This artifact provides a research toolset named WebAssembly Runtime Analyzer & Exploit, designed for analyzing WebAssembly runtimes and evaluating the feasibility of exploitation. It consists of two major components: WebAssembly Runtime Analyzer – A static analysis tool for analyzing the external APIs and syscalls that may be invoked by WebAssembly runtime interfaces, along with their potentially used parameters. Due to complex dependency requirements, we provide a Docker image to automate the workflow demonstration, along with automation scripts for non-containerized environments (requires dependency installation). Exploit – A set of exploits designed to assess the extent to which malicious WebAssembly instances can exhaust host resources via interfaces exposed by the runtime. We provide automated scripts to test the baseline and measure the impact of each exploit instruction (requires dependency installation). 🚨 Important: Before using any other files, please extract and carefully read the archive named please_unzip_me_and_read_the_README_first.zip. The README inside contains essential setup instructions, including how to run the analysis framework using either the Docker image or automation scripts, as well as how to test our proposed exploits using the automated testing scripts. This artifact is provided for academic research purposes only. Any malicious use is strictly prohibited.