kernel-exploit-factory

kernel-exploit-factory Keep updating...... Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore. This repository is to extract all Linux kernel exploit and relative debug environment. You can use Qem...

Podroid

Podroid Run Linux containers and a full Linux desktop on your Android phone. No root. A real Alpine Linux VM with its own kernel - not a chroot or proot trick - so Podman, Docker and LXC behave exactly like they do on a server. Website · Documentation · Download APK Home | Running | !Built-in...

mofos

mofos Concept Installation Configure the host QEMU/KVM system session Security considerations Mofos configuration Install a template Configure the firewall Install Import Create the upper layer empty disk Create a virtual machine Customization Template - hook install Virtual machine - hook new...

CVE-2021-3929-3947

CVE-2021-3929-3947 VM escape PoC for CVE-2021-3929 and CVE-2021-3947. Educational purposes only. You can read the white paper for more information. Environment OS: Ubuntu 21.10 Linux: 5.13.0 gcc: 11.2.0 glibc: 2.34 glib: 2.68.4 QEMU: 6.1.0 Guest OS: Ubuntu 21.04 Commands Host qemu-system-x8664 ru...

ad-honeypot-autodeploy

ad-honeypot-autodeploy Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically. Runs on self-hosted virtualization using libvirt with QEMU/KVM but it can be customized easily for cloud-based solutions. Used for painlessly set up a small Windows Domai...

cve-2023-46813-poc

CVE-2023-46813 PoC 1. Apply the patches in the host-patches folder to the Linux host and QEMU. 2. Start an SEV-SNP VM. 3. Run the code in this repo and wait for the message "waiting for the hypervisor to change memory to MMIO". 4. Spam the attack command in QEMU several times. 5. Once the exploit...

qiling

Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...

unicorn

Unicorn Engine LOOKING FOR CONTRIBUTORS! See this. Unicorn is a lightweight, multi-platform, multi-architecture CPU emulator framework, based on QEMU. Unicorn offers some unparalleled features: Multi-architecture: ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore and X86 16, 32,...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

Inferno

ChefKiss Inferno ChefKiss Inferno is derivative of the QEMU project which provides Apple ARM device guest support. !CAUTION Please consider donating/tipping to help continue the project's development, keeping it free and open-source. PayPal or credit/debit card: https://ko-fi.com/chefkiss BTC:...

page_table_walk

Capture the Flag in Physical Memory You've read about paging. The diagrams make sense. Four levels, 9 bits each, page frame, offset. Sure. But then you hit a challenge that requires actually walking page tables, and you realize you don't know it. You know about it. Big difference. What worked for...

kali-packer

Kali-Packer This used to be the home of Kali-Vagrant's build-scripts. Since Kali 2025.2, the Kali team has stopped using Packer to generate Vagrant VMs and now uses DebOS. This is the same method used to generate our other/stock VMs. As this repository is no longer responsible for theKali Vagrant...

exploiting-cve-2017-5123

Exploiting CVE-2017-5123 Introduction This repository is an addition to the article published in MISC Magazine 96. We achieved to elevate our privileges in a reliable way, on our virtual machine with SMEP / SMAP and KASLR enabled. It should however be noted that the system if left in an unstable...

TriforceAFL

New: For those looking to play with TriforceAFL and TLSF, Richard Johnson created a Dockerfile which installs both and even builds a Linux kernel for you. It's available here https://hub.docker.com/r/moflow/afl-triforce/tags/. Also new: afl-tmin now works with the forkserver!...

nautilus

Nautilus 2.0 Nautilus is a coverage guided, grammar based fuzzer. You can use it to improve your test coverage and find more bugs. By specifying the grammar of semi valid inputs, Nautilus is able to perform complex mutation and to uncover more interesting test cases. Many of the ideas behind this...

kali-vm

Kali-VM 构建脚本 Kali Linux 虚拟机（VM）镜像构建器，通过debos（配合 fakemachine 和 KVM）实现。 这些正是 Kali 团队 用于生成官方 Kali Linux VM 镜像的相同 构建脚本，可在 kali.org/get-kali/ 找到。 如需更多信息，请参阅：kali.org/docs/virtualization/。 立即构建你的 Kali！ 先决条件 我们建议在与目标架构匹配的 Linux 主机上进行构建。 有多种方式可以准备好使用 kali-vm 构建脚本。你可以选择： build.sh - 直接从你的机器构建...

gustave

c Airbus 2021, sduverger GUSTAVE - 組み込みOSカーネルファザー それは何ですか？ GUSTAVEは、組み込みOSカーネルのためのファジングプラットフォームです。これは QEMU と AFL およびその forkserver の関連ツール全て に基づいています。これにより、OSカーネルをシンプルなアプリケーションのようにファジングできます。 QEMUのおかげで、マルチプラットフォーム対応です。GUSTAVEは、QEMU内部でのAFL forkserver 実装であり、細かい粒度でのターゲット検査が可能です。 サポートされているカーネルは？...

gustave

c Airbus 2021, sduverger GUSTAVE - Embedded OS kernel fuzzer What is it ? GUSTAVE is a fuzzing platform for embedded OS kernels. It is based on QEMU and AFL and all of its forkserver siblings. It allows to fuzz OS kernels like simple applications. Thanks to QEMU, it is multi-platform. One can see...

unicorn

ユニコーンエンジン コントリビュータ募集中！ 詳細はこちら。 Unicornは、QEMUをベースとした、軽量でマルチプラットフォーム、マルチアーキテクチャのCPUエミュレータフレームワークです。 Unicornには、以下のような比類のない機能があります。 マルチアーキテクチャ: ARM、ARM64 ARMv8、M68K、MIPS、PowerPC、RISCV、SPARC、S390X、TriCore、X86（16、32、64ビット） クリーン/シンプル/軽量/直感的なアーキテクチャ非依存のAPI 純粋なC言語で実装されており、Crystal、Clojure、Visual...

DECAF

DECAF DECAF short for Dynamic Executable Code Analysis Framework is a binary analysis platform based on QEMU. DECAF++ DECAF++, the new version of DECAF, taint analysis is around 2X faster making it the fastest, to the best of our knowledge, whole-system dynamic taint analysis framework. This...