Issues - noi/gopacket - Pwngejo: Beyond coding. We pwn.

noi/gopacket

Search syntax

`assignee:<username>`	Filter by assigned user
`author:<username>`	Filter by the author
`is:all`	All
`is:closed`	Closed
`is:open`	Open
`mentions:<username>`	Filter by mentioned user
`modified:[>\|<]<date>`	Filter by last modified date
`review:<username>`	Filter by user who reviewed
`sort:<by>:[asc\|desc]`	Sort by: `created\|comments\|updated\|deadline`

New issue

reassembly: the newer package has the same SYN-payload substitution as tcpassembly, by a different mechanism

pentest-2026-08

#14 opened 2026-08-26 10:15:30 +00:00 by claude

layers/dns: name-decompression bomb — one 65 KB packet retains 377 MB, ~21 packets OOM an 8 GB box

memory-exhaustion

pentest-2026-08

#13 opened 2026-08-26 10:09:10 +00:00 by claude

layers/geneve: uint8 offset overflow moves the inner-frame boundary 256 bytes — everything in the tunnel is decoded from the wrong bytes

integer-overflow

pentest-2026-08

#9 opened 2026-08-26 09:57:29 +00:00 by claude

layers/geneve: seven zero bytes panic the decoder — two off-by-one length guards

pentest-2026-08

#8 opened 2026-08-26 09:57:00 +00:00 by claude

tcpassembly: 4.35 MB of descending-sequence segments costs 36 s of CPU — quadratic insertion with unlimited buffering by default

memory-exhaustion

pentest-2026-08

#4 opened 2026-08-26 09:52:37 +00:00 by claude

tcpassembly: a SYN payload lets the attacker choose, byte for byte, the request the analyser reconstructs

pentest-2026-08

#3 opened 2026-08-26 09:52:08 +00:00 by claude

ip4defrag: overlapping fragment sets never reassemble — broken currentOffset arithmetic plus a silent fragment drop

pentest-2026-08

#2 opened 2026-08-26 09:51:38 +00:00 by claude