https://netacoding.com/ Recent content on Netacoding | Cybersecurity, Assembly & Network Research https://netacoding.com/img/logo-netacoding.png https://netacoding.com/img/logo-netacoding.png Hugo en-us Thu, 08 Oct 2026 00:00:00 +0000 https://netacoding.com/posts/xor-operations-x64-assembly/ Thu, 08 Oct 2026 00:00:00 +0000 https://netacoding.com/posts/xor-operations-x64-assembly/ Two complete NASM implementations of XOR stream encryption — fixed single-byte key and rolling key that increments every byte — with file read, in-place encrypt, and stdout write, all via raw Linux syscalls. Covers the symmetry property that makes decrypt identical to encrypt, 8-bit register auto wrap-around, and a real pointer bug: mov rdx, [buffer] loads the file data as an address and segfaults, while lea rdx, [buffer] loads the address correctly. https://netacoding.com/posts/cdp-sha256-structural-analysis/ Thu, 10 Sep 2026 00:00:00 +0000 https://netacoding.com/posts/cdp-sha256-structural-analysis/ CDP (Cyclic Digit-sum Projection) maps SHA-256 hex outputs into a 961-class finite projection space, exposing two deterministic fixed-point cycles, ergodic Markov basin structure, bijective 2-char fingerprinting, and a 42.55x compound lookup index speedup for constrained input spaces. Not documented in existing SHA-256 literature. https://netacoding.com/posts/h3_trailer_bug_class/ Fri, 04 Sep 2026 00:00:00 +0000 https://netacoding.com/posts/h3_trailer_bug_class/ A single RFC 9114-compliant frame type — the trailer HEADERS frame — breaks HTTP/3 state machines across two independent CDN edge implementations and the shared quiche QUIC library used in major Chromium-based browsers. Three distinct manifestations, one root cause. https://netacoding.com/posts/webtransport-zombie/ Thu, 03 Sep 2026 00:00:00 +0000 https://netacoding.com/posts/webtransport-zombie/ Sending a trailer HEADERS frame without END_STREAM on a WebTransport CONNECT stream causes Microsoft Edge and Chromium to permanently hold QUIC connections open, driving Network Service memory from 6 MB to 339 MB with 5,000 connections before an OOM crash. A secondary bug delivers server datagrams to JS on sessions the H3 layer considers closed. Root cause is in the shared quiche QUIC library. Reported to both MSRC and Google Chrome VRP — closed without fix by both vendors. https://netacoding.com/posts/amdhip64-patch/ Mon, 31 Aug 2026 00:00:00 +0000 https://netacoding.com/posts/amdhip64-patch/ Every HIP kernel launch crashes with 0xC0000005 on Windows gfx1201. WinDbg trace, root cause in the profiler callback linked list, a wrong first patch that silenced GPU compute, and the correct surgical fix targeting hipProfilerRegisterChunkCallbackExt. https://netacoding.com/posts/warp-rat-elf-static-analysis/ Tue, 18 Aug 2026 00:00:00 +0000 https://netacoding.com/posts/warp-rat-elf-static-analysis/ Warp/Wraith Linux RAT static analysis: Go binary with ELF section header mangling, oversized LOAD segment, and SSH credential harvesting. Detected without sandbox or dynamic execution — the obfuscation itself is the signature. https://netacoding.com/posts/blog_post_esf_h3/ Sun, 09 Aug 2026 00:00:00 +0000 https://netacoding.com/posts/blog_post_esf_h3/ Sending an RFC 9114-compliant trailer HEADERS frame to music.youtube.com causes Google's ESF (Edge Side Frontend) to hang for ~60 seconds before closing the connection with QUIC INTERNAL_ERROR (0x0001) — the RFC-defined signal for implementation errors. 