Skip to content

@trailofbits Trail of Bits

Change the repository type filter

All

    Repositories list

    203 repositories

    • testing-handbook

      Public
      Trail of Bits Testing Handbook
      C++
      •
      Creative Commons Attribution 4.0 International
      •10•62•13•6•Updated Mar 6, 2025Mar 6, 2025

    • necessist

      Public
      A mutation-based tool for finding bugs in tests
      testingrust
      Rust
      •
      GNU Affero General Public License v3.0
      •12•113•16•7•Updated Mar 5, 2025Mar 5, 2025

    • nyc-infosec

      Public
      Mapping the NYC Infosec Community
      meetupuniversitycalendarnycconference
      CSS
      •19•50•0•1•Updated Mar 5, 2025Mar 5, 2025

    • build-wrap

      Public
      Help protect against malicious build scripts
      Rust
      •
      GNU Affero General Public License v3.0
      •3•10•1•0•Updated Mar 5, 2025Mar 5, 2025

    • publications

      Public
      Publications from Trail of Bits
      conference-presentationsacademic-paperssecurity-reviews
      Python
      •
      Creative Commons Attribution Share Alike 4.0 International
      •185•1.5k•4•1•Updated Mar 5, 2025Mar 5, 2025

    • instafix-llvm

      Public
      LLVM fork for INSTAFIX
      LLVM
      •
      Other
      •13k•0•0•9•Updated Mar 5, 2025Mar 5, 2025

    • dylint

      Public
      Run Rust lints from dynamic libraries
      Rust
      •
      Apache License 2.0
      •27•430•20•9•Updated Mar 5, 2025Mar 5, 2025

    • are-we-pep740-yet

      Public
      Are we PEP 740 yet?
      HTML
      •
      BSD 2-Clause "Simplified" License
      •6•8•0•0•Updated Mar 5, 2025Mar 5, 2025

    • pypi-attestations

      Public
      A library to convert between Sigstore Bundles and PEP 740 Attestation objects
      Python
      •
      Apache License 2.0
      •3•4•5•0•Updated Mar 4, 2025Mar 4, 2025

    • polytracker

      Public
      An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
      dataflow-analysistaint-trackingllvminstrumentationtaint-analysis
      C++
      •
      Apache License 2.0
      •44•552•45•1•Updated Mar 4, 2025Mar 4, 2025

    • rfc3161-client

      Public
      An Opinionated Python RFC3161 Client
      rfc3161timestamp-protocol
      Rust
      •
      Apache License 2.0
      •0•1•2•0•Updated Mar 4, 2025Mar 4, 2025

    • test-fuzz

      Public
      To make fuzzing Rust easy
      Rust
      •
      GNU Affero General Public License v3.0
      •17•170•12•8•Updated Mar 4, 2025Mar 4, 2025

    • opensearch-benchmark

      Public
      Artifacts related to benchmarking, including documentation, benchmarking harness source code and benchmarking results.
      Python
      •
      Apache License 2.0
      •0•1•6•7•Updated Mar 3, 2025Mar 3, 2025

    • sigstore-rekor-types

      Public
      Python models for Rekor's API types
      Python
      •
      Apache License 2.0
      •1•5•0•0•Updated Mar 3, 2025Mar 3, 2025

    • cast_checks

      Public
      A procedural macro to check for invalid casts
      Rust
      •
      Apache License 2.0
      •3•8•0•0•Updated Mar 3, 2025Mar 3, 2025

    • cargo-unmaintained

      Public
      Find unmaintained packages in Rust projects
      Rust
      •
      GNU Affero General Public License v3.0
      •2•68•6•5•Updated Mar 3, 2025Mar 3, 2025

    • cargo-line-test

      Public
      Run tests by the lines they exercise
      Rust
      •3•3•2•0•Updated Mar 3, 2025Mar 3, 2025

    • rfc8785.py

      Public
      A pure-Python implementation of RFC8785 (JSON Canonicalization Scheme)
      pythonserializationjsoncryptographycanonicalization
      Python
      •
      Apache License 2.0
      •2•1•0•0•Updated Feb 26, 2025Feb 26, 2025

    • algo-ng

      Public
      Experimental version of Algo built on Terraform
      ipsecterraformvpn
      HCL
      •
      GNU Affero General Public License v3.0
      •18•73•0•1•Updated Feb 26, 2025Feb 26, 2025

    • vast

      Public
      VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.
      ccppclangcompilersprogram-analysisintermediate-representationcompiler-frontendmlir
      C++
      •
      Apache License 2.0
      •26•410•169•4•Updated Feb 24, 2025Feb 24, 2025

    • uthenticode

      Public
      A cross-platform library for verifying Authenticode signatures
      cryptographycppauthenticodehacktoberfestcode-signing
      C++
      •
      MIT License
      •34•144•8•2•Updated Feb 21, 2025Feb 21, 2025

    • siderophile

      Public
      Find the ideal fuzz targets in a Rust codebase
      fuzzingprogram-analysissecurity-testingrust
      Rust
      •
      MIT License
      •12•210•13•7•Updated Feb 21, 2025Feb 21, 2025

    • zkdocs

      Public
      Interactive documentation on zero-knowledge proof systems and related primitives.
      cryptographyzero-knowledge
      HTML
      •
      Creative Commons Attribution 4.0 International
      •45•153•6•9•Updated Feb 19, 2025Feb 19, 2025

    • vscode-weaudit

      Public
      Create code bookmarks and code highlights with a click.
      TypeScript
      •
      GNU General Public License v3.0
      •19•192•19•5•Updated Feb 19, 2025Feb 19, 2025

    • .github

      Public
      GNU Affero General Public License v3.0
      •9•2•5•0•Updated Feb 19, 2025Feb 19, 2025

    • lms-go

      Public
      Leighton-Micali Hash-Based Signatures, for Go
      golangcryptographyhash-based-signatures
      Go
      •
      BSD 3-Clause "New" or "Revised" License
      •2•6•4•1•Updated Feb 18, 2025Feb 18, 2025

    • instafix-SVF

      Public
      SVF fork for INSTAFIX
      C++
      •
      Other
      •443•0•0•0•Updated Feb 13, 2025Feb 13, 2025

    • go-mutexasserts

      Public
      A small library that allows to check if Go mutexes are locked
      Go
      •
      MIT License
      •2•23•0•0•Updated Feb 12, 2025Feb 12, 2025

    • emit-lsp

      Public
      The LLVM Project is a collection of modular and reusable compiler and toolchain technologies.
      LLVM
      •
      Other
      •13k•0•0•1•Updated Feb 11, 2025Feb 11, 2025

    • osquery

      Public
      SQL powered operating system instrumentation, monitoring, and analytics.
      C++
      •
      Other
      •2.5k•37•0•2•Updated Feb 11, 2025Feb 11, 2025