python3 h2ghost.py -h
                                                    
usage: h2ghost.py [-h] [--host HOST] [--port PORT] [--tls] [--no-tls] [--iterations ITERATIONS]
                  [--burst-n BURST_N] [--timeout TIMEOUT] [--crash-threshold CRASH_THRESHOLD]
                  [--crash-multiplier CRASH_MULTIPLIER] [--crash-min-delta CRASH_MIN_DELTA]
                  [--output OUTPUT] [--check-only] [--skip-check] [--verbose]
                  [TARGET]

Apache mod_http2 CVE-2026-23918 - double-free detector

positional arguments:
  TARGET                https://host:port http://host host:port host IP

options:
  -h, --help            show this help message and exit
  --host HOST           Target host (alt to positional)
  --port PORT           Target port (inferred from scheme/target if omitted)
  --tls                 Force TLS/HTTPS (default: auto-detect)
  --no-tls              Force plain TCP / h2c
  --iterations ITERATIONS
  --burst-n BURST_N     Triggers in check phase (default 10)
  --timeout TIMEOUT     Connection timeout s (default 2.5; use 5+ for internet)
  --crash-threshold CRASH_THRESHOLD
                        Fallback absolute ms when no baseline (default 150)
  --crash-multiplier CRASH_MULTIPLIER
                        reconnect/baseline ratio to flag as crash (default 1.3x)
  --crash-min-delta CRASH_MIN_DELTA
                        min ms above baseline (AND ratio) to flag crash (default 80ms)
  --output OUTPUT
  --check-only
  --skip-check
  --verbose

Crash detection logic
---------------------
  Trigger connection closing is NORMAL on both servers.
  A crash requires: PING fails on a FRESH connection AND
  reconnect > 150 ms (MPM restart delay).

Examples
--------
  python3 h2ghost.py https://127.0.0.1:9443 --check-only
  python3 h2ghost.py 127.0.0.1:7443 --check-only
  python3 h2ghost.py 127.0.0.1:9443 --iterations 200
  python3 h2ghost.py https://example.com --burst-n 20