100 sequential runs confirm zero rate limiting: the crash occurs at the H3 frame parser layer before any HTTP-layer defense is reachable. Cross-vendor confirmation on a second major CDN provider. Reported to Google VRP twice; closed by automated system both times within minutes. https://netacoding.com/posts/windows-icmp-timestamp-bugs/ Fri, 24 Jul 2026 00:00:00 +0000 https://netacoding.com/posts/windows-icmp-timestamp-bugs/ EnableICMPTimestampRep=0 does not suppress ICMP Timestamp Replies (Type 14) on Windows 11. Ghidra RE of tcpip.sys 10.0.26100.8457 confirms Ipv4pHandleTimestampRequest generates T14 unconditionally, plus a second bug: Receive/Transmit timestamps written little-endian in violation of RFC 792. Only effective mitigation: WFP firewall rule. https://netacoding.com/posts/icmp-ghost/ Mon, 20 Jul 2026 00:00:00 +0000 https://netacoding.com/posts/icmp-ghost/ ICMP-Ghost is a fileless, pure x64 Assembly C2 agent with dual-channel ICMP and DNS tunneling, protocol hot-swapping, EDR evasion, and Suricata v8.0.3 bypass. Zero libc, zero disk writes. https://netacoding.com/posts/icmp-timestamp-internals/ Tue, 07 Jul 2026 00:00:00 +0000 https://netacoding.com/posts/icmp-timestamp-internals/ Depth-8 ftrace analysis of icmp_timestamp() in the Linux kernel: full call chain from ip_rcv() to ICMP Type 14 reply generation, payload length threshold behavior, conntrack interaction, ts_ori unconditional echo across the full 32-bit range, and six documented deviations from RFC 792. https://netacoding.com/tools/syscall-table/ Tue, 30 Jun 2026 00:00:00 +0000 https://netacoding.com/tools/syscall-table/ Complete Linux x64 syscall reference with pure x64 Assembly examples. Each entry includes register calling convention, obfuscated variants, and real-world usage in security research projects. https://netacoding.com/posts/http-request-smuggling/ Sun, 21 Jun 2026 00:00:00 +0000 https://netacoding.com/posts/http-request-smuggling/ HTTP request smuggling exploits Content-Length vs Transfer-Encoding parsing differentials between frontend proxies and backend servers. Covers CL.TE/TE.CL/H2 downgrade mechanics, request queue poisoning, WAF bypass, automated credential capture at scale, and detection via differential timing and response desync. https://netacoding.com/posts/cwe-290/ Sun, 07 Jun 2026 00:00:00 +0000 https://netacoding.com/posts/cwe-290/ uRPF absence (CWE-290) at Layer 3 unconditionally trusts IP source addresses — enabling Smurf amplification, ICMP Timestamp information leaks, and pre-auth reflection attacks with no authentication required. Confirmed in ArubaOS AOS-8 (Build 95415). Covers RFC 3704 strict/loose uRPF, asymmetric routing deployment gap, Scapy PoC, Suricata detection rules, and Linux/Cisco mitigation. https://netacoding.com/posts/etherleak-reloaded/ Fri, 05 Jun 2026 00:00:00 +0000 https://netacoding.com/posts/etherleak-reloaded/ EtherLeak leaks NIC DMA ring buffer memory through ICMP Echo replies by trusting IP Total Length over actual frame length. CVE-2003-0001, CVE-2021-3031 (Palo Alto PA-series), TTL=0 evasion, and a working Scapy PoC. https://netacoding.com/posts/smurf-amplification/ Fri, 05 Jun 2026 00:00:00 +0000 https://netacoding.com/posts/smurf-amplification/ RFC 2644 disabled directed broadcast at router level — not L2 broadcast domains. Missing uRPF (CWE-290) + broadcast ICMP reply (CWE-406) enables Smurf amplification from same-VLAN adjacency with no authentication. 100-host broadcast domain = 100x amplification at 100 req/s → 7.2 Mbps victim flood. Two-machine Scapy PoC, Suricata rules, and enterprise wireless infrastructure confirmation. https://netacoding.com/posts/ghost-leak/ Mon, 01 Jun 2026 00:00:00 +0000 https://netacoding.com/posts/ghost-leak/ ArubaOS 8.13.2.0 leaks up to 18 bytes of NIC DMA buffer per ICMP Echo via inflated IP Total Length (CWE-126). TTL=0 packets are processed in violation of RFC 791, making the attack invisible to IDS, firewalls, and SIEM. Same mechanism as CVE-2003-0001 and CVE-2021-3031 (Palo Alto PA-series). 