#1Tools for creating and managing isolated environments (VMs, containers) for security testing and malware analysis.
Kitploit recommended
mandiant/flare-vmA collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…
tandasat/minivisorpkgThe research UEFI hypervisor that supports booting an operating system.
nccgroup/scoutsuiteMulti-cloud security auditing tool that leverages cloud provider APIs to gather configuration data, assess security posture, and generate HTML…
opposum0112/decretumContract LinkML compiler for a security researchers
opposum0112/cusimanseComposable research-contract and YAML-recipe framework for agent-operated security experiments on disposable compute
yv1ing/secboxConducting cybersecurity testing using the pi agent in a pre-built sandbox environment.
tencentcloud/cubesandboxInstant, Concurrent, Secure & Lightweight Sandbox for AI Agents.
0xcyberstan/cve-2026-59346-pocPoC for CVE-2026-59346 - 32-bit integer overflow in VMware's VMXNET3 TSO segmentation path, guest-to-host crash.
flatpak/flatpakLinux application sandboxing and distribution framework
jamesstringer90/appsandboxEasily create full virtual machines that are sandboxed for development or computer use models.
suominen/itscapeTracking ITScape (CVE-2026-46316), the KVM/arm64 guest-to-host escape
owasp/secure-headers-projectOWASP knowledge base and validator for HTTP security response headers, providing recommendations, statistics, and automated configuration checks.
sandboxec/sandboxecA lightweight command sandbox for Linux, secure-by-default, built on Landlock.
ressl/cve-2026-87902-pocPoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned…
dockur/windowsRun Windows inside a Docker container with KVM acceleration, automatic installation, and customizable resources. Supports multiple Windows versions,…
dockersecurityplayground/dspA Microservices-based framework for the study of Network Security and Penetration Test techniques
didierstevens/didierstevenssuiteCollection of Python scripts for malware analysis, file format parsing, hashing, and forensic triage, including PDF, OLE, and XOR analysis utilities.
mandiant/commando-vmCustomizable Windows-based virtual machine distribution pre-packaged with offensive security tools for penetration testing and red teaming operations.
