Sandboxed Rhai script execution engine with Cedar policy authorization for every system operation.
-
Updated
Jul 28, 2026 - Rust
Sandboxed Rhai script execution engine with Cedar policy authorization for every system operation.
PoC and notes about TOCTOU (race condition) vulnerability in C language and tested on GNU/Linux (Ubuntu 16.04).
Exploiting TOCTOU vulnerability using OpLock and Junctions
Secure PHP form validation with client-side and server-side validation from a single rules source. Includes live AJAX uniqueness checks, password strength meter, CSRF protection, rate limiting, TOCTOU protection, PDO/MySQL and Bootstrap 5.
Demonstrates the TOCTOU vulnerability and how it's mitigated using Go.
Pre-action evidence revalidation for AI agents. Detect stale reasoning before agents write, send, update, or delete.
Introduction to information security, exploiting a vulnerable ISO.
Verified Effect Commit Protocol for AI agents — seal the intended effect, witness the actual outcome.
Example of Time Of Check To Time Of Use race condition on Android
WeightsWatcher is a cryptographic integrity verification system for Machine Learning artifacts
⚙️ Comprehensive Linux system programming repository featuring C examples for process management, file systems, memory management, IPC, and practical security vulnerability demonstrations with Docker-based testing environments.
PoC funcional de CVE-2026-17106 (CopyEscape): carrera TOCTOU en docker cp que permite escritura arbitraria en el host Docker. Laboratorio Docker + monitor inotify + LD_PRELOAD. Variante macOS inocua y Linux destructiva.
Crash-safe, race-free file writes for Go — TOCTOU protection via fingerprint verification, cross-platform file locking, atomic rename, and fsync for crash durability.
A Proof of Concept (PoC) simulation demonstrating a TOCTOU (Time-of-Check to Time-of-Use) race condition vulnerability, built using Python.
Template script to modify files based on any file event (e.g. append to temporary script)
Test whether AI agents still commit tool effects after authority is revoked mid-run.
Secure file processor — copy, concatenate, or chunk file trees with security-first validation
Fail-closed state revalidation before paused, retried or long-running AI workflows resume execution.
To associate your repository with the toctou topic, visit your repo's landing page and select "manage topics."