#1Tools for creating and managing isolated environments (VMs, containers) for security testing and malware analysis.
Kitploit recommended
abraxas/vbox-ovf-href-dest-escapeVirtualBox 7.2.20 - High - Local - File write - OVF href dest escape
abraxas/vbox-lsilogic-sas-configVirtualBox 7.2.20 - Critical - Local - Type confusion / arb R/W - SAS1068 CONFIG SCSI-SPI overlay
monad-developers/ultrafuzzEnd-to-end agentic smart contract fuzzing and threat hunting
michaels1011/ephemora-cellCapability-based WASM runtime for executing untrusted AI-generated code with enforced CPU, memory, time, I/O, and filesystem limits. Provides…
abraxas/pfsense-dhcpd-confpfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - Config injection - ISC dhcpd filename
abraxas/pfsense-igmp-typepfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - Config injection - IGMP type newline
abraxas/pfsense-config-readonly-restorepfSense CE 2.9.0-DEVELOPMENT - High - Remote - Privilege leftover - readonly config_install
ethan-andrews/threatintel-aggregatorSelf-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineering. Runs…
abraxas/pfsense-unbound-sock-timeoutpfSense CE 2.9.0-DEVELOPMENT - High - Remote - RCE - Unbound sock-queue-timeout CRLF
abraxas/pfsense-uploadconfigpfSense CE 2.9.0-DEVELOPMENT - High - Remote - Privilege leftover - hidden uploadconfig
adriancable/eternalMinimal machine architecture with LLVM compiler backend, Linux port, and virtual machine for creating self-contained software capsules that remain…
remnux/distroProvides supplemental files and Debian package sources for a specialized Linux distro focused on malware analysis, reverse engineering, and digital…
containers/bubblewrapLow-level unprivileged sandboxing tool used by Flatpak and similar projects
abraxas/opnsense-firmware-mirror-sedOPNsense 26.7.6 - High - Remote - Privilege leftover - custom firmware mirror sed-skips pkg fingerprints
abraxas/opnsense-tunables-loaderOPNsense 26.7.6 - High - Remote - Config line injection - tunables loader
abraxas/opnsense-ntp-gps-fudgeOPNsense 26.7.6 - High - Remote - Config line injection - NTP GPS fudge
abraxas/opnsense-lockout-factory-ipOPNsense 26.7.6 - High - Remote - Privilege leftover - factory lockout IP
abraxas/opnsense-uidfield-system-uid0OPNsense 26.7.6 - High - Remote - Privilege leftover - UidField uid 0
