Skip to content

@trailofbits Trail of Bits

Change the repository type filter

All

    Repositories list

    202 repositories

    • test-fuzz

      Public
      To make fuzzing Rust easy
      Rust
      •
      GNU Affero General Public License v3.0
      •16•167•11•2•Updated Feb 13, 2025Feb 13, 2025

    • algo-ng

      Public
      Experimental version of Algo built on Terraform
      ipsecterraformvpn
      HCL
      •
      GNU Affero General Public License v3.0
      •18•73•0•1•Updated Feb 13, 2025Feb 13, 2025

    • instafix-llvm

      Public
      LLVM fork for INSTAFIX
      LLVM
      •
      Other
      •13k•0•0•9•Updated Feb 12, 2025Feb 12, 2025

    • go-mutexasserts

      Public
      A small library that allows to check if Go mutexes are locked
      Go
      •
      MIT License
      •2•22•0•0•Updated Feb 12, 2025Feb 12, 2025

    • instafix-SVF

      Public
      SVF fork for INSTAFIX
      C++
      •
      Other
      •440•0•0•0•Updated Feb 12, 2025Feb 12, 2025

    • sigstore-rekor-types

      Public
      Python models for Rekor's API types
      Python
      •
      Apache License 2.0
      •1•5•0•0•Updated Feb 12, 2025Feb 12, 2025

    • rfc3161-client

      Public
      An Opinionated Python RFC3161 Client
      rfc3161timestamp-protocol
      Rust
      •
      Apache License 2.0
      •0•1•2•0•Updated Feb 12, 2025Feb 12, 2025

    • build-wrap

      Public
      Help protect against malicious build scripts
      Rust
      •
      GNU Affero General Public License v3.0
      •3•10•1•0•Updated Feb 12, 2025Feb 12, 2025

    • dylint

      Public
      Run Rust lints from dynamic libraries
      Rust
      •
      Apache License 2.0
      •26•423•20•4•Updated Feb 12, 2025Feb 12, 2025

    • necessist

      Public
      A mutation-based tool for finding bugs in tests
      testingrust
      Rust
      •
      GNU Affero General Public License v3.0
      •12•111•16•0•Updated Feb 12, 2025Feb 12, 2025

    • emit-lsp

      Public
      The LLVM Project is a collection of modular and reusable compiler and toolchain technologies.
      LLVM
      •
      Other
      •13k•0•0•1•Updated Feb 11, 2025Feb 11, 2025

    • osquery

      Public
      SQL powered operating system instrumentation, monitoring, and analytics.
      C++
      •
      Other
      •2.5k•37•0•2•Updated Feb 11, 2025Feb 11, 2025

    • CompChomper

      Public
      CompChomper is a framework for measuring how LLMs perform at code completion.
      Python
      •
      Apache License 2.0
      •0•14•0•1•Updated Feb 11, 2025Feb 11, 2025

    • pypi-attestations

      Public
      A library to convert between Sigstore Bundles and PEP 740 Attestation objects
      Python
      •
      Apache License 2.0
      •2•4•4•0•Updated Feb 11, 2025Feb 11, 2025

    • zkdocs

      Public
      Interactive documentation on zero-knowledge proof systems and related primitives.
      cryptographyzero-knowledge
      HTML
      •
      Creative Commons Attribution 4.0 International
      •38•153•6•4•Updated Feb 11, 2025Feb 11, 2025

    • testing-handbook

      Public
      Trail of Bits Testing Handbook
      C++
      •
      Creative Commons Attribution 4.0 International
      •10•60•13•5•Updated Feb 11, 2025Feb 11, 2025

    • vscode-weaudit

      Public
      Create code bookmarks and code highlights with a click.
      TypeScript
      •
      GNU General Public License v3.0
      •19•187•19•4•Updated Feb 11, 2025Feb 11, 2025

    • cargo-unmaintained

      Public
      Find unmaintained packages in Rust projects
      Rust
      •
      GNU Affero General Public License v3.0
      •2•68•6•0•Updated Feb 10, 2025Feb 10, 2025

    • cargo-line-test

      Public
      Run tests by the lines they exercise
      Rust
      •3•3•2•0•Updated Feb 10, 2025Feb 10, 2025

    • empirehacking.nyc

      Public
      Empire Hacking NYC Meetup
      security-meetupnyc
      CSS
      •8•5•0•1•Updated Feb 7, 2025Feb 7, 2025

    • vast

      Public
      VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.
      ccppclangcompilersprogram-analysisintermediate-representationcompiler-frontendmlir
      C++
      •
      Apache License 2.0
      •25•409•169•4•Updated Feb 7, 2025Feb 7, 2025

    • publications

      Public
      Publications from Trail of Bits
      conference-presentationsacademic-paperssecurity-reviews
      Python
      •
      Creative Commons Attribution Share Alike 4.0 International
      •183•1.5k•4•1•Updated Feb 5, 2025Feb 5, 2025

    • cookiecutter-python

      Public
      A cookiecutter template for a best-practices Python project
      Python
      •
      Apache License 2.0
      •5•14•0•0•Updated Feb 3, 2025Feb 3, 2025

    • are-we-pep740-yet

      Public
      Are we PEP 740 yet?
      HTML
      •
      BSD 2-Clause "Simplified" License
      •4•7•0•0•Updated Feb 3, 2025Feb 3, 2025

    • sigstore-apis

      Public
      Rust clients for the Fulcio and Rekor APIs
      sigstore
      Rust
      •
      Apache License 2.0
      •1•5•0•0•Updated Feb 3, 2025Feb 3, 2025

    • ruzzy

      Public
      A coverage-guided fuzzer for pure Ruby code and Ruby C extensions
      rubyruby-gemruby-extensionfuzzingfuzzerlibfuzzer
      Ruby
      •
      GNU Affero General Public License v3.0
      •6•94•10•0•Updated Feb 3, 2025Feb 3, 2025

    • deepstate

      Public
      A unit test-like interface for fuzzing and symbolic execution
      unit-testingsymbolic-executionproperty-based-testingfuzzingtesting-toolstesting-framework
      Python
      •
      Apache License 2.0
      •99•825•82•8•Updated Jan 23, 2025Jan 23, 2025

    • twa

      Public
      A tiny web auditor with strong opinions.
      auditingweb-securityhacktoberfestsecurity
      Shell
      •
      MIT License
      •52•584•4•0•Updated Jan 22, 2025Jan 22, 2025

    • vscode-sarif-explorer

      Public
      SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results
      static-analysisvscode-extensionsarif
      TypeScript
      •
      GNU General Public License v3.0
      •3•22•5•1•Updated Jan 22, 2025Jan 22, 2025

    • multiplier

      Public
      Code auditing productivity multiplier.
      analysisauditclangmlir
      C++
      •
      Apache License 2.0
      •27•444•115•3•Updated Jan 21, 2025Jan 21, 2025