minicps
scy-phy/minicpsReal-time simulation framework for cyber-physical systems with physical process/control device models and Mininet-based network emulation, built for…
network-securityscada-ics-securitysecurity-virtualization
1972 months ago
scy-phy/minicpsReal-time simulation framework for cyber-physical systems with physical process/control device models and Mininet-based network emulation, built for…
amlalabs/amla-sandboxWASM sandbox with capability enforcement for AI agent code. Agents can only call explicitly provided tools with defined constraints. Sandboxed…
intel/device-modeling-languageDomain-specific language for writing fast functional device models for virtual platforms. Compiles DML to C with API calls tailored for the Intel…
v4bel/zapscapePoC exploit for CVE-2026-64561, a KVM/x86 shadow MMU use-after-free enabling guest-to-host escape with kernel root code execution on the host.
getkern/kernRootless container runtime and sandbox that launches kernel-enforced OCI images in milliseconds with no daemon, featuring resource profiles, seccomp…
ricccrd/ddJIT-based userspace Linux kernel that runs containers natively on Apple Silicon macOS without a VM. Drop-in Docker Engine API replacement with…
penberg/chimeraSandbox untrusted code with safe access to the host.
zeroecco/holosDeclarative KVM/QEMU VM orchestration tool using YAML compose files. Manages multi-VM stacks with cloud-init, SSH, PCI passthrough, and image…
rcarmo/agentboxDocker-based sandbox for coding agents with isolated environments, preinstalled agent tooling, service control, and workspace bootstrap for secure…
wkoszek/emukoRISC-V emulator in Rust that boots Linux with JIT on ARM64/x86_64 and Sv39 virtual memory
thodoristsampouris/agentguardZero-trust sandbox for AI agents with kernel-level filesystem jail, transparent network proxy, and YAML-based policy engine to intercept and control…
aarif450/aarif450.github.ioExploit KVM/x86 guest-to-host escape CVE-2026-64561 with Zapscape, a proof-of-concept demonstrating hypervisor vulnerability.
grepular/foxcageRun Firefox in a rootless Podman container with dropped capabilities, isolated networking, and ephemeral storage to contain sandbox escapes and…
borealisai/stepjackBenchmarking framework for evaluating computer-use AI agents against multi-step indirect prompt injection, with automatic adversarial goal…
linux-zs/cve-2026-31431-mitigationSeccomp-based mitigation for CVE-2026-31431, a Linux kernel LPE. Blocks AF_ALG socket via PAM module and standalone wrapper, with auto-detection of…
vatson112/deny-af-alg-bpfeBPF LSM program that blocks AF_ALG socket creation to mitigate CVE-2026-31431, with userspace daemon logging denied attempts via ring buffer.
pazhanivelmani/external_libcap-android10_r33_cve-2023-2603POSIX.1e capability library for Android 10, addressing CVE-2023-2603 with tools for setting and getting process capabilities to manage privilege…
shoucheng3/graylog2__graylog2-server_cve-2023-41044_5-1-2Open source log management platform for centralized log aggregation, real-time analysis, and security event monitoring with customizable dashboards…