ls community/

Community Research.

Independent AI security research from external contributors. Your name, your work, permanently on the record.

cat community/20-blocks-4-breakouts.md

Sandbox Security Execution Layer 4 Bypasses 83.3% Block Rate

20 Blocks, 4 Breakouts: The Mechanics of Bypassing Agentic Sandboxes

A deep dive into execution-layer isolation for autonomous agents. Ran 24 complex agentic attack vectors — from multi-step tool-chaining exfiltration to living-off-the-land binary abuse — against a deterministic sandbox. 83.3% block rate at the OS boundary.

The 4 breakouts that survived are transparently mapped: blind DNS exfiltration, TOCTOU symlink races, trusted-binary abuse via git config weaponization, and IPC-based credential laundering through named pipes.

Research by Mohd. Tabrez Mukadam, Founder at Keter Labs.

BENCHMARK    24 agentic attack vectors
BLOCKED      20 at OS boundary
BREAKOUTS    4 execution-layer bypasses

ISOLATION   ▓▓▓▓▓▓▓▓░░ 83.3%

BYPASS 01    Blind DNS exfiltration
BYPASS 02    TOCTOU symlink race
BYPASS 03    Tool-chaining reflection (git)
BYPASS 04    Env var smuggling via IPC

FORMAT      Full article · 8 sections
AUTHOR      M. T. Mukadam // Keter Labs

cat community/CONTRIBUTING.md

Got research the field should see?

The community program is open. Your work ships
under your name, hosted permanently, and
credited in the record.

We take: writeups, papers, PoCs, tool releases.
Format: PDF, markdown, or a repo link.
Bar: real findings, reproducible, responsibly
disclosed.

Subscribe or reach out to submit.