27/27 packets confirmed via pcap. HPE Bugcrowd closed as N/A. https://netacoding.com/posts/xxe-ssrf/ Mon, 01 Jun 2026 00:00:00 +0000 https://netacoding.com/posts/xxe-ssrf/ ArubaOS 8.13.2.0 port 32000/TCP exposes an unauthenticated XML parser (default-xml-api AAA profile) that resolves SYSTEM external entities. Confirmed: OOB SSRF via wire-level pcap, internal port scan (9 ports confirmed open), attacker DTD fetch, and target sshd log showing 127.0.0.1-sourced HTTP request. CVSS 9.3 Critical. Bugcrowd closed as theoretical despite 4 independent evidence items. https://netacoding.com/posts/smurf-reflection/ Mon, 01 Jun 2026 00:00:00 +0000 https://netacoding.com/posts/smurf-reflection/ ArubaOS 8.13.2.0 accepts ICMP Echo Requests with spoofed source IPs (no uRPF/BCP38) and replies to broadcast source addresses — enabling Smurf amplification from L2 adjacency. Two independent pcap captures (attacker + victim) confirm unsolicited Echo Reply to a host that sent zero ICMP requests. RFC 1122 §3.2.2.6 violation. Submitted Bugcrowd, closed as expected behavior. https://netacoding.com/posts/dns-state-exhaustion/ Mon, 11 May 2026 00:00:00 +0000 https://netacoding.com/posts/dns-state-exhaustion/ DNS resolvers carry exhaustible per-query state: recursive-client tables, pending-query slots, TCP/853 DoT and TCP/443 DoH sockets, delegation chains, and DNSSEC validation trees. Covers slow water torture, NXNS amplification (CVE-2020-8616), TsuNAME cyclic delegation, NRDelegation, and why BIND9/Unbound default ceilings are lower than HTTP. https://netacoding.com/posts/tcp-state-exhaustion/ Mon, 11 May 2026 00:00:00 +0000 https://netacoding.com/posts/tcp-state-exhaustion/ TCP connection capacity is bounded by 4-tuple uniqueness and kernel conntrack table size — not port numbers. Covers TIME_WAIT socket exhaustion, Sockstress (window=0 + Persist Timer loop, 2008), Slowloris-class L7 variants, ip_conntrack_max limits, and net.ipv4.tcp_tw_reuse/tcp_fin_timeout tuning for defense. https://netacoding.com/posts/byovd-vs_userspace_inj/ Wed, 29 Apr 2026 00:00:00 +0000 https://netacoding.com/posts/byovd-vs_userspace_inj/ BYOVD exploits signed vulnerable kernel drivers to reach Ring 0 and terminate EDR processes (Windows). User-space SROP injection uses ptrace+sigreturn+process_vm_writev to run inside a trusted host process identity without touching Ring 0 (Linux). Empirical results: 0/65 VirusTotal, SROP injection and process_vm_writev invisible to behavioral sandbox. Threat model, privilege ring, and detection surface comparison. https://netacoding.com/posts/fuse-boundary-mathematics-pgoff-overflow/ Wed, 29 Apr 2026 00:00:00 +0000 https://netacoding.com/posts/fuse-boundary-mathematics-pgoff-overflow/ FUSE daemon controls i_size — setting it to 0xFFFFFFFFFFFFFFFF wraps pgoff_t arithmetic in mm/filemap.c and mm/mmap.c, inverting page cache loop invariants and turning vma_merge() into an OOB-write primitive on Maple Tree-backed kernels (5.15+). https://netacoding.com/posts/fuse-async-abort-race-double-put/ Wed, 29 Apr 2026 00:00:00 +0000 https://netacoding.com/posts/fuse-async-abort-race-double-put/ fuse_req borrows inode references without incrementing i_count. A three-actor race between SIGKILL, drop_caches inode eviction, and delayed fuse_abort_conn teardown yields a refcount decrement on freed SLUB slab memory — DirtyCred-class struct cred UAF in three syscalls. https://netacoding.com/posts/fuse-trust-boundary-and-size-desync/ Wed, 29 Apr 2026 00:00:00 +0000 https://netacoding.com/posts/fuse-trust-boundary-and-size-desync/ An unprivileged FUSE daemon holds semantic authority over i_size — lying in vfs_getattr responses desynchronizes kernel allocation size from ingestion size in kernel_read_file(). finit_module(2), the firmware loader, and kexec_file_load(2) become kmalloc-4k slab overflow primitives. Full VFS trust boundary analysis and virtio-fs attack surface. https://netacoding.com/posts/language_malware-evasion/ Sat, 25 Apr 2026 00:00:00 +0000 https://netacoding.com/posts/language_malware-evasion/ Pure x64 Assembly eliminates compiler artifacts (GCC prologues, LLVM panic stubs, CRT startup code) that AV/EDR engines fingerprint. Empirical results: 0/65 VirusTotal detections, SROP injection and process_vm_writev invisible to behavioral sandbox. CMOV-based CFG flattening defeats heuristic graph analysis. Backed by Ianni et al. (SEBD 