readme2demo

readme2demo — verified tutorials & demo videos from your README ▶ readme2demo generating its own tutorial: an AI agent runs this repo's README in a sandbox, a fresh container replays every step, then the demo is rendered. Full self-run output in examples/readme2demo · run against another project ...

AgentStalker

AgentStalker Agent St atic + A ttack-graph + L ive-replay K ernel for treating an LLM agent as a system to be audited — not a model to be aligned. 中文版 · v2 Roadmap · CodeWhale Audit Report Table of Contents Overview Validated in the Wild Features Current Capability Boundaries Architecture Quick...

agentbox

Agentbox - Coding Agent Sandbox There's no perfect way to sandbox agents yet, but containers are a practical start. Agentbox is a Docker-based coding agent sandbox, originally inspired by Batrachian Toad, and now generalized to more tools. It provides an isolated environment that works well with...

livewire-honeypot

Livewire Honeypot A high-interaction honeypot that masquerades as a vulnerable Laravel/Livewire application. It captures exploit attempts targeting known Livewire CVEs, stores uploaded malicious files webshells and remote code execution RCE payloads with SHA-256 deduplication, and optionally...

CVE-2026-67543

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, heym hardens one untrusted-code path but not its sibling. The Python tool executor pythontoolexecutor.py treats user code as untrusted and mandates a Docker sandbox no...

poodle-attack-sandbox

poodle-attack-sandbox Overview This code is the test code for POODLE CVE-2014-3566. POODLE stands for "Padding Oracle On Downgraded Legacy Encryption" and is a vulnerability in SSLv3.0. Warning If you use this code to carry out an attack, you may be arrested by the judicial authorities of your...

cve-bench

CVE-Bench A benchmark for evaluating LLM agents on fixing real-world security vulnerabilities. Agents run inside sandboxed Docker containers and are scored against the maintainer's security test suite. Requirements Python 3.12+ Docker OPENAIAPIKEY, ANTHROPICAPIKEY, and/or POOLSIDEAPIKEY in your...

自动化安全评估系统

安全研究员需要对企业内外部代码工程做漏洞审计，但纯人工审计慢、覆盖不全、误报高、报告撰写耗时——本项目用 多智能体协同 + Docker 沙箱隔离，把"源码接入 → 静态审计 → 动态无害验证 → 攻击链推演 → 报告交付"整条链路自动化，产出可复现漏洞证据、Diff 修复补丁与专业评估报告...

pentagi

PentAGI P enetration testing A rtificial G eneral I ntelligence Join the Community! Connect with security researchers, AI enthusiasts, and fellow ethical hackers. Get support, share insights, and stay updated with the latest PentAGI developments. ⠀ Table of Contents Overview Features Architecture...

kurukshetra

Kurukshetra Kurukshetra es un framework web desarrollado con el objetivo de ser el primer framework de código abierto que proporciona una base sólida para alojar desafíos de codificación segura razonablemente complejos, al tiempo que ofrece la capacidad de ejecutar cada desafío de manera eficient...

MSAK_Task6_Exploit_Development_Sandbox

MSAK Task 6 — Exploit Development Sandbox An isolated educati...

wp-forge

wp-forge wp-forge scans WordPress.org plugins for serious PHP...

CVE-2026-72713

XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the filename form field with no path containment check. Attackers can register an...

EUVD-2026-56851

XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the filename form field with no path containment check. Attackers can register an...

CVE-2026-72713 XAgent Path Traversal Arbitrary File Read via /workspace/file

XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the filename form field with no path containment check. Attackers can register an...

CVE-2026-72713 XAgent Path Traversal Arbitrary File Read via /workspace/file

XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the filename form field with no path containment check. Attackers can register an...

PT-2026-70827

XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the file name form field with no path containment check. Attackers can register an...

CVE-2026-72713: Improper Limitation of a Pathname to a Restricted Directory

XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the filename form field with no path containment check. Attackers can register an...

readme2demo v0.8.0

readme2demo — verified tutorials & demo videos from your README ▶ readme2demo generating its own tutorial: an AI agent runs this repo's README in a sandbox, a fresh container replays every step, then the demo is rendered. Full self-run output in examples/readme2demo · run against another project ...

readme2demo v0.7.5

readme2demo — verified tutorials & demo videos from your README ▶ readme2demo generating its own tutorial: an AI agent runs this repo's README in a sandbox, a fresh container replays every step, then the demo is rendered. Full self-run output in examples/readme2demo · run against another project ...