
tandasat.github.io
Remote hypervisor development class for security researchers; covers virtualization internals, hypervisor security, and vulnerabilities in privileged…

Remote hypervisor development class for security researchers; covers virtualization internals, hypervisor security, and vulnerabilities in privileged…

🪅 Windows & Linux userspace emulator

Linux namespaces and seccomp-bpf sandbox

A QEMU/KVM-based USB fuzzing framework that finds device-driver bugs via reproducible VM execution, multiprocessing, and XML testcase generation.

Tracking ITScape (CVE-2026-46316), the KVM/arm64 guest-to-host escape

Tracking Januscape (CVE-2026-53359), the KVM/x86 guest-to-host escape

Here comes the paintrain!

Windows Process Lockdown Tool using Job Objects

Qubes containerization on Windows

Virtual machines manipulation framework

Isolated JavaScript sandbox for Node.js that runs untrusted code with restricted access to built-in modules and host resources via Proxy-based…

Minimal unikernel firewall for QubesOS that filters network traffic, implements NAT, and communicates via Qubes DB and qrexec.

Secure code execution

Generates reproducible CORE network topologies from XML scenario files for cybersecurity training and experimentation. Provides Web GUI and CLI for…

Securekit is a protocol-agnostic security kernel that enforces zero-trust, sandboxed execution for AI tool use. It sits between any LLM or agent…

Cross Distribution Exploit Testing

Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.

kali-linux-docker