2019) on exotic compiler evasion. https://netacoding.com/posts/lockbit5-analysis/ Thu, 23 Apr 2026 00:00:00 +0000 https://netacoding.com/posts/lockbit5-analysis/ Full reverse engineering of LockBit 5.0 Linux (LINUX Locker v1.01 amd64): offline-capable ChaCha20+Curve25519 encryption, strace anti-analysis evasion, aggressive free space wiping, and zero network activity during encryption. eBPF dynamic tracing, Ghidra static RE, triple-confirmed network behavior, and complete IOC list. https://netacoding.com/posts/ai-universal-rule/ Tue, 21 Apr 2026 00:00:00 +0000 https://netacoding.com/posts/ai-universal-rule/ AI firewalls attempt to govern autonomous agents by parsing semantic intent — a probabilistic solution to a deterministic security problem. Linux kernel primitives (containers, RBAC, namespaces, EPERM) provide deterministic access control that AI agents cannot bypass through prompt injection or semantic manipulation. Why minimum privilege + container isolation is the only architecturally sound approach. https://netacoding.com/posts/lcg-jitter/ Mon, 20 Apr 2026 10:00:00 +0300 https://netacoding.com/posts/lcg-jitter/ Fixed-interval beaconing is trivially detected by SOC behavioral analysis. LCG-based jitter seeds rdtsc hardware entropy through Numerical Recipes constants (a=1664525, c=1013904223), applies modular range mapping, and delivers uniform random delays in [100ms, 1000ms) via sys_nanosleep — breaking periodic pattern detection with 2^32 LCG period and no external dependencies. https://netacoding.com/posts/polymorphic/ Wed, 15 Apr 2026 00:00:00 +0000 https://netacoding.com/posts/polymorphic/ NGAV and AI-powered EDRs rely on Control Flow Graph analysis to detect malicious binaries. Replacing conditional jumps with CMOV instructions eliminates branching entirely — producing a flat CFG that defeats Ghidra heuristics, AI feature extraction, and static signature engines without a single JMP. https://netacoding.com/posts/phantom-evasion-loader-blog/ Mon, 13 Apr 2026 00:00:00 +0000 https://netacoding.com/posts/phantom-evasion-loader-blog/ Phantom Evasion Loader injects shellcode into a live process using SROP (rt_sigreturn syscall 15) to hide ptrace calls from EDR monitors, and process_vm_writev (syscall 311) for single-shot direct cross-memory payload write — bypassing PTRACE_POKEDATA behavioral detection. XOR-decrypted in-memory payload. Confirmed: 0/65 VirusTotal, SROP and injection invisible to Falco eBPF and Hatching Triage. https://netacoding.com/posts/compressdpcm-rle/ Sat, 11 Apr 2026 00:00:00 +0000 https://netacoding.com/posts/compressdpcm-rle/ VESQER implements a DPCM+RLE hybrid compression pipeline in pure x64 Assembly with zero external dependencies — designed for C2 payload compression. DPCM delta-encodes byte-level differences to reduce entropy variance; RLE collapses repeated delta runs. Full algorithm design, x64 Assembly implementation, compression ratio analysis, and integration with fileless C2 payloads. https://netacoding.com/posts/pic-entry/ Fri, 03 Apr 2026 00:00:00 +0000 https://netacoding.com/posts/pic-entry/ PIC shellcode uses RIP-relative addressing instead of absolute addresses, remaining functional regardless of load address — required for ASLR-bypassing payloads. Covers the Stack Anchor technique (sub rsp+and rsp+mov rbp), sectionless execution without .data/.bss sections, rep movsb template copying from read-only .text to writable stack, and runtime R/W memory management in pure x64 Assembly. https://netacoding.com/posts/reverse_shell-assembly/ Fri, 03 Apr 2026 00:00:00 +0000 https://netacoding.com/posts/reverse_shell-assembly/ Complete TCP reverse shell in libc-free pure x64 Assembly using PIC Stack Anchor architecture: sys_socket(41) → sys_connect(42) → sys_dup2(33) loop redirects stdin/stdout/stderr to socket FD → sys_execve(59) spawns /bin/sh. RIP-relative addressing ensures payload works under ASLR. No dependencies, no compiler artifacts, production-ready shellcode pattern. https://netacoding.com/posts/assembly-httpserver/ Sun, 29 Mar 2026 00:00:00 +0000 https://netacoding.com/posts/assembly-httpserver/ Complete HTTP/1.1 server in pure x86_64 Assembly with zero external dependencies: sys_socket(41)→sys_bind(49)→sys_listen(50)→sys_accept(43)→sys_read(0) request parsing, SCASB/LODSB path traversal (../) detection, sys_fstat(5) file size, sys_sendfile(40) zero-copy kernel-to-NIC file transfer. Binary to ASCII IP conversion via bswap + manual div loop. https://netacoding.com/about/ Fri, 27 Mar 2026 13:50:00 +0300 https://netacoding.com/about/ Introduction to Netacoding: Research focusing on Assembly language, Network Protocol Analysis, CVE research, and Signal Intelligence (SIGINT). https://netacoding.com/contact/ Fri, 27 Mar 2026 13:45:00 +0300 https://netacoding.com/contact/ Get in touch for technical inquiries, project collaborations, or feedback regarding low-level security and network research. https://netacoding.com/posts/statistical-jitter/ Fri, 27 Mar 2026 11:31:43 +0300 https://netacoding.com/posts/statistical-jitter/ RDTSC (Read Time-Stamp Counter) measures CPU cycles between packet transmission and reception with nanosecond precision — bypassing OS clock jitter from gettimeofday/clock_gettime. Covers inter-packet delay variance (jitter formula |D_i - D_{i-1}|), Gaussian vs anomalous timing distribution, CPUID/RDTSCP serialization fences, and timing analysis applications for C2 beaconing evasion and network observability. https://netacoding.com/posts/volatile-storage/ Fri, 27 Mar 2026 11:30:25 +0300 https://netacoding.com/posts/volatile-storage/ memfd_create (syscall 319) creates anonymous RAM-backed file descriptors invisible to ls and standard forensic tools — no disk writes, no /tmp traces, no permanent inode. Full x64 Assembly implementation covering MFD_CLOEXEC, fd sealing, and Blue Team detection via /proc/pid/fd/ and eBPF auditd. https://netacoding.com/posts/syscall-bss/ Fri, 27 Mar 2026 11:27:01 +0300 https://netacoding.com/posts/syscall-bss/ Linux x64 syscall ABI: RAX=syscall ID, RDI=first arg, RSI=second arg, RDX=third arg. Covers sys_open(2), sys_read(0), sys_write(1), sys_close(3), sys_exit(60) with file descriptor lifecycle, .bss vs .data memory tradeoffs, and a complete file reader implementation in pure x64 Assembly without libc. https://netacoding.com/posts/udisks2-cve_lpe/ Fri, 27 Mar 2026 11:20:47 +0300 https://netacoding.com/posts/udisks2-cve_lpe/ CVE-2025-6019: udisks2 XFS resize creates /tmp/blockdev.XXXXXX mount points without immediately applying nosuid — a TOCTOU race window allows SUID binary execution before the flag is set. Polkit bypass via ~/.pam_environment seat0 spoofing, XFS image crafting with mkfs.xfs Protofile, and D-Bus flood trigger. Confirmed on openSUSE Leap 15.6 (kernel 6.4.0). https://netacoding.com/posts/ebpf/ Fri, 27 Mar 2026 00:00:00 +0000 https://netacoding.com/posts/ebpf/ eBPF runs sandboxed bytecode inside the Linux kernel via JIT compilation — no kernel modules, no source changes. Covers XDP for line-rate packet filtering and DDoS mitigation, kprobes/uprobes for syscall-level runtime tracing, and eBPF-based behavioral malware detection that captures execve, open, and connect calls regardless of language or evasion technique. https://netacoding.com/posts/advanced-evasion-techniques/ Fri, 27 Mar 2026 00:00:00 +0000 https://netacoding.com/posts/advanced-evasion-techniques/ Multi-layer ICMP C2 evasion: RDTSC hardware timestamps mimic legitimate Linux ping signatures, 56-byte/32-byte OS-aligned payloads defeat DPI volume anomalies, stateless Magic Sequence port knocking eliminates persistent connections, memfd_create enables fileless execution, and LCG jitter breaks SOC behavioral baselines. Confirmed bypass against Suricata v8.0.3. https://netacoding.com/posts/network-fingerprinting/ Fri, 27 Mar 2026 00:00:00 +0000 https://netacoding.com/posts/network-fingerprinting/ Every OS leaves a unique ICMP fingerprint: Linux sends 64-byte payloads with 8-byte RDTSC timestamps, Windows sends 32-byte alphabetical sequences. Covers OS-specific TTL and payload signatures, DPI evasion via traffic mimicry, and x64 Assembly implementation of NIDS-bypassing ICMP packet structures. https://netacoding.com/posts/icmp_sniffer/ Fri, 27 Mar 2026 00:00:00 +0000 https://netacoding.com/posts/icmp_sniffer/ Zero-dependency ICMP sniffer in pure x64 Assembly: sys_socket(41) with AF_INET+SOCK_RAW+IPPROTO_ICMP filters to ICMP-only traffic, sys_recvfrom reads raw frames, manual 28-byte header strip (20B IP + 8B ICMP) via lea rsi,[buf+28] reaches payload, custom div-based Integer-to-ASCII engine converts binary IP octets to dotted-decimal without libc or printf. https://netacoding.com/posts/icmp_encapsulation/ Fri, 27 Mar 2026 00:00:00 +0000 https://netacoding.com/posts/icmp_encapsulation/ ICMP Type 3 (Destination Unreachable) mandates reflection of the original IP header plus 8 bytes — a field attackers control entirely. Nested ICMP encapsulates secondary protocol headers inside the mandatory reflection segment, bypassing stateful firewalls that classify Type 3 as benign error traffic. 0xFFFF boundary manipulation causes DPI engines to misidentify packet boundaries and skip payload analysis. https://netacoding.com/posts/algorithmforprinting-ip_addresses/ Fri, 27 Mar 2026 00:00:00 +0000 https://netacoding.com/posts/algorithmforprinting-ip_addresses/ sockaddr_in delivers IP addresses in Big-Endian network byte order — x86/x64 reads them Little-Endian, producing reversed output like 5.1.168.192 instead of 192.168.1.5. Single-pass backward-build algorithm: reads IP octets from offset 7→4, builds ASCII string from buffer end→start via div/10 + add 0x30, inserts dot separators without a second reversal loop. Zero libc, zero inet_ntoa. https://netacoding.com/posts/anti-analysis/ Fri, 27 Mar 2026 00:00:00 +0000 https://netacoding.com/posts/anti-analysis/ Implement Linux process self-defense in pure x64 Assembly: PTRACE_TRACEME blocks debugger attachment at kernel level, PR_SET_DUMPABLE=0 prevents core dumps and memory acquisition. Includes runtime syscall obfuscation to bypass YARA static signatures. https://netacoding.com/posts/rfc-1071/ Fri, 27 Mar 2026 00:00:00 +0000 https://netacoding.com/posts/rfc-1071/ RFC 1071 checksum computes a 16-bit one's complement sum over the entire packet in 2-byte chunks. x64 Assembly implementation: word-by-word accumulation loop, odd-byte final block, carry folding via shr/and/add/adc, not ax inversion for final checksum. Required for ICMP packets to pass kernel validation — malformed checksum causes silent drop before delivery. https://netacoding.com/tools/encoders/ Mon, 01 Jan 0001 00:00:00 +0000 https://netacoding.com/tools/encoders/ Ultimate client-side payload conversion tool: Base64, Hex, URL, HTML, Binary, Unicode, JWT and ROT13. (Sandboxed & DoS Protected) https://netacoding.com/tools/hash-generator/ Mon, 01 Jan 0001 00:00:00 +0000 https://netacoding.com/tools/hash-generator/ Client-side MD5, SHA-series, and SHA-3 hash calculator powered by CryptoJS. (DoS Protected) https://netacoding.com/tools/ip-calc/ Mon, 01 Jan 0001 00:00:00 +0000 https://netacoding.com/tools/ip-calc/ Advanced client-side IPv4 network calculator for penetration testers. (Hardened) https://netacoding.com/tools/mac-tools/ Mon, 01 Jan 0001 00:00:00 +0000 https://netacoding.com/tools/mac-tools/ Advanced MAC Formatter and Random Generator (Spoofer). (100% Client-Side & Hardened) https://netacoding.com/tools/password-gen/ Mon, 01 Jan 0001 00:00:00 +0000 https://netacoding.com/tools/password-gen/ Cryptographically secure, zero-server password and passphrase generator using Web Crypto API. https://netacoding.com/tools/sysadmin-tools/ Mon, 01 Jan 0001 00:00:00 +0000 https://netacoding.com/tools/sysadmin-tools/ Linux Chmod permission calculator and Unix Epoch Timestamp converter for DFIR analysts. (Hardened)