Sauercloude

Sauercloude 0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119...

PwnBox-Kali

PwnBox-Kali Bash-script to automate the process of setting up a new Kali Linux virtual machine to look a like HTB PwnBox Just a script to automate all the process of twiking and installing tools on new kali linux VM It was done mostly for me but maybe someone will find it useful Some of the code...

CVE-2026-22686

Enclave VM Sandbox Escape CTF Challenge Challenge: "Breaking the Walls" Difficulty: Hard Category: Source Code Review / Sandbox Escape Points: 500 Scenario You've discovered a mysterious sandboxed JavaScript execution environment...

CVE-2026-27597

CVE-2026-27597 - version Remote Code Execution Quick Usage python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: CRITICAL CVSS: 10.0 Impact: Confidentiality, Integrity, Availability Published: 2026-02-25 Technical Summary Enclave is a secure...

mkPIVM

Read the research paper written for 1.0.0. mkPIVM is a polymorphic position-independent shellcode virtualizer for Windows x86 and x64 Linux soon. Feed it raw shellcode. It emits another raw blob: a small virtual machine that interprets a lifted, encrypted-at-rest version of your original...

al-khaser

Al-Khaser v0.81 Content Introduction Possible uses Features Anti-debugging attacks Anti-Dumping Timing Attacks Human Interaction Anti-VM Anti-Disassembly Requirements License Introduction al-khaser is a PoC "malware" application with good intentions that aims to stress your anti-malware system. I...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ RCE via Jolokia API Description CVE-2026-34197 is a remote code execution RCE vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary commands on the server's operating system through the Jolokia API exposed on the web console. The...

Zapscape-Fix

Zapscape-Fix — CVE-2026-64561 Kernel Live Patch KVM/x86 English |简体中文 A kernel live patch that fixes CVE-2026-64561 Zapscape on CentOS Stream 8 / RHEL 8 KVM hosts all 4.18.0- kernels. Without the patch : a tenant VM guest can escape to the host with guest-side actions alone and execute code with...

webvm

WebVM This repository hosts the source code for https://webvm.io, a Linux virtual machine that runs in your browser. Try out the new Alpine / Xorg / i3 graphical environment: https://webvm.io/alpine.html What is WebVM? WebVM is a server-less virtual environment running fully client-side in...

kali-packer

Kali-Packer This used to be the home of Kali-Vagrant's build-scripts. Since Kali 2025.2, the Kali team has stopped using Packer to generate Vagrant VMs and now uses DebOS. This is the same method used to generate our other/stock VMs. As this repository is no longer responsible for theKali Vagrant...

VMDragonSlayer

VMDragonSlayer Project will be public by mid-October Refactoring In Progress Advanced Virtual Machine Detection and Analysis Framework VMDragonSlayer is a comprehensive framework for analyzing binaries protected by Virtual Machine VM based protectors such as VMProtect 2.x/3.x, Themida, and custom...

clawk

Give a coding agent its own disposable Linux machine, not yours. -lightgrey Install · Quickstart · Why a VM? · How it works · Compared to · FAQ · Docs A coding agent is only useful when you let it actually do things: install packages, run the code it writes, start servers, use the network. On you...

Podroid

Podroid Run Linux containers and a full Linux desktop on your Android phone. No root. A real Alpine Linux VM with its own kernel - not a chroot or proot trick - so Podman, Docker and LXC behave exactly like they do on a server. Website · Documentation · Download APK Home | Running | !Built-in...

cgPwn

cgPwn - Cyber Grand Pwnage Box This is a Ubuntu VM tailored for hardware hacking, RE and Wargaming. Tools included Pwndbg Pwntools Binwalk Radare2 Capstone, Unicorn and Keystone Engines Qira Timeless Debugger AFL Valgrind , VGdb ROPGadget, XRop, Ropper, rp++ Intel PIN Angr z3 frida Compiler tools...

fake-sandbox

Fake Sandbox Processes FSP This small script will simulate fake processes of analysis, sandbox and VM software that some malware will try to avoid. You can download the original script made by @x0rz here thanks, by the way. You can also download my slightly optimized script from the root director...

CVE-2023-22098

CVE-2023-22098 - Oracle VM VirtualBox 7.0.10 r158379 Escape Hey VM Wizards, In 2023, the outstanding security researcher Andy Nguyen @TheFlow0 discovered multiple vulnerabilities in Virtio-net for VirtualBox. All kudos to him for his incredible work. This repository contains the exploit for...

crypter

Crypter This Crypter is written in python 3, which can be used to obfusticate, encrypt the python source code to bypass AntiVirus. Also Capable to Bypass VM such as VirtualBox, VMware, Sandboxie. Uses AES-256 bit Encryption & Base64 Encoding to Encrypt the Source Code for Twice. 3 Powerfull Metho...

px-vm

PerimeterX Auditor VM Analysis Summary This repository documents the reverse engineering of PerimeterX's auditor.js, a bytecode virtual machine used as a secondary fingerprinting layer in PX's bot detection pipeline. This analysis covers: Bytecode extraction and 5-layer decryption pipeline Opcode...

smolvm

smolvm Branchable microVMs for AI agents. Embed lightweight virtual machines into your software, portable dev environments, and local sandboxing. Install brew install smol-machines/tap/smolvm macOS Homebrew curl -sSL https://smolmachines.com/install.sh | bash macOS + Linux Windows: unzip the...

hermes-agent

Hermes Agent ☤ Hermes Agent | Hermes Desktop The self-improving AI agent built byNous Research. It's the only agent with a built-in learning loop — it creates skills from experience, improves them during use, nudges itself to persist knowledge, searches its own past conversations, and builds a...