Sandboxed Rhai script execution engine with Cedar policy authorization for every system operation.
PoC and notes about TOCTOU (race condition) vulnerability in C language and tested on GNU/Linux (Ubuntu 16.04).
Exploiting TOCTOU vulnerability using OpLock and Junctions
Demonstrates the TOCTOU vulnerability and how it's mitigated using Go.
Introduction to information security, exploiting a vulnerable ISO.
Example of Time Of Check To Time Of Use race condition on Android
WeightsWatcher is a cryptographic integrity verification system for Machine Learning artifacts
⚙️ Comprehensive Linux system programming repository featuring C examples for process management, file systems, memory management, IPC, and practical security vulnerability demonstrations with Docker-based testing environments.
Crash-safe, race-free file writes for Go — TOCTOU protection via fingerprint verification, cross-platform file locking, atomic rename, and fsync for crash durability.
Template script to modify files based on any file event (e.g. append to temporary script)
A Proof of Concept (PoC) simulation demonstrating a TOCTOU (Time-of-Check to Time-of-Use) race condition vulnerability, built using Python.
Secure file processor — copy, concatenate, or chunk file trees with security-first validation
Verified Effect Commit Protocol for AI agents — seal the intended effect, witness the actual outcome.
Snapshot-to-commit consistency compiler for AI-agent plans.
Single-file static analyser for Python concurrency, idempotency and retry-safety hazards. 16 rules, stdlib only, no network, read-only. Emits candidates, not verdicts. MIT.
Every concurrency candidate our scanner produced over the CPython 3.14.6 standard library, classified one by one: 18 actionable hazards, 37 false positives, and what they taught us.
PoC: a docker cp copy-out race writes a container-controlled file into a sibling host directory outside the requested destination (string-prefix containment + live-tree archive race). Page: https://bihari.xyz/docker-cp-copyout-sibling-escape/
Static analyser that finds TOCTOU race conditions and concurrency bugs in Python; check-then-act, duplicate-insert, filesystem TOCTOU, and unguarded shared-state mutations, with AST analysis and SARIF output. Reads source only.
Add a description, image, and links to the toctou topic page so that developers can more easily learn about it.
To associate your repository with the toctou topic, visit your repo's landing page and select "manage topics."