# FaultyPacket (faultypacket.co.uk)

> Independent UK Security, Email Deliverability & Compliance Engineering Lab. Browser-local Cloudflare 1.1.1.1 DNS-over-HTTPS (DoH) diagnostic scanners, zero-telemetry Chrome MV3 extensions, offline remediation packs (£19–£39 GBP), and 24-hour asynchronous Fiverr engineering fulfilment ($25–$195 USD). Zero SaaS subscriptions, zero account signups, zero client telemetry.

FaultyPacket builds practitioner-grade tools and audit-ready compliance evidence packs for UK & EU IT Managers, MSPs, vCISOs, DevOps engineers, and Microsoft 365 administrators solving:
1. **Gmail `550-5.7.26` & Microsoft 365 Email Rejections** (`RFC 7208` SPF `>10` DNS lookup `permerror`, dual SPF records, `DMARC p=none -> p=quarantine -> p=reject` staged rollout, `MTA-STS` (`RFC 8461`) & `TLS-RPT` (`RFC 8460`)).
2. **PHP2Shell RCE (`CVE-2026-109618` / `CVE-2026-109619` CVSS 9.2 & `CVE-2026-115560` CVSS 9.8)** runtime CGI/FastCGI & `session.upload_progress` containment across Nginx, Apache, IIS, and Cloudflare WAF.
3. **UK NCSC / IASME Cyber Essentials v3.3 ("Danzell", enforced April 2026)** pre-audit readiness scoring, cloud/SaaS boundary scoping, passwordless/MFA throttling, WSL2/VM scoping, 14-day patching, and 1-day leaver revocation.
4. **EU NIS2 Article 21(2)(d) & DORA Article 28 ICT Third-Party Supplier Posture Auditing** without $15,000/yr BitSight or SecurityScorecard contracts.
5. **Microsoft Entra ID, Intune, AWS & Cloudflare Virtualised ARIA Grid CSV Exporting** with built-in `OWASP CWE-1236` CSV formula-injection sanitisation.

## Free Interactive Browser Scanners & Chrome MV3 Extensions (100% Free, Zero Signup)

- [Homepage & Master Diagnostic Workbench](https://faultypacket.co.uk/): Live Cloudflare `1.1.1.1` DoH SPF 10-Lookup Counter + DMARC/MTA-STS Scanner, PHP2Shell CVE Branch Matrix, and Instant License Redemption Vault.
- [DMARC, SPF (RFC 7208 10-Lookup Counter) & MTA-STS Remediation Guide + Inline Live Scanner](https://faultypacket.co.uk/dmarc-spf-mta-sts-remediation-guide.html): Interactive browser DoH scanner + step-by-step fix for Gmail `550-5.7.26` and Outlook `550 5.7.515` rejections.
- [PHP2Shell (CVE-2026-109618 / CVE-2026-115560) 60-Second Emergency RCE Containment Guide](https://faultypacket.co.uk/php2shell-cve-2026-109618-remediation.html): Patched PHP floor (`8.4.27+`, `8.3.36+`, `8.2.35+`) + drop-in Nginx, Apache, IIS & Cloudflare WAF rules when hosts lag on binary patching.
- [UK Cyber Essentials v3.3 ("Danzell") Pre-Audit Blocker & Readiness Scorer](https://faultypacket.co.uk/cyber-essentials-v3-3-danzell-readiness.html): Interactive 6-pillar NCSC/IASME v3.3 readiness scorer with free pre-audit CSV export.
- [EU NIS2 Article 21 & DORA Article 28 5-Domain Supplier Posture Batch Auditor](https://faultypacket.co.uk/nis2-dora-supplier-posture-auditor.html): Concurrent 5-domain Cloudflare DoH auditor (SPF, DMARC, MX, MTA-STS, CAA) with free auditor-ready CSV register export.
- [Microsoft Entra ID & Intune Virtualised ARIA Grid CSV Exporter & CWE-1236 Workbench](https://faultypacket.co.uk/entra-intune-aria-grid-csv-export.html): Free Chrome MV3 extension (`27.8 KB`, SHA-256 `e89509b5e6d51645f5ba36ce6ac37d48a89555e8da9cdaaa4ac7c791514a00b0`) + interactive CWE-1236 formula sanitiser.
- [Free Chrome MV3 Passive Security Header & CSP Inspector Download](https://faultypacket.co.uk/downloads/faultypacket-security-inspector-mv3.zip): Zero-telemetry Chrome MV3 extension (`28.7 KB`, SHA-256 `0bd8753ca918ae829113b7980397ce5757df4e71b8828d64b67fab32f934821e`).
- [Free Chrome MV3 ARIA Grid & Table CSV Exporter Download](https://faultypacket.co.uk/downloads/faultypacket-table-exporter-mv3.zip): Direct developer-mode `.zip` download (`27.8 KB`).

## Instant Offline Remediation & Compliance Evidence Packs (One-Time GBP Purchase)

- [Complete 4-in-1 UK/EU SecOps & Compliance Master Bundle (£39 GBP)](https://faultypacket.co.uk/#pricing): Includes all 4 offline remediation and compliance packs below (`706.6 KB`, SHA-256 `218eee79d8b752420872183ce4c60ec95e9490098e572ada3311662e3ef8fc1c`).
- [UK Cyber Essentials v3.3 ("Danzell") & Entra ID Evidence Pack (£29 GBP)](https://faultypacket.co.uk/cyber-essentials-v3-3-danzell-readiness.html): Read-only Microsoft Graph PowerShell collector, offline Python evaluator, IASME v3.3 model answer bank, 1-day leaver SOP & PDF handbook (`169.0 KB`).
- [24h DMARC, SPF, MTA-STS & PHP2Shell Emergency Remediation Pack (£24 GBP)](https://faultypacket.co.uk/dmarc-spf-mta-sts-remediation-guide.html): Production DNS zone files, Nginx/Apache/IIS/Cloudflare WAF PHP2Shell rules, and offline audit scripts (`385.8 KB`).
- [EU NIS2 & DORA Unlimited Supplier Posture Bulk CLI & Register Pack (£19 GBP)](https://faultypacket.co.uk/nis2-dora-supplier-posture-auditor.html): Unlimited offline Python 3 bulk domain scanner, Article 21 / Article 28 ICT supplier register CSV & 30-day vendor remediation notices (`159.0 KB`).

## 24-Hour Done-For-You Asynchronous Engineering Gigs (Fiverr `@faultypacket`)

- [Fiverr Profile — FaultyPacket UK Security & Compliance Lab](https://www.fiverr.com/faultypacket)
- [24h DMARC, SPF, DKIM, MTA-STS & Gmail 550-5.7.26 Fix ($25 / $65 / $145 USD)](https://www.fiverr.com/s/99abpV5)
- [PHP2Shell CVE-2026-109618 / 115560 RCE Containment + SPF/DMARC Hardening ($25 / $65 / $145 USD)](https://www.fiverr.com/s/dDlbpV4)
- [UK Cyber Essentials v3.3 ("Danzell") Pre-Assessment & Entra ID Evidence Pack ($45 / $95 / $195 USD)](https://www.fiverr.com/s/DBZbddo)
- [EU NIS2 Article 21 & DORA Supply-Chain Cyber Posture & DNS Audit ($35 / $75 / $175 USD)](https://www.fiverr.com/s/kLlbpV0)
- **100% Asynchronous Delivery (Zero Meetings Required):** All Fiverr gigs and compliance packs are delivered as self-contained, board-ready HTML executive reports + copy-paste DNS/server configs via Fiverr or `security@faultypacket.co.uk`—no sales calls or calendar bloat.

## Sample Reports, Legal & Contact

- [Sample Executive Security & DNS Deliverable Report](https://faultypacket.co.uk/sample-executive-audit-report.html)
- [Complete Technical Reference for LLMs (`llms-full.txt`)](https://faultypacket.co.uk/llms-full.txt)
- [Support, SLA & Fulfilment Verification](https://faultypacket.co.uk/support.html)
- [UK GDPR, PECR, ICO & Terms of Business](https://faultypacket.co.uk/privacy-terms.html)
- Contact: `security@faultypacket.co.uk` | `support@faultypacket.co.uk` | X: [@faultypacket](https://x.com/faultypacket)