LayerFault/javascript-capability-chain
160 • Updated
LF Security Corpus: Scripting Capability Chains
JavaScript, PowerShell, shell, Python and native capability-chain fixtures. Synthetic Layerfault adversarial test fixtures, not usable models.
Note LF-CORPUS-JS-0001: JavaScript package containing process, dynamic-code, filesystem, network, credential and npm install-hook indicators.
LayerFault/native-capability-library
Updated • 22Note LF-CORPUS-NATIVE-0001: HF-style package with an inert ELF shared library importing dlopen, socket and system, built with $ORIGIN RPATH; custom loader references it via ctypes.
LayerFault/powershell-capability-chain
160 • UpdatedNote LF-CORPUS-PS-0001: PowerShell package with synthetic credential access, dynamic code, loopback download/execute syntax, native load, process, encoded command and package-install syntax.
LayerFault/python-custom-loader-capability-chain
160 • Updated • 18Note LF-CORPUS-PY-0001: HF-style custom loader containing harmless process, native-load, loopback-network, credential, filesystem, dynamic-code, package-manager and NumPy allow_pickle call sites.
LayerFault/python-dataflow-capability-chain
160 • Updated • 18Note LF-CORPUS-PY-0002: Python package with synthetic credential/file-to-network and network-to-process data flows.
LayerFault/shell-capability-chain
160 • UpdatedNote LF-CORPUS-SH-0001: Shell package with canary dynamic-code, dot-source, filesystem write, loopback curl-pipe, package-manager and native-load/environment patterns.