qubes-mirage-firewall
mirage/qubes-mirage-firewallMinimal unikernel firewall for QubesOS that filters network traffic, implements NAT, and communicates via Qubes DB and qrexec.
defensive-toolsnetwork-access-controlnetwork-security+1
238
mirage/qubes-mirage-firewallMinimal unikernel firewall for QubesOS that filters network traffic, implements NAT, and communicates via Qubes DB and qrexec.
intellabs/kaflA fuzzer for full VM kernel/driver targets
microsoft/secureboot_objectsMicrosoft's curated repository of secure boot objects (KeK, Db, Dbx) for firmware and runtime, enabling transparent revocation updates and…
jingkaihe/matchlockEphemeral microVM sandbox for AI agents with network allowlisting, secret injection via MITM proxy, and VM-level isolation. Boots in under a second,…
dockersecurityplayground/dspA Microservices-based framework for the study of Network Security and Penetration Test techniques
qubesos/qubes-core-adminManages the core lifecycle of Qubes OS domains via a Python admin API, handling secure compartmentalization with Xen and exposing an event system for…
xyrem/hyperdeceitHyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate operating system…
getkern/kernRootless container runtime and sandbox that launches kernel-enforced OCI images in milliseconds with no daemon, featuring resource profiles, seccomp…
ps5dev/byepervisorA PS5 hypervisor exploit for 1.xx-2xx firmwares.
microsoft/igvmRust library and format specification for creating and loading Independent Guest Virtual Machine (IGVM) files, supporting hardware-isolated VMs with…
scy-phy/minicpsReal-time simulation framework for cyber-physical systems with physical process/control device models and Mininet-based network emulation, built for…
intel/device-modeling-languageDomain-specific language for writing fast functional device models for virtual platforms. Compiles DML to C with API calls tailored for the Intel…
remnux/distroProvides supplemental files and Debian package sources for a specialized Linux distro focused on malware analysis, reverse engineering, and digital…
v4bel/zapscapePoC exploit for CVE-2026-64561, a KVM/x86 shadow MMU use-after-free enabling guest-to-host escape with kernel root code execution on the host.
amlalabs/amla-sandboxWASM sandbox with capability enforcement for AI agent code. Agents can only call explicitly provided tools with defined constraints. Sandboxed…
microsoft/pqcrypto-lwekeC library implementing FrodoKEM, a post-quantum key encapsulation mechanism based on the Learning with Errors problem, with variants for AES and…
facebook/mcpguard-dynamicKernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP)
rcarmo/agentboxDocker-based sandbox for coding agents with isolated environments, preinstalled agent tooling, service control, and workspace bootstrap for secure…