#1Tools for creating and managing isolated environments (VMs, containers) for security testing and malware analysis.
Kitploit recommended
sinakarvandi/hypervisor-from-scratchSource code of a multiple series of tutorials about the hypervisor. Available at: https://rayanfam.com/tutorials
patriksimek/vm2Isolated JavaScript sandbox for Node.js that runs untrusted code with restricted access to built-in modules and host resources via Proxy-based…
nestybox/sysboxAn open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.
microsoft/mxcPolicy-driven, layered isolation and containment
beelzebub-labs/beelzebubA secure low code deception runtime framework, leveraging AI for System Virtualization.
ionescu007/simplevisorMinimal Intel VT-x hypervisor for Windows and UEFI that virtualizes a live host for introspection, supporting dynamic hyperjacking, unhyperjacking,…
tandasat/hypervisor-101-in-rustThe materials of "Hypervisor 101 in Rust", a one-day long course, to quickly learn hardware-assisted virtualization technology and its application…
cisagov/vulnrichmentA repo to conduct vulnerability enrichment.
usbarmory/tamagoFramework for compiling and executing Go applications on bare metal processors, enabling secure firmware development with reduced attack surface…
rivet-dev/sandbox-agentA durable process per agent, with memory that survives restarts
xairy/vmware-exploitationA collection of links related to VMware escape exploits
lxc/incus-osImmutable Linux OS image optimized for running Incus containers and virtual machines, with UEFI Secure Boot, TPM 2.0 disk encryption, and automated…
trailofbits/claude-code-devcontainerSandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.
pentoo/pentoo-overlayGentoo overlay for security tools as well as the heart of the Pentoo Livecd
darthton/hyperboneMinimalistic VT-x hypervisor for Windows x64 providing syscall, MSR, IDT, and kernel inline hooks plus EPT-based page substitution and TLB splitting.
jamesstringer90/appsandboxEasily create full virtual machines that are sandboxed for development or computer use models.
googleprojectzero/p0toolsCollection of Google Project Zero vulnerability research documents and small standalone security tools, including exploitation and…
s3n4t0r-0x0/bear-c2The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a…
