
Hypervisor-From-Scratch
Source code of a multiple series of tutorials about the hypervisor. Available at: https://rayanfam.com/tutorials

Source code of a multiple series of tutorials about the hypervisor. Available at: https://rayanfam.com/tutorials

Isolated JavaScript sandbox for Node.js that runs untrusted code with restricted access to built-in modules and host resources via Proxy-based…

An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.

Policy-driven, layered isolation and containment

A secure low code deception runtime framework, leveraging AI for System Virtualization.

Minimal Intel VT-x hypervisor for Windows and UEFI that virtualizes a live host for introspection, supporting dynamic hyperjacking, unhyperjacking,…

The materials of "Hypervisor 101 in Rust", a one-day long course, to quickly learn hardware-assisted virtualization technology and its application…

A repo to conduct vulnerability enrichment.

Framework for compiling and executing Go applications on bare metal processors, enabling secure firmware development with reduced attack surface…

A durable process per agent, with memory that survives restarts

A collection of links related to VMware escape exploits

Immutable Linux OS image optimized for running Incus containers and virtual machines, with UEFI Secure Boot, TPM 2.0 disk encryption, and automated…

Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.

Gentoo overlay for security tools as well as the heart of the Pentoo Livecd

Minimalistic VT-x hypervisor for Windows x64 providing syscall, MSR, IDT, and kernel inline hooks plus EPT-based page substitution and TLB splitting.

Easily create full virtual machines that are sandboxed for development or computer use models.

Collection of Google Project Zero vulnerability research documents and small standalone security tools, including exploitation and…

The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a…