toctou

Sandboxed Rhai script execution engine with Cedar policy authorization for every system operation.

PoC and notes about TOCTOU (race condition) vulnerability in C language and tested on GNU/Linux (Ubuntu 16.04).

Exploiting TOCTOU vulnerability using OpLock and Junctions

Demonstrates the TOCTOU vulnerability and how it's mitigated using Go.

Secure PHP form validation with client-side and server-side validation from a single rules source. Includes live AJAX uniqueness checks, password strength meter, CSRF protection, rate limiting, TOCTOU protection, PDO/MySQL and Bootstrap 5.

Pre-action evidence revalidation for AI agents. Detect stale reasoning before agents write, send, update, or delete.

Example of Time Of Check To Time Of Use race condition on Android

Introduction to information security, exploiting a vulnerable ISO.

WeightsWatcher is a cryptographic integrity verification system for Machine Learning artifacts

⚙️ Comprehensive Linux system programming repository featuring C examples for process management, file systems, memory management, IPC, and practical security vulnerability demonstrations with Docker-based testing environments.

Gains access to the root user.

PoC funcional de CVE-2026-17106 (CopyEscape): carrera TOCTOU en docker cp que permite escritura arbitraria en el host Docker. Laboratorio Docker + monitor inotify + LD_PRELOAD. Variante macOS inocua y Linux destructiva.

Crash-safe, race-free file writes for Go — TOCTOU protection via fingerprint verification, cross-platform file locking, atomic rename, and fsync for crash durability.

A Proof of Concept (PoC) simulation demonstrating a TOCTOU (Time-of-Check to Time-of-Use) race condition vulnerability, built using Python.

Exploits vuln_slow into writing a message of your choice into root_file.

Template script to modify files based on any file event (e.g. append to temporary script)

Secure file processor — copy, concatenate, or chunk file trees with security-first validation

Reproducible lab for evaluating web TOCTOU race conditions across synchronization techniques (baseline/last-byte/HTTP2 single-packet), deployment topologies (multi-WAS + shared DB), and locking strategies — from reproduction to mitigation validation.

Fail-closed state revalidation before paused, retried or long-running AI workflows resume execution.

Single-file static analyser for Python concurrency, idempotency and retry-safety hazards. 16 rules, stdlib only, no network, read-only. Emits candidates, not verdicts. MIT.