Sandboxed Rhai script execution engine with Cedar policy authorization for every system operation.
PoC and notes about TOCTOU (race condition) vulnerability in C language and tested on GNU/Linux (Ubuntu 16.04).
Exploiting TOCTOU vulnerability using OpLock and Junctions
Pre-action evidence revalidation for AI agents. Detect stale reasoning before agents write, send, update, or delete.
Secure PHP form validation with client-side and server-side validation from a single rules source. Includes live AJAX uniqueness checks, password strength meter, CSRF protection, rate limiting, TOCTOU protection, PDO/MySQL and Bootstrap 5.
Demonstrates the TOCTOU vulnerability and how it's mitigated using Go.
Verified Effect Commit Protocol for AI agents — seal the intended effect, witness the actual outcome.
Introduction to information security, exploiting a vulnerable ISO.
Example of Time Of Check To Time Of Use race condition on Android
WeightsWatcher is a cryptographic integrity verification system for Machine Learning artifacts
⚙️ Comprehensive Linux system programming repository featuring C examples for process management, file systems, memory management, IPC, and practical security vulnerability demonstrations with Docker-based testing environments.
Test whether AI agents still commit tool effects after authority is revoked mid-run.
PoC funcional de CVE-2026-17106 (CopyEscape): carrera TOCTOU en docker cp que permite escritura arbitraria en el host Docker. Laboratorio Docker + monitor inotify + LD_PRELOAD. Variante macOS inocua y Linux destructiva.
Crash-safe, race-free file writes for Go — TOCTOU protection via fingerprint verification, cross-platform file locking, atomic rename, and fsync for crash durability.
Static analyser that finds TOCTOU race conditions and concurrency bugs in Python; check-then-act, duplicate-insert, filesystem TOCTOU, and unguarded shared-state mutations, with AST analysis and SARIF output. Reads source only.
Windows kernel-mode race-condition fuzzer (WDM driver + Python client) for surfacing synchronization bugs, lock-bypass windows, TOCTOU sequences, and concurrency UAF/double-free. Honest about which designed modules are actually wired into the running loop.
A Proof of Concept (PoC) simulation demonstrating a TOCTOU (Time-of-Check to Time-of-Use) race condition vulnerability, built using Python.
Template script to modify files based on any file event (e.g. append to temporary script)
To associate your repository with the toctou topic, visit your repo's landing page and select "manage topics."