zeinabmazraani/OverlapCraft

PoC

An attacker and detector built to escalate against each other around overlapping IP fragments. Three attack modes exploit fragment reassembly in increasingly subtle ways, the last inspired by FragmentSmack (CVE-2018-5391), and three detector versions evolve in response, from simple overlap detection to defending against resource exhaustion.

view exploit source poc_in_githubauthor zeinabmazraanipublished 2026-09-11catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2018-5391UShigh7.5Exploit
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan