Skip to content

@trailofbits Trail of Bits

Change the repository type filter

All

    Repositories list

    201 repositories

    • dylint

      Public
      Run Rust lints from dynamic libraries
      Rust
      •
      Apache License 2.0
      •23•421•23•3•Updated Jan 19, 2025Jan 19, 2025

    • cargo-line-test

      Public
      Run tests by the lines they exercise
      Rust
      •3•3•1•0•Updated Jan 19, 2025Jan 19, 2025

    • cargo-unmaintained

      Public
      Find unmaintained packages in Rust projects
      Rust
      •
      GNU Affero General Public License v3.0
      •2•68•6•0•Updated Jan 18, 2025Jan 18, 2025

    • vast

      Public
      VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.
      ccppclangcompilersprogram-analysisintermediate-representationcompiler-frontendmlir
      C++
      •
      Apache License 2.0
      •25•404•164•6•Updated Jan 17, 2025Jan 17, 2025

    • publications

      Public
      Publications from Trail of Bits
      conference-presentationsacademic-paperssecurity-reviews
      Python
      •
      Creative Commons Attribution Share Alike 4.0 International
      •183•1.5k•4•2•Updated Jan 17, 2025Jan 17, 2025

    • multiplier

      Public
      Code auditing productivity multiplier.
      analysisauditclangmlir
      C++
      •
      Apache License 2.0
      •27•444•115•3•Updated Jan 17, 2025Jan 17, 2025

    • sigstore-rekor-types

      Public
      Python models for Rekor's API types
      Python
      •
      Apache License 2.0
      •1•5•0•0•Updated Jan 17, 2025Jan 17, 2025

    • instafix-llvm

      Public
      LLVM fork for INSTAFIX
      LLVM
      •
      Other
      •12k•0•0•9•Updated Jan 17, 2025Jan 17, 2025

    • test-fuzz

      Public
      To make fuzzing Rust easy
      Rust
      •
      GNU Affero General Public License v3.0
      •16•165•11•2•Updated Jan 17, 2025Jan 17, 2025

    • necessist

      Public
      A mutation-based tool for finding bugs in tests
      testingrust
      Rust
      •
      GNU Affero General Public License v3.0
      •10•110•16•0•Updated Jan 15, 2025Jan 15, 2025

    • pypi-attestations

      Public
      A library to convert between Sigstore Bundles and PEP 740 Attestation objects
      Python
      •
      Apache License 2.0
      •2•4•5•1•Updated Jan 15, 2025Jan 15, 2025

    • build-wrap

      Public
      Help protect against malicious build scripts
      Rust
      •
      GNU Affero General Public License v3.0
      •3•8•1•0•Updated Jan 15, 2025Jan 15, 2025

    • challenge-tasks

      Public
      Python
      •0•0•0•0•Updated Jan 15, 2025Jan 15, 2025

    • gh-action-adapt-sigstore-pypi

      Public
      Python
      •
      Apache License 2.0
      •0•0•0•1•Updated Jan 14, 2025Jan 14, 2025

    • winchecksec

      Public
      Checksec, but for Windows: static detection of security mitigations in executables
      windowssecurityhacktoberfestmitigations
      C++
      •
      Apache License 2.0
      •77•573•16•2•Updated Jan 13, 2025Jan 13, 2025

    • testing-handbook

      Public
      Trail of Bits Testing Handbook
      C++
      •
      Creative Commons Attribution 4.0 International
      •9•60•12•5•Updated Jan 13, 2025Jan 13, 2025

    • rfc3161-client

      Public
      An Opinionated Python RFC3161 Client
      rfc3161timestamp-protocol
      Rust
      •
      Apache License 2.0
      •0•1•1•0•Updated Jan 10, 2025Jan 10, 2025

    • pip-plugin-pep740

      Public
      An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails.
      Python
      •
      Apache License 2.0
      •0•0•1•0•Updated Jan 10, 2025Jan 10, 2025

    • rfc8785.py

      Public
      A pure-Python implementation of RFC8785 (JSON Canonicalization Scheme)
      pythonserializationjsoncryptographycanonicalization
      Python
      •
      Apache License 2.0
      •2•1•0•0•Updated Jan 10, 2025Jan 10, 2025

    • cookiecutter-python

      Public
      A cookiecutter template for a best-practices Python project
      Python
      •
      Apache License 2.0
      •5•13•0•0•Updated Jan 6, 2025Jan 6, 2025

    • windows-ctl

      Public
      Rust libraries and utilities for parsing Windows Certificate Trust Lists
      cryptographyauthenticoderust
      Rust
      •
      Apache License 2.0
      •2•8•0•0•Updated Jan 6, 2025Jan 6, 2025

    • semgrep-rules

      Public
      Semgrep queries developed by Trail of Bits.
      Go
      •
      GNU Affero General Public License v3.0
      •39•376•7•2•Updated Jan 6, 2025Jan 6, 2025

    • are-we-pep740-yet

      Public
      Are we PEP 740 yet?
      HTML
      •
      BSD 2-Clause "Simplified" License
      •3•6•0•0•Updated Jan 1, 2025Jan 1, 2025

    • ruzzy

      Public
      A coverage-guided fuzzer for pure Ruby code and Ruby C extensions
      rubyruby-gemruby-extensionfuzzingfuzzerlibfuzzer
      Ruby
      •
      GNU Affero General Public License v3.0
      •6•93•10•0•Updated Dec 30, 2024Dec 30, 2024

    • zkdocs

      Public
      Interactive documentation on zero-knowledge proof systems and related primitives.
      cryptographyzero-knowledge
      HTML
      •
      Creative Commons Attribution 4.0 International
      •37•152•5•5•Updated Dec 27, 2024Dec 27, 2024

    • eth-security-toolbox

      Public
      A Docker container preconfigured with all of the Trail of Bits Ethereum security tools.
      Dockerfile
      •
      GNU Affero General Public License v3.0
      •109•680•1•0•Updated Dec 18, 2024Dec 18, 2024

    • codeql-queries

      Public
      CodeQL queries developed by Trail of Bits
      CodeQL
      •
      GNU Affero General Public License v3.0
      •4•83•5•2•Updated Dec 18, 2024Dec 18, 2024

    • ctf-challenges

      Public
      CTF Challenges
      ctfctf-challenges
      Solidity
      •13•125•0•0•Updated Dec 17, 2024Dec 17, 2024

    • vscode-weaudit

      Public
      Create code bookmarks and code highlights with a click.
      TypeScript
      •
      GNU General Public License v3.0
      •17•185•13•3•Updated Dec 16, 2024Dec 16, 2024

    • v4-core

      Public
      🦄 🦄 🦄 🦄 Core smart contracts of Uniswap v4
      Solidity
      •
      Other
      •1k•1•0•2•Updated Dec 14, 2024Dec 14, 2024