riscv-isa-sim

Spike RISC-V ISA Simulator About Spike, the RISC-V ISA Simulator, implements a functional model of one or more RISC-V harts. It is named after the golden spike used to celebrate the completion of the US transcontinental railway. Spike supports the following RISC-V ISA features: RV32I and RV64I ba...

vpod

Vpod Live demo • Getting Started • Documentation • Issues • Contributing What is a vpod ? A vpod is a lightweight, portable sandbox that gives an untrusted process an instant Linux environment. It uses a RISC‑V architecture and runs entirely inside WebAssembly. Fast startup : Boot in under a...

ckb-vm

Nervos CKB VM About CKB VM CKB VM is a pure software implementation of the RISC-V instruction set used as scripting VM in CKB. Right now it implements full IMCB instructions for both 32-bit and 64-bit register size support. In the future we might also implement V extensions to enable better crypt...

CVE-2026-93133

This CVE affects the Linux kernel ACPI RISC-V subsystem, specifically the riscv_acpi_add_prt_dep() function. The root cause is that the acpi_get_handle() call can fail, leaving the link_handle variable uninitialized , which could lead to undefined behavior when the variable is subsequently used. ...

CVE-2026-93132

This vulnerability affects the Linux kernel 's ACPI RISC-V subsystem, specifically the riscv_acpi_add_prt_dep() function. The root cause is that the loop's error conditions are handled by continue statements that skip the entry pointer update to the next entry, resulting in dubious or incorrect p...

CVE-2026-92519

CVE-2026-92519 is a memory leak in the Linux kernel affecting the RISC-V BPF JIT subsystem. When BPF JIT compilation fails for a later subprogram, the kernel calls bpf_jit_free() to clean up an earlier subprogram, but the function fails to free jit_data->ctx.offset , leaking the JIT context of...

CVE-2026-92517

CVE-2026-92517 affects the Linux kernel on RISC-V , specifically in the BPF arena load_acquire path. The root cause is in emit_atomic_ld_st(), which returns a non-zero value (1) to signal that build_body() should skip a zero-extension step. Because the caller uses ret = ret ?: add_exception_handl...

pico2-swd-riscv

pico2-swd-riscv SWD debug probe for RP2350 RISC-V Hazard3 cores. One Pico2 debugs another via two GPIO wires. 0. VIBE CODE WARNING WRITTEN BY HUMAN About 80% of the code is vibe coded; The readme is almost completely generated except the whole vibe-code-warning section. I spent many nights with...

boxlambda

About BoxLambda BoxLambda is a hardware-software crossover project creating a homebrew, retro-style FPGA-based microcomputer. The goal is to create a sandbox environment for experimenting with software and FPGA gateware. The Physical Setup The physical setup. Current Features Target FPGA:...

arduino-pico

Arduino-Pico Raspberry Pi Pico Arduino core, for all RP2040 and RP2350 boards This is a port of Arduino to the RP2040 Raspberry Pi Pico processor and RP2350 Raspberry Pi Pico 2 processor. It uses the bare Raspberry Pi Pico SDK and a custom GCC 14.3/Newlib 4.5 toolchain and supports ARM and RISC-V...

qrv

QRV — a QNX Neutrino-based operating system, re-imagined for 64-bit RISC-V QRV is a ground-up adaptation and re-implementation of the QNX Neutrino 6.4 operating system for modern 64-bit hardware, with RISC-V rv64g as the primary architecture and x86-64 as a secondary target. The project started o...

mojo-v

Mojo-V: Secret Computation for RISC-V Mojo-V pronounced “mojo-five” is a new RISC-V extension that introduces privacy-oriented programming capabilities for RISC-V. Mojo-V implements secret computation, enabling secure, efficient, and data-oblivious execution without reliance on fragile software a...

Centreon-RCE

Centreon-RCE Centreon v.19.04 Remote Code Execution exploit CVE-2019-13024 Revision of https://github.com/mhaskar/CVE-2019-13024 HOW TO USE: 1. Edit argument defaults for convenience, or don't bottom of script 2. If needed, edit 'editcommand' function to defeat defenses 3. '-v' for...

OSCP

OSCP-Lab Linkedin V. Varbanovski...

CVE-2024-23998

Another Redis Desktop Manager PoC A Proof-Of-Concept for CVE-2024-23998 vulnerability. 1. Vunerability Overview: Vulnerability Subject: Local Code Excution via XSS Vulnerability Version: =...

s6_pcie_microblaze

PCI Express DIY hacking toolkit General information Contents SP605 board configuration Software configuration Examples Using Python API Practical DMA attacks Option ROM attacks Troubleshooting Building project from the source code General information This repository contains a set of tools and...

linux-kernel-exploitation

Linux Kernel Exploitation A collection of links related to Linux kernel security and exploitation. Updated bimonthly. Pull requests are welcome as well. Follow @andreyknvl on X, @[email protected] on Mastodon, or @andreyknvl on Bluesky to be notified of updates. Subscribe to @linkersec on...

DeadDialect

DeadDialect Every boot speaks a different language. Yesterday's binary is today's dead code. A session-unique RISC-V ISA remapping system. Every time the system boots, it generates a fresh cryptographic permutation of the instruction set. Binaries compiled for one session are cryptographically...

hyperv_local_dos_poc

Hyper-V DoS PoC. This is code files of Visual Studio 2019 driver project. 1. Compile driver. 2. Enable nested virtualization for guest OS using command: root@kitploit: Set-VMProcessor -VMName -ExposeVirtualizationExtensions $true 3. Run driver inside guest OS. Host OS will be rebooted or generate...

wifi_db

wifidb Script to parse Aircrack-ng captures into a SQLite database and extract useful information like handshakes in 22000 hashcat format, enterprise MGT identities and EAP-MD5 challenge/response pairs, the X.509 certificates and RSN/WPA security configuration of each network, the 802.11r/k/v,...