Anti-Sandbox

Description Detecting AnyRun sandbox, and more is coming out in the future. AnyRun detection Demo https://github.com/user-attachments/assets/45533630-3c64-457a-80d0-a0f12ae84b98...

Neton

Neton - A sandbox information gathering tool Neton is a tool for getting information from Internet connected sandboxes. It is composed by an agent and a web interface that displays the collected information. The Neton agent gets information from the systems on which it runs and exfiltrates it via...

CVE-2026-3462

CVE-2026-3462 Acrobat Reader | Неправильно контролируемая модификация атрибутов прототипа объекта «Загрязнение прототипа» CWE-1321 CVE-2026-34621 — Расширенный кроссплатформенный генератор эксплойтов =========================================================== Генерирует вредоносный PDF-файл,...

CVE-2026-35570

Выход из песочницы: как я нашёл критический обход path traversal в openclaude CVE-2026-35570 | CVSS 8.4 High | openclaude v0.1.7 Не каждая уязвимость требует сложной цепочки эксплойтов. Иногда одного неудачно расположенного оператора return достаточно, чтобы пробить дыру прямо в вашей модели...

CVE-2026-23830-SandBreak

SandBreak CVE-2026-23830 Генератор эксплойтов и инструмент Auto-Pwn SandBreak — это надёжный генератор эксплойтов на Go, предназначенный для использования уязвимости SandboxJS Escape CVE-2026-23830. Этот инструмент эксплуатирует незащищённый конструктор AsyncFunction в старых версиях sandboxjs,...

CVE-2026-21858

CVE-2026-21858 + CVE-2025-68613 - n8n 전체 체인 인증 없는 임의 파일 읽기 → 관리자 토큰 위조 → 샌드박스 우회 → RCE...

readme2demo

readme2demo — verified tutorials & demo videos from your README ▶ readme2demo generating its own tutorial: an AI agent runs this repo's README in a sandbox, a fresh container replays every step, then the demo is rendered. Full self-run output in examples/readme2demo · run against another project ...

CVE-2025-4517-Python-tarfile-filter-data-Bypass-PoC

CVE-2025-4517 — Contournement du filtre "data" de Python tarfile PoC Vulnérabilité de traversée de chemin dans le module tarfile de Python affectant les versions 3.8.0 à 3.13.1. Le bac à sable filter="data" — destiné à empêcher les extractions non sécurisées — peut être contourné en concevant des...

CVE-2023-22527_Confluence_RCE

CVE-2023-22527 Confluence RCE CVE-2023-22527 - Confluence Data Center 및 Confluence Server의 RCE원격 코드 실행 취약점 PoC 참고 자료 CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server | Atlassian Support | Atlassian Documentation CONFSERVER-93833 RCE Remote...

CAPEv2

CAPE: Malware Configuration And Payload Extraction - Documentation CAPE is a malware sandbox. A sandbox is used to execute malicious files in an isolated environment whilst instrumenting their dynamic behaviour and collecting forensic artefacts. CAPE was derived from Cuckoo v1 which features the...

nimcrypt

nimcrypt A Sliver shellcode loader written in Nim targeting Windows x64. Two variants covering the two most common delivery situations. Tested against Windows Defender with real-time protection enabled. Variants stager Reads an encrypted shellcode blob from disk, decrypts it in memory, and...

cve-bench

CVE-Bench A benchmark for evaluating LLM agents on fixing real-world security vulnerabilities. Agents run inside sandboxed Docker containers and are scored against the maintainer's security test suite. Requirements Python 3.12+ Docker OPENAIAPIKEY, ANTHROPICAPIKEY, and/or POOLSIDEAPIKEY in your...

detux

Detux : Le bac à sable Linux multiplateforme Introduction : Detux est un bac à sable développé pour analyser le trafic des logiciels malveillants Linux et capturer les IOCs ce faisant. L'hyperviseur QEMU est utilisé pour émuler Linux Debian pour diverses architectures CPU. Les CPU suivants sont...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

TraceTree

TraceTree TraceTree Demo TraceTree cascade-analyzer is an autonomous security organism designed for the agentic era. It moves beyond simple scanning into a robust, hardened, and scalable detection ecosystem. Like its mascot, the spider, TraceTree weaves a comprehensive web of protection around yo...

Bypass-Sandbox-Evasion

Bypass-Sandbox-Evasion Sandboxes are commonly used to analyze malware. They provide a temporary, isolated, and secure environment in which to observe whether a suspicious file exhibits any malicious behavior. However, malware developers have also developed methods to evade sandboxes and analysis...

agentbox

Agentbox - Coding Agent Sandbox There's no perfect way to sandbox agents yet, but containers are a practical start. Agentbox is a Docker-based coding agent sandbox, originally inspired by Batrachian Toad, and now generalized to more tools. It provides an isolated environment that works well with...

CAPE

CAPEv2 Python3 has now been released CAPEv2 With the imminent end-of-life for Python 2 January 1 2020, CAPEv1 will be phased out. Please upgrade to the Python 3 version as soon as possible. CAPE: Malware Configuration And Payload Extraction CAPE is a malware sandbox. It is derived from Cuckoo and...

cve_2026_34621_advanced

CVE-2026-34621 고급 익스플로잇 생성기 CVE-2026-34621 을 위한 정교한 크로스 플랫폼 익스플로잇 생성기 – Windows 및 macOS에서 샌드박스 탈출과 임의 코드 실행으로 이어지는 Adobe Acrobat 및 Reader의 치명적인 프로토타입 오염 취약점입니다. ⚠️ 중요 고지 이 도구는 승인된 보안 연구 및 침투 테스트 용도로만 사용해야 합니다. 소유하지 않았거나 명시적인 서면 테스트 허가를 받지 않은 시스템에 대한 무단 사용은 불법 입니다. 작성자는 오용에 대해 어떠한 책임도 지지 않습니다. 📋 목차...

sandbox

Concave AI Sandbox Запускайте ИИ-код безопасно, быстро и без доверия Платформа-песочница для выполнения кода, которую можно развернуть самостоятельно, построена на базе microVM Firecracker. Время запуска менее 200 мс благодаря тёплому пулу на основе снапшотов. О проекте Concave предоставляет...