Chimera

Chimera Unlea$ed Tool Background While DLL sideloading can be used for legitimate purposes, such as loading necessary libraries for a program to function, it can also be used for malicious purposes. Attackers can use DLL sideloading to execute arbitrary code on a target system, often by exploitin...

NemoClaw

NVIDIA NemoClaw: Reference Stack for Sandboxed AI Agents in OpenShell NVIDIA NemoClaw is an open source reference stack for running supported AI agents more safely inside NVIDIA OpenShell sandboxes. It provides guided onboarding, managed inference, network policy, managed integrations,...

yoloai

yoloAI Sandboxed runner for AI coding agents. No permission fatigue, no credentials in the box, no changes to your project until you approve them. AI coding agents work best with the guardrails off, and that's a terrible way to run them on your real machine. yoloAI gives the agent a disposable...

CVE-2023-30547

CVE-2023-30547 PoC Exploit for VM2 Sandbox Escape Vulnerability alt img Description vm2 3.9.17 is vulnerable to arbitrary code execution due to a flaw in exception sanitization. Attackers can exploit this by triggering an unsanitized host exception within handleException, enabling them to escape...

CVE-2022-0543

CVE-2022-0543 CVE-2022-0543RCE,Redis Lua沙盒绕过 命令执行 Usage python3 CVE-2022-0543.py...

Zapscape

⚡ Zapscape - Your Computer's Safety Net, Simplified ⬇️ DOWNLOAD ZAPSCAPE NOW 🛡️ What Is Zapscape? Zapscape is a friendly tool that helps protect your computer from a hidden threat called a "KVM escape." Think of it as a digital shield that keeps your personal files, photos, and information safe...

CVE-2025-61303

CVE-2025-61303 - RecordedFuture Triage: Denial-Of-Analysis via Recursive Process Forking Description RecordedFuture Triage Sandbox Windows 10 build 2004 and Windows 10 LTSC 2021 contains a critical vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to...

V8-sbx-bypass-collection

V8 Sandbox escape/bypass/violation and VR collection A collection of links related to V8 sandbox VR and exploitation Contents IssueTracker Articles Papers & Slides Design documents IssueTracker 2023: "issue id: 40940619, V8 Sandbox escape due to type tags in ExternalPointerTable being too coarse...

al-khaser

Al-Khaser v0.81 Content Introduction Possible uses Features Anti-debugging attacks Anti-Dumping Timing Attacks Human Interaction Anti-VM Anti-Disassembly Requirements License Introduction al-khaser is a PoC "malware" application with good intentions that aims to stress your anti-malware system. I...

CVE-2026-78851

Grav Authenticated Path Traversal / Arbitrary Directory Disclosure via Twig mediadirectory Reporter Name: CYBER-SEC Contact: [email protected] Summary Grav's Twig function mediadirectory is exposed inside the page-content Twig sandbox allowlist but does not properly enforce path containment...

CVE-2022-23614

CVE-2022-23614 Proof of concept PoC for CVE-2022-23614 referenced in the DSA-5107-1. CVSS-2.0 : 7.5 CVSS-3.X : 9.8 Explanation Twig is a flexible, fast, and secure template engine for PHP. Notably, it is possible to use filters in a template before rendering it. The sort filter can be used to sor...

CVE-2025-56015

CVE-2025-56015 GenieACS RCE Overview Proof-of-Concept exploit for CVE-2025-56015 a critical sandbox escape and code injection vulnerability in GenieACS allowing arbitrary JavaScript execution in the provisioning context. By leveraging the declare.constructor.constructor prototype chain, an attack...

ZygoteExploitDemo

🔥 ZygoteExploitDemo - CVE-2024-31317 Android Security Lab 🚨 Educational Demonstration of Android Zygote Injection Vulnerability 📋 Overview This lab demonstrates CVE-2024-31317 , a critical Android vulnerability that allows a malicious app to escalate privileges to SYSTEM level UID 1000 and bypass...

CVE-2018-20162-digi-lr54-restricted-shell-escape

layout: post title: "CVE-2018-20162: Digi TransPort LR54 Restricted Shell Escape" author: sgo category: security The Digi TransPort LR54 is a high speed LTE router commonly used by industry, infrastructure, retail and public transportation. It supports running python scripts in a restricted...

nono

Built by the team that brought you Sigstore The standard for secure software attestation, used by PyPI, npm, brew, and Maven Central !NOTE In the lead-up to a 1.0 release, APIs are stabilizing. API changes may still occur where necessary, but will be kept to a minimum. nono is a complete agent...

brokentooth

brokentooth POC for CVE-2018-4327 at least I think so since CVE-2018-4327 and CVE-2018-4330 were both discussed by @SparkZheng but it's not clear from him which one relates to which bug but since he described this one first I'm taking a guess. Tested on iPhone 6S 11.3.1 Should work until 11.4 Let...

boxlambda

About BoxLambda BoxLambda is a hardware-software crossover project creating an experimental, retro-style, FPGA-based microcomputer. The goal is to create a new computer to explore old ideas. The Physical Setup The physical setup. Current Features Target FPGA: Arty-A7-100T. Ibex RISC-V core with...

agentZ

Zero Trust Agentic AI Platform Build, run, and govern AI agents. Secure by design. Every agent runs inside a default-deny sandbox and never receives a credential. Every agent action is traceable. AgentZ is a multi-tenant platform for running AI agents. It provides strong isolation guarantees, zer...

CVE-2026-46300

⚠️ Security Research & Legal Disclaimer 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts in controlled...

vibebox

an ultrafast, open-source sandbox for running coding agents safely. English | 简体中文 VibeBox is a per-project micro-VM sandbox for running coding agents on macOS Apple Virtualization Framework. It’s optimized for a daily-driver workflow: fast warm re-entry, explicit mounts, and reusable sessions. W...