capstone
capstone-engine/capstoneMulti-architecture disassembly framework providing a lightweight, thread-safe API for binary analysis, reverse engineering, and malware research…
ai-assisted-reversingbinary-analysisbinary-exploitation+7
9.0k
capstone-engine/capstoneMulti-architecture disassembly framework providing a lightweight, thread-safe API for binary analysis, reverse engineering, and malware research…
notasithlord/peerdThe first AI agent harness native to the browser. A browser extension that runs a full agent loop where you already work: it drives your tabs, spins…
indalok/rzwebA complete browser-based reverse engineering platform built on Rizin, running entirely client-side via WebAssembly.
sneakynachos/cve-2026-74936-gc-potatoReproduction of a WebAssembly use-after-free vulnerability in Mozilla's JavaScript engine, demonstrating a deterministic race condition and providing…
sneakynachos/cve-2026-15718-who-put-ptrs-in-my-wasmPoC exploit chain for CVE-2026-15718: SpiderMonkey wasm baseline compiler array.fill missing-sync -> invalid pointer -> addrOf/fakeobj -> arbitrary…
sneakynachos/cve-2026-2796-and-cve-2026-2768-escape-the-wasm-boxFull Firefox chain: CVE-2026-2796 wasm type confusion -> content-process RCE, plus CVE-2026-2768 parent-process escape analysis (both fixed in…
sneakynachos/cve-2026-2796-escape-wasm-by-using-wasmPoC exploit chain for CVE-2026-2796: SpiderMonkey WebAssembly sandbox escape (signature type confusion -> arbitrary R/W -> RCE)
trustsig-eu/wasm2c-tableflipwasm2c sandbox escape. An untrusted WebAssembly module breaks out of the generated C sandbox and executes an arbitrary shell command on the host.
sneakynachos/cve-2024-29943-but-with-wasmCVE-2024-29943, but with wasm
george0papasotiriou/cve-2026-21001-webassembly-linear-memory-oob-via-table-index-confusionDemonstrates a critical WebAssembly OOB read/write via table index confusion, leaking host memory and potentially enabling code execution in WASM…
x-3306/project-onyxAdvanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion…
capsulerun/capsuleSecure runtime to sandbox AI agent tasks. Run untrusted code in isolated WebAssembly environments.
victorns69/cve-2024-12381Exploit for Chrome V8 type confusion (CVE-2024-12381) with JSPI sandbox bypass, delivering RCE via a Flask server that fingerprints browsers and…
borahll/cve-2021-21220Educational presentation detailing the exploitation of CVE-2021-21220, a V8 JIT type confusion leading to OOB access and RCE via WebAssembly, with…
lfi-project/lfiTop-level repository for LFI: Practical, Efficient, and Secure Software-based Sandboxing
adityabhatt3010/cve-2025-10585-the-chrome-v8-zero-dayGoogle patched CVE-2025-10585, a Chrome V8 zero-day under active exploitation — here’s what it is, why it matters, and how to stay safe.
paras98/cve-2021-38297-go-wasm-replicationEducational proof-of-concept replicating CVE-2021-38297, a Go WASM buffer overflow leading to stored XSS. Includes vulnerable app setup, exploit…