sgxray

SGXRay: Automating Vulnerability Detection for SGX Apps Intel SGX protects isolated application logic and sensitive data inside an enclave with hardware-based memory encryption. To use such hardware-based security mechanism requires a strict programming model on memory usage， with complex APIs in...

v0ltpwn

V0LTpwn V0LTpwn CVE-2019-11157 is a software-controlled fault attack on x86 processors. It is the first attack corrupting the integrity of SGX enclaves. Description All recent Intel processors exhibit a software interface for controlling core voltages without rebooting the system. This feature is...

BrowserBox

BrowserBox — Remote Browser Isolation Bring the web to any system...safely. A full remote browser. Clientless access. Native performance. Self-host on Windows, macOS or Linux, or create cloud browser sessions through the API. Start a 7-Day Paid Evaluation · Buy a Commercial License · Talk to Sale...

oak

Oak is a software platform for building distributed systems providing externally verifiable or falsifiable claims about system behaviors in a transparent way. Oak provides building blocks that are used to build Enclave Applications, i.e. applications that are isolated from the host on which they...

ARES

Operator-directed red team orchestration & continuous security validation Prove exploitability. Compute shortest paths to Crown Jewels. Ship audit-ready evidence. Built for enterprise red teams, MSSPs and security operations centers that need to validate defensive posture continuously, not once a...

secretive

Secretive Secretive is an app for protecting and managing SSH keys with the Secure Enclave. Why? Safer Storage The most common setup for SSH keys is just keeping them on disk, guarded by proper permissions. This is fine in most cases, but it's not super hard for malicious users or malware to copy...

occlum

NEWS: Our paper Occlum: Secure and Efficient Multitasking Inside a Single Enclave of Intel SGX has been accepted by ASPLOS'20. This research paper highlights the advantages of the single-address-space architecture adopted by Occlum and describes a novel in-enclave isolation mechanism that...

FakeEnclave

FakeEnclave A poc that abuses Enclave Tested in Win10 1809 What it can do? Anti-tamper There may be nothing to do Compile Visual Studio 2022 & WDK10 llvm-msvc link...

CVE-2026-22686

Enclave VM Sandbox Escape CTF Challenge Challenge: "Breaking the Walls" Difficulty: Hard Category: Source Code Review / Sandbox Escape Points: 500 Scenario You've discovered a mysterious sandboxed JavaScript execution environment...

CVE-2026-22686-RemoteCodeExecution-RCE-PoC

CVE-2026-22686 — enclave-vm Sandbox Escape PoC A proof-of-concept PoC exploit and payload generator for CVE-2026-22686 , a critical sandbox escape vulnerability in enclave-vm versions prior to 2.7.0 , allowing arbitrary code execution within the host Node.js runtime. ⚠️ Disclaimer : This tool is...

sclock

scLock Supercluster Lock Hardware-Bound 256-Slot Polymorphic VM, Non-Linear MBA $\mathbbZ2^64$ & Apple Secure Enclave Binary Protector for macOS arm64 Apple Silicon Developed byrelay relay // SYSTEMS -111111?style=for-the-badge&logo=apple -FF4F00?style=for-the-badge -15803D?style=for-the-badge Ge...

CVE-2026-27597

CVE-2026-27597 - version Remote Code Execution Quick Usage python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: CRITICAL CVSS: 10.0 Impact: Confidentiality, Integrity, Availability Published: 2026-02-25 Technical Summary Enclave is a secure...

lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296

CTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296 Apple Silicon runs at frequencies that are golden ratio harmonics of 587 kHz: · Performance cores: 3.2 GHz = 587 kHz × 5451 ≈ φ⁸ × 1000 · Efficiency cores: 2.0 GHz = 587 kHz × 3407 ≈ φ⁷ × 1000 · Neural Engine: 11.0 GHz = 587 kHz × 18739 ≈...

CVE-2026-119116

A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow an application that runs on the parent EC2 instance to corrupt heap memory inside a Nitro Enclave which may lead to arbitrary co...

EUVD-2026-114183

A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow an application that runs on the parent EC2 instance to corrupt heap memory inside a Nitro Enclave which may lead to arbitrary co...

CVE-2026-119116 Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c

A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow an application that runs on the parent EC2 instance to corrupt heap memory inside a Nitro Enclave which may lead to arbitrary co...

CVE-2026-119116 Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c

A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow an application that runs on the parent EC2 instance to corrupt heap memory inside a Nitro Enclave which may lead to arbitrary co...

CVE-2026-119116

A use-after-free and double-free vulnerability exists in the SetClient command handler of the kmstool-enclave sample application within AWS aws-nitro-enclaves-sdk-c before version 0.4.6 . This flaw allows an application running on the parent EC2 instance to corrupt heap memory inside a Nitro Encl...

CVE-2026-119116: AWS kmstool-enclave: A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of…

A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow an application that runs on the parent EC2 instance to corrupt heap memory inside a Nitro Enclave which may lead to arbitrary co...

PT-2026-133672

Name of the Vulnerable Software and Affected Versions aws-nitro-enclaves-sdk-c versions prior to 0.4.6 Description A use-after-free and double-free issue exists in the SetClient command handler of the kmstool-enclave sample application. This flaw allows an application running on the parent EC2...