Skip to content

@trailofbits Trail of Bits

Change the repository type filter

All

    Repositories list

    269 repositories

    • dylint

      Public
      Run Rust lints from dynamic libraries
      rustlinting
      rustlinting
      Rust
      •
      Apache License 2.0
      •50•572•46•10•Updated Apr 24, 2026Apr 24, 2026

    • publications

      Public
      Publications from Trail of Bits
      conference-presentationsacademic-paperssecurity-reviews
      conference-presentationsacademic-paperssecurity-reviews
      Python
      •
      Creative Commons Attribution Share Alike 4.0 International
      •226•1.8k•0•5•Updated Apr 24, 2026Apr 24, 2026

    • claude-code-devcontainer

      Public
      Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.
      Shell
      •
      Apache License 2.0
      •77•760•2•0•Updated Apr 24, 2026Apr 24, 2026

    • necessist

      Public
      A mutation-based tool for finding bugs in tests
      testingmutation
      testingmutation
      Rust
      •
      GNU Affero General Public License v3.0
      •19•140•18•0•Updated Apr 24, 2026Apr 24, 2026

    • cargo-unmaintained

      Public
      Find unmaintained packages in Rust projects
      rustunmaintainedpackage-management
      rustunmaintainedpackage-management
      Rust
      •
      GNU Affero General Public License v3.0
      •13•88•11•0•Updated Apr 24, 2026Apr 24, 2026

    • anchor-coverage

      Public
      A wrapper around `anchor test` for computing test coverage
      testingcoverageanchor
      testingcoverageanchorsolana
      Rust
      •
      GNU Affero General Public License v3.0
      •6•15•4•1•Updated Apr 24, 2026Apr 24, 2026

    • skills-curated

      Public
      Curated, community-vetted Claude Code plugin marketplace
      Python
      •
      Creative Commons Attribution Share Alike 4.0 International
      •18•372•1•4•Updated Apr 24, 2026Apr 24, 2026

    • gosentry

      Public
      Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.
      gonautilusfuzzing
      gonautilusfuzzinggoleaklibafl
      Go
      •
      BSD 3-Clause "New" or "Revised" License
      •19k•33•1•0•Updated Apr 24, 2026Apr 24, 2026

    • skills

      Public
      Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
      agent-skills
      agent-skills
      Python
      •
      Creative Commons Attribution Share Alike 4.0 International
      •414•4.8k•15•12•Updated Apr 24, 2026Apr 24, 2026

    • trailmark

      Public
      Build and query a graph database representation of source code
      C
      •
      Apache License 2.0
      •7•158•1•0•Updated Apr 24, 2026Apr 24, 2026

    • codeql-queries

      Public
      CodeQL queries developed by Trail of Bits
      CodeQL
      •
      GNU Affero General Public License v3.0
      •9•160•5•4•Updated Apr 23, 2026Apr 23, 2026

    • vscode-weaudit

      Public
      Create code bookmarks and code highlights with a click.
      TypeScript
      •
      GNU General Public License v3.0
      •31•232•15•16•Updated Apr 23, 2026Apr 23, 2026

    • pylock-attestations

      Public
      CLI tool to add attestation identities to `pylock.toml` files
      Python
      •
      Apache License 2.0
      •1•6•4•0•Updated Apr 23, 2026Apr 23, 2026

    • gh-action-adapt-sigstore-pypi

      Public
      Python
      •
      Apache License 2.0
      •0•1•0•1•Updated Apr 23, 2026Apr 23, 2026

    • mquire

      Public
      Zero-dependency Linux memory forensics PoC — leverages kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.
      linuxrustsql
      linuxrustsqlkernelmemoryforensics
      Rust
      •
      Apache License 2.0
      •6•144•3•3•Updated Apr 23, 2026Apr 23, 2026