ls ~/security

Security & cybersecurity

• secVM-Ghost[code]

  VirtualBox VM detection evasion tool. Modifies DMI, BIOS, disk, GPU, MAC and PCI chipset with real hardware profiles so systeminformation and similar tools do not flag the environment as virtual. Scripts for Windows, Linux and macOS (Intel and Apple Silicon). Use case: anti-fraud analysis, research and testing software that blocks virtualized environments.

• secvm-spoofer[code]

  Tool complementary to VM-Ghost focused on evading systeminformation. Applies real hardware profiles (DMI, BIOS, disk, GPU, MAC and PCI chipset) to VirtualBox virtual machines. Cross-platform scripts for Windows, Linux and macOS (Intel and Apple Silicon).

• secprocess-cloak[web][code][images]

  Offensive and defensive cybersecurity tool that renames running processes with operating system service names, making them invisible to standard process scanning. Useful for red teaming, EDR evasion and detection testing. Dual Linux and Windows support.

• secXSS2Shell[code][images]

  An educational proof of concept of the XSS2Shell chain (CVE-2026-64638): a pre-auth reflected XSS in wp-login.php affecting all WordPress Core versions before 7.0.3 (CVSS 8.9), shipped as an emergency security release in August 2026. It demonstrates going from an XSS to remote code execution. Includes a reproducible Docker lab, a Python attacker server, a technical analysis of the chain and mitigation. For educational and research purposes only.