACKs. Requires root and CAP_NET_RAW.
Pcap analysis	(Partial)	Parses pcap, looks for cross-flow marker reuse and kernel pointer candidates.
KASLR slide recovery	(Partial)	Needs a matching System.map and at least one leaked text pointer.
Mitigation apply	(Prob)	Writes nftables rules and sysctls. The rule drops IPv4 TCP packets carrying IP options.
Mass scan	Deterministic	CIDR, file, or single target. Async with rate limiting and progress output.
JSON / JSONL / CSV	Deterministic	Chosen by output file extension.
Proxy / Tor / jitter	Deterministic	Applied to every network operation.
Resume	Deterministic	Saves completed target:port pairs to a state file.

[</>] Tools

Tool	Purpose	Intended User
cve_2026_98432	Red and blue team toolkit. Source and runtime patch checks, network probe, race oracle with marker reuse detection, pcap analysis, KASLR slide recovery, and mitigation guidance. Single command with an interactive menu or direct flags.	Red teams, blue teams, authorized pentesters
--check	Local kernel version and source tree inspection.	Blue teams, auditors
--probe	Confirm a TCP listener is reachable and IPv4 SYN options reach the stack.	Red teams, blue teams
--race	Marker-based race oracle. Sends crafted SYNs and inspects SYN-ACKs for cross-flow marker reuse.	Red teams (Prob)
--pcap	Offline pcap analysis. Detects UAF evidence and kernel pointer candidates.	Blue teams (Partial)
--map	KASLR slide recovery from leaked text pointers using a System.map.	Red teams (Partial)
--harden	Apply or preview mitigations (MPTCP off, migration off, IP-option drop).	Blue teams (Prob)