codex-security-eval

Security evaluation input | Kernel-driver C, memory lifetime, integer errors, double-fetch and resource handling | intentional-vulnerabilities

Security evaluation input | C/C++ memory safety, integers, resource handling, locking, races and TOCTOU | labeled-positive-negative

Security evaluation input | PHP, SQL injection, CSRF, XSS, file handling and access control | intentional-vulnerabilities

Security evaluation input | OpenMP C/C++/Fortran data races and race-free controls | labeled-positive-negative

Security evaluation input | Cisco ACLs, zone firewall policy, iptables, topology, routing and rule changes | labeled-examples-in-library

21 passive security evaluation inputs: conventional appsec and exploratory hardware, firmware, PLC, RTOS, database and policy domains. No scans started.

Security evaluation input | Database-engine source, SQL parser, storage, transaction and extension boundaries | production-control-no-vulnerability-claim

Security evaluation input | Embedded OpenWrt source, Lua web control, firmware configuration, local database and device security | intentional-vulnerabilities

Security evaluation input | Real-time kernel source, tasks, queues, scheduling, synchronization, ISR and memory boundaries | production-control-no-vulnerability-claim

Security evaluation input | Python AWS CDK, generated infrastructure intent, encryption and network permissions | intentional-vulnerabilities

Security evaluation input | Direct firmware image, compressed firmware, embedded binaries and configuration | known-vulnerable-firmware-artifact

Security evaluation input | Verilog RTL, timing leakage, register clearing and functional controls | labeled-positive-negative

Security evaluation input | LLM application trust boundaries, prompt/data separation and model-output handling | intentional-vulnerabilities

Security evaluation input | Labeled Python injection, deserialization, crypto and trust-boundary cases | labeled-positive-negative

Security evaluation input | GraphQL authorization, queries, mutations, subscriptions, injection and query complexity and resource-exhaustion scenarios | intentional-vulnerabilities

Security evaluation input | Solidity/EVM authorization, contract state, arithmetic and economic logic | intentional-vulnerabilities

Security evaluation input | Ruby/Rails authentication, authorization, SQL use, XSS and configuration | intentional-vulnerabilities

Security evaluation input | Terraform, multi-cloud IAM, storage, database configuration, security groups and encryption | intentional-vulnerabilities

Security evaluation input | API authorization, JWT, mass assignment, SQL and NoSQL use, purchases and coupons | intentional-vulnerabilities

Security evaluation input | Web commerce, authentication, authorization, injection, business logic, dependencies | intentional-vulnerabilities