#1Tools for creating and managing isolated environments (VMs, containers) for security testing and malware analysis.
Kitploit recommended
flatpak/flatpakLinux application sandboxing and distribution framework
s3n4t0r-0x0/bear-c2The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a…
navikt/cpltSandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level…
nestybox/sysboxAn open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.
zerobootdev/zerobootSub-millisecond VM sandboxes for AI agents via copy-on-write forking
netblue30/firejailLinux namespaces and seccomp-bpf sandbox
getkern/kernRootless container runtime and sandbox that launches kernel-enforced OCI images in milliseconds with no daemon, featuring resource profiles, seccomp…
penberg/chimeraSandbox untrusted code with safe access to the host.
owasp/owasp-ctf-in-a-boxSelf-hosted OWASP CTF kit: one box, one free GitHub org, no cloud dependencies
abraxas/stirling-h2-import-leftoverStirling-PDF v3.2.0 - Critical - Remote - H2 RUNSCRIPT leftover - CREATE OR REPLACE ALIAS import-database
abraxas/jellyfin-ffmpeg-colonslashJellyfin Server 12.2 - High - Remote after .strm plant - FFmpeg arg injection - EncodingUtils -i leftover of GHSA-wwwm
vulhub/vulhubPre-Built Vulnerable Environments Based on Docker-Compose
blackarch/blackarchAn ArchLinux based distribution for penetration testers and security researchers.
abraxas/qemu-nvme-sgl-barQEMU 11.1.2 - High - Local - UAF - NVMe SGL span into BAR0 incomplete CVE-2021-3929
abraxas/vbox-vmdk-sparse-extentOracle VM VirtualBox 7.2.20 - High - Local - File read - VMDK sparse FLAT extent path join
abraxas/vbox-ovf-nat-tftp-prefixVirtualBox 7.2.20 - High - Local - File read - OVF NAT TFTP empty prefix
abraxas/vbox-guestctrl-copyfrom-dotdotVirtualBox 7.2.20 - High - Local - File write - Guest Control copy-from DOTDOT
abraxas/vbox-hgcm-ssm-cparmsVirtualBox 7.2.20 - High - Local - Heap overflow - HGCM SSM cParms wrap
