al-khaser

Al-Khaser v0.81 Contenuti Introduzione Possibili usi Funzionalità Attacchi anti-debug Anti-Dumping Attacchi temporali Interazione umana Anti-VM Anti-Disassemblaggio Requisiti Licenza Introduzione al-khaser è un'applicazione PoC "malware" con buone intenzioni che mira a stressare il tuo sistema...

pentagi

PentAGI P enetration testing A rtificial G eneral I ntelligence Unisciti alla Community! Connettiti con ricercatori di sicurezza, appassionati di IA e hacker etici. Ottieni supporto, condividi idee e resta aggiornato sugli ultimi sviluppi di PentAGI. ⠀ Tabella dei Contenuti Panoramica Funzionalit...

cuckoo-droid

CuckooDroid - Analisi automatizzata di malware Android. Contribuito da Check Point Software Technologies LTD. CuckooDroid è un'estensione di Cuckoo Sandbox, il software Open Source per automatizzare l'analisi di file sospetti. CuckooDroid porta a Cuckoo le capacità di esecuzione e analisi delle...

NemoClaw

NVIDIA NemoClaw: Stack di Riferimento per Agenti AI in Sandbox in OpenShell NVIDIA NemoClaw è uno stack di riferimento open source per eseguire agenti AI sempre attivi in modo più sicuro all'interno di sandbox NVIDIA OpenShell. Fornisce onboarding guidato, un blueprint rafforzato, inferenza...

CAPE

CAPEv2 Python3 wurde jetzt veröffentlicht CAPEv2 Mit dem bevorstehenden Ende der Lebensdauer von Python 2 1. Januar 2020 wird CAPEv1 auslaufen. Bitte aktualisieren Sie so bald wie möglich auf die Python 3 Version. CAPE: Malware-Konfiguration und Payload-Extraktion CAPE ist eine Malware-Sandbox. E...

avet

Strumento di Evasione Antivirus AVET non è più in fase di sviluppo a causa di vincoli tecnici e temporali. AVET è uno strumento di evasione antivirus, sviluppato per semplificare la vita ai pentester e per sperimentare tecniche di evasione antivirus, oltre ad altri metodi utilizzati da software...

qiling

Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...

CAPEv2

CAPE: Estrazione di Configurazione e Payload dei Malware - Documentazione CAPE è una sandbox per malware. Una sandbox viene utilizzata per eseguire file malevoli in un ambiente isolato, monitorando il loro comportamento dinamico e raccogliendo reperti forensi. CAPE deriva da Cuckoo v1, che offre ...

wasm2c-tableflip

wasm2c sandbox escape: il modulo guest esegue un comando shell sull'host Leggi il blog: trustsig.eu/blog wasmrtallocatefuncreftable in wasm2c/wasm-rt-impl-tableops.inc imposta table-size dal numero di elementi dichiarati dal modulo e poi ignora il risultato di calloc. Quando l'allocazione fallisc...

When an AI Agent Turned Attacker: What Qualys Sees Across Every Phase of the Hugging Face Kubernetes Intrusion

A phase-by-phase detection mapping of the first publicly documented autonomous agent intrusion against production infrastructure — including the phases where no product in our category sees anything at all. Executive Summary On July 9, 2026, an autonomous AI agent running inside an OpenAI...

CVE-2026-79069

A flaw was found in Google Chrome's Tint component on macOS. A remote attacker could exploit a memory corruption vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...

CVE-2026-79054

A flaw was found in Chromecast within Google Chrome. This use-after-free vulnerability allows a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page,...

CVE-2026-79052

A flaw was found in Aura, a component within Google Chrome. This vulnerability, known as a 'use-after-free,' occurs when a program attempts to use memory after it has been freed, which can lead to unpredictable behavior. A remote attacker could exploit this by tricking a user into visiting a...

CVE-2026-79057

A flaw was found in Google Chrome on Android. A race condition in the 'Start' component could allow a local attacker to potentially execute arbitrary code outside of the application's security sandbox. This exploitation requires leveraging social engineering and a co-installed application...

CVE-2026-79008

A flaw was found in the Chromium GPU component. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the sandbox. This can occur when a user is enticed to open a specially crafted...

CVE-2026-79027

A flaw was found in WebRTC. A remote attacker could exploit a use-after-free vulnerability by sending crafted network traffic. This could allow the attacker to execute arbitrary code within the sandbox environment, leading to potential system compromise...

CVE-2026-78999

A flaw was found in Google Chrome's Navigation component. Improper privilege management could allow a remote attacker, who has already compromised the renderer process and leveraged social engineering, to execute arbitrary code outside of the sandbox. This exploitation occurs via a specially...

CVE-2026-78990

A flaw was found in Compositing in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-78985

A flaw was found in the FileSystem component of Google Chrome. This vulnerability, caused by incorrect reference resolution, could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation would require social engineering to trick a user into...

CVE-2026-78948

A flaw was found in chromium-browser. This buffer overflow vulnerability in WebGL allows a remote attacker to execute arbitrary code outside the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a complete compromise of the affected system...