
BEAR-C2
The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a…

The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a…

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

A repo to conduct vulnerability enrichment.

A PS5 hypervisor exploit for 1.xx-2xx firmwares.

PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned…

Source code of a multiple series of tutorials about the hypervisor. Available at: https://rayanfam.com/tutorials

Remote hypervisor development class for security researchers; covers virtualization internals, hypervisor security, and vulnerabilities in privileged…

Script to install prerequisites for deploying GOAD on Ubuntu Linux 22.04

Windows Process Lockdown Tool using Job Objects

The materials of "Hypervisor 101 in Rust", a one-day long course, to quickly learn hardware-assisted virtualization technology and its application…

Hosts Orange CERT security advisories with accompanying proof-of-concept code for disclosed vulnerabilities, organized by CVE identifier.

Docker-based cybersecurity lab for studying and reproducing CVE-2021-41773 in an isolated environment.

Proof-of-concept client and Docker lab reproducing CVE-2026-15583, an unauthenticated confused-deputy SSRF in Grafana MCP Server that leaks…