Skip to content

@trailofbits Trail of Bits

Change the repository type filter

All

    Repositories list

    197 repositories

    • test-fuzz

      Public
      To make fuzzing Rust easy
      Rust
      •
      GNU Affero General Public License v3.0
      •16•159•11•3•Updated Nov 15, 2024Nov 15, 2024

    • vast

      Public
      VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.
      ccppclangcompilersprogram-analysisintermediate-representationcompiler-frontendmlir
      C++
      •
      Apache License 2.0
      •25•396•161•6•Updated Nov 15, 2024Nov 15, 2024

    • ctf

      Public
      CTF Field Guide
      tutorialsctfsecurity-ctf
      C
      •
      Creative Commons Attribution Share Alike 4.0 International
      •242•1.3k•12•2•Updated Nov 15, 2024Nov 15, 2024

    • codeql-queries

      Public
      CodeQL queries developed by Trail of Bits
      CodeQL
      •
      GNU Affero General Public License v3.0
      •3•75•3•4•Updated Nov 15, 2024Nov 15, 2024

    • pypi-attestations

      Public
      A library to convert between Sigstore Bundles and PEP 740 Attestation objects
      Python
      •
      Apache License 2.0
      •1•2•4•1•Updated Nov 15, 2024Nov 15, 2024

    • are-we-pep740-yet

      Public
      Are we PEP 740 yet?
      HTML
      •
      BSD 2-Clause "Simplified" License
      •3•4•0•0•Updated Nov 15, 2024Nov 15, 2024

    • semgrep-rules

      Public
      Semgrep queries developed by Trail of Bits.
      Go
      •
      GNU Affero General Public License v3.0
      •32•330•7•1•Updated Nov 15, 2024Nov 15, 2024

    • dylint

      Public
      Run Rust lints from dynamic libraries
      Rust
      •
      Apache License 2.0
      •21•402•22•3•Updated Nov 14, 2024Nov 14, 2024

    • necessist

      Public
      A mutation-based tool for finding bugs in tests
      testingrust
      Rust
      •
      GNU Affero General Public License v3.0
      •10•110•15•1•Updated Nov 14, 2024Nov 14, 2024

    • sigstore-rekor-types

      Public
      Python models for Rekor's API types
      Python
      •
      Apache License 2.0
      •1•4•0•0•Updated Nov 14, 2024Nov 14, 2024

    • cargo-unmaintained

      Public
      Find unmaintained packages in Rust projects
      Rust
      •
      GNU Affero General Public License v3.0
      •2•66•4•0•Updated Nov 13, 2024Nov 13, 2024

    • build-wrap

      Public
      Help protect against malicious build scripts
      Rust
      •
      GNU Affero General Public License v3.0
      •3•7•0•0•Updated Nov 12, 2024Nov 12, 2024

    • cargo-line-test

      Public
      Run tests by the lines they exercise
      Rust
      •0•0•1•0•Updated Nov 11, 2024Nov 11, 2024

    • windows-ctl

      Public
      Rust libraries and utilities for parsing Windows Certificate Trust Lists
      cryptographyauthenticoderust
      Rust
      •
      Apache License 2.0
      •2•6•0•0•Updated Nov 11, 2024Nov 11, 2024

    • vscode-sarif-explorer

      Public
      SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results
      static-analysisvscode-extensionsarif
      TypeScript
      •
      GNU General Public License v3.0
      •3•21•6•1•Updated Nov 11, 2024Nov 11, 2024

    • rfc3161-client

      Public
      An Opinionated Python RFC3161 Client
      rfc3161timestamp-protocol
      Rust
      •
      Apache License 2.0
      •0•2•1•1•Updated Nov 11, 2024Nov 11, 2024

    • osquery

      Public
      SQL powered operating system instrumentation, monitoring, and analytics.
      C++
      •
      Other
      •2.5k•37•0•2•Updated Nov 10, 2024Nov 10, 2024

    • pip-plugin-pep740

      Public
      An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails.
      Python
      •
      Apache License 2.0
      •0•0•1•0•Updated Nov 8, 2024Nov 8, 2024

    • instafix-llvm

      Public
      LLVM fork for INSTAFIX
      LLVM
      •
      Other
      •12k•0•0•0•Updated Nov 2, 2024Nov 2, 2024

    • publications

      Public
      Publications from Trail of Bits
      conference-presentationsacademic-paperssecurity-reviews
      Python
      •
      Creative Commons Attribution Share Alike 4.0 International
      •184•1.5k•4•0•Updated Oct 31, 2024Oct 31, 2024

    • vscode-weaudit

      Public
      Create code bookmarks and code highlights with a click.
      TypeScript
      •
      GNU General Public License v3.0
      •17•175•11•4•Updated Oct 29, 2024Oct 29, 2024

    • empirehacking.nyc

      Public
      Empire Hacking NYC Meetup
      security-meetupnyc
      CSS
      •8•5•0•1•Updated Oct 28, 2024Oct 28, 2024

    • nyc-infosec

      Public
      Mapping the NYC Infosec Community
      meetupuniversitycalendarnycconference
      CSS
      •22•50•0•1•Updated Oct 28, 2024Oct 28, 2024

    • uthenticode

      Public
      A cross-platform library for verifying Authenticode signatures
      cryptographycppauthenticodehacktoberfestcode-signing
      C++
      •
      MIT License
      •33•139•8•2•Updated Oct 28, 2024Oct 28, 2024

    • blight

      Public
      A framework for instrumenting build tools
      instrumentationbuild-toolbuild-systemhacktoberfestcompiler-wrapper
      Python
      •
      Apache License 2.0
      •8•83•20•4•Updated Oct 23, 2024Oct 23, 2024

    • testing-handbook

      Public
      Trail of Bits Testing Handbook
      C++
      •
      Creative Commons Attribution 4.0 International
      •7•58•11•6•Updated Oct 22, 2024Oct 22, 2024

    • v4-core

      Public
      🦄 🦄 🦄 🦄 Core smart contracts of Uniswap v4
      Solidity
      •
      Other
      •970•0•0•2•Updated Oct 21, 2024Oct 21, 2024

    • fickling

      Public
      A Python pickling decompiler and static analyzer
      machine-learningpythonsecurity
      Python
      •
      GNU Lesser General Public License v3.0
      •48•418•12•6•Updated Oct 21, 2024Oct 21, 2024

    • mishegos

      Public
      A differential fuzzer for x86 decoders
      x86fuzzinghacktoberfest
      C++
      •
      Apache License 2.0
      •30•234•9•15•Updated Oct 21, 2024Oct 21, 2024

    • cast_checks

      Public
      A procedural macro to check for invalid casts
      Rust
      •
      Apache License 2.0
      •4•8•0•0•Updated Oct 17, 2024Oct 17, 2024