Tools for creating and managing isolated environments (VMs, containers) for security testing and malware analysis.
trustsig-eu/wasm2c-tableflipwasm2c sandbox escape. An untrusted WebAssembly module breaks out of the generated C sandbox and executes an arbitrary shell command on the host.
dockur/windowsRun Windows inside a Docker container with KVM acceleration, automatic installation, and customizable resources. Supports multiple Windows versions,…
chefkissinc/infernoApple Silicon device emulator.
trungnguyen1909/qemu-t8030iPhone 11 emulated on QEMU
darnellwashingtonjr94-art/sandb0x-xtract0rAutomated cross-platform sandbox that detonates suspicious files in isolated VMs/emulators, captures network and memory artifacts, and creates LLM…
horkimhab/cve-2026-53365Proof-of-concept CVE exploit and lab scripts for sandbox/VM isolation, targeting authorized environments such as Docker and virtual machines for…
leaningtech/webvmClient-side Linux virtual machine running in the browser via WebAssembly, with Tailscale networking, Dockerfile-based custom images, and CTF…
qemu/qemuOfficial QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use…
kata-containers/kata-containersSecure OCI container runtime that runs workloads inside lightweight VMs, providing strong isolation across Kubernetes, containerd, and CRI-O with…
orange-cyberdefense/goadAutomated vulnerable Active Directory lab suite for practicing penetration testing techniques, with prebuilt domains/forests and standalone attack…
nccgroup/scoutsuiteMulti-Cloud Security Auditing Tool
boltgolt/howdy🛡️ Windows Hello™ style facial authentication for Linux
netblue30/firejailLinux namespaces and seccomp-bpf sandbox
flatpak/flatpakLinux application sandboxing and distribution framework
clong/detectionlabAutomate the creation of a lab environment complete with security tooling and logging best practices
anthropic-experimental/sandbox-runtimeA lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
