#1Tools for creating and managing isolated environments (VMs, containers) for security testing and malware analysis.
Kitploit recommended

Executes untrusted Python, JavaScript, and Bash in a hardened jail with 5-second, 128 MB, 0.5-core, PID and output limits.

OWASP knowledge base and validator for HTTP security response headers, providing recommendations, statistics, and automated configuration checks.

Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.

Collection of Python scripts for malware analysis, file format parsing, hashing, and forensic triage, including PDF, OLE, and XOR analysis utilities.

Jellyfin Server 12.2 - High - Remote after .strm plant - FFmpeg arg injection - EncodingUtils -i leftover of GHSA-wwwm

Stirling-PDF v3.2.0 - Critical - Remote - H2 RUNSCRIPT leftover - CREATE OR REPLACE ALIAS import-database

QEMU 11.1.2 - High - Local - UAF - NVMe SGL span into BAR0 incomplete CVE-2021-3929

VirtualBox 7.2.20 - High - Local - File write - Guest Control copy-from DOTDOT

VirtualBox 7.2.20 - High - Local - Heap overflow - HGCM SSM cParms wrap

VirtualBox 7.2.20 - Critical - Local - Type confusion / arb R/W - SAS1068 CONFIG SCSI-SPI overlay

VirtualBox 7.2.20 - High - Local - File write - OVF href dest escape

VirtualBox 7.2.20 - High - Local - File read - OVF NAT TFTP empty prefix

Oracle VM VirtualBox 7.2.20 - High - Local - File read - VMDK sparse FLAT extent path join

pfSense CE 2.9.0-DEVELOPMENT - High - Remote - Privilege leftover - readonly config_install

pfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - Config injection - ISC dhcpd filename

pfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - Config injection - IGMP type newline

pfSense CE 2.9.0-DEVELOPMENT - High - Remote - RCE - Unbound sock-queue-timeout CRLF

pfSense CE 2.9.0-DEVELOPMENT - High - Remote - Privilege leftover - hidden uploadconfig