Archived
unicorn_pe
hzqst/unicorn_peEmulates Windows PE execution using Unicorn engine for malware analysis, unpacking packed binaries, and decrypting VMProtect strings and imports.
binary-analysisdynamic-analysis-sandboxingexploitation+3
hzqst/unicorn_peEmulates Windows PE execution using Unicorn engine for malware analysis, unpacking packed binaries, and decrypting VMProtect strings and imports.
thesecretclub/sandboxbootkitBootkit for Windows Sandbox to disable DSE/PatchGuard.
googleprojectzero/sandbox-attacksurface-analysis-toolsSet of tools to analyze Windows sandboxes for exposed attack surface.
0vercl0k/wtfDistributed, code-coverage guided snapshot-based fuzzer for user and kernel-mode targets on Windows and Linux, with emulator and hypervisor backends.
bishopfox/bfinjectDylib injection for iOS 11.0 - 11.1.2 with LiberiOS and Electra jailbreaks
soulghost/iblessingiblessing is an iOS security exploiting toolkit, it mainly includes application information gathering, static analysis and dynamic analysis. It can…
dinosn/fastjson-jsontype-rce-labDocker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2…
ttdennis/fpickerFrida-based in-process fuzzing suite with AFL++ proxy, standalone active/passive modes, and shared memory communication for high-performance…
jas502n/cve-2019-12384Jackson Rce For CVE-2019-12384
freeqaz/react2shellRCE exploit toolkit for CVE-2025-55182 and CVE-2025-66478 in React Server Components. Includes multiple exploit variants, detection scripts, a…
0x4ndy/clifclif is a command-line interface (CLI) application fuzzer, pretty much what wfuzz or ffuf are for web. It was inspired by sudo vulnerability…
iterat0r/cnaemulatorStandalone emulation and testing harness for Cobalt Strike Aggressor Scripts (.cna) that validates syntax, mocks Beacon APIs, and executes BOFs via…
aliclub0x00/cve-2025-55182-poc-nextjsWorking proof of concept for NextJS RCE to establish a reverse shell. [React2Shell]
rakutentech/jndi-ldap-test-serverA minimalistic LDAP server that is meant for test vulnerability to JNDI+LDAP injection attacks in Java, especially CVE-2021-44228.
fracturelabs/go-scan-springVulnerability scanner for Spring4Shell (CVE-2022-22965)
jazho76/house_of_apple_2Interactive GDB walkthrough of the House of Apple 2 FSOP technique on glibc 2.43, with a reproducible sandbox covering vtable bypass, stack pivoting,…
abraxas/cve-2026-19445-sni-uafProof-of-concept lab for CVE-2026-19445, a CPython ssl SNI SSLContext use-after-free where a remote TLS client frees the server's dispatch context…
biitts/cve-2026-53753-crawl4ai-rceCVE-2026-53753 — Crawl4AI <0.8.7 unauthenticated RCE (AST sandbox escape via gi_frame.f_back). Lab + PoC, verified e2e.