Add rogue IPv6 RA + RDNSS DNS-takeover coercion (CVE-2026-20929) - #21725

Open

Pushpenderrathore wants to merge 11 commits into

rapid7:masterfrom

Pushpenderrathore:feature/ipv6-ra-dns-takeover

Commits on Aug 31, 2026

Add native DHCPv6 DNS-takeover coercion for Kerberos relay
Pushpenderrathore
committed
f1f4d8f
Fix DHCPv6 rogue server multicast join and reply addressing
Pushpenderrathore
committed
3666c75
Extract shared DNS name-poisoning mixin
Pushpenderrathore
committed
a1ec17c
Document dhcpv6_dns_takeover module
Pushpenderrathore
committed
b4d963a
Add rogue IPv6 RA + RDNSS DNS-takeover coercion
Pushpenderrathore
committed
593c1b4
Answer Router Solicitations in the RA DNS takeover
Pushpenderrathore
committed
6b95e67
Document ipv6_ra_dns_takeover module
Pushpenderrathore
committed
09081a7
Default SRVHOST to :: in the IPv6 DNS-takeover coercion
Pushpenderrathore
committed
df9af11
Address Copilot review findings on the IPv6 RA DNS takeover
Pushpenderrathore
committed
6fef895
Require packetfu in the IPv6 mixin so the packet builders load deterministically
Pushpenderrathore
committed
4c4473a
Fix PacketFu packet construction on Ruby 3.4
Pushpenderrathore
committed
1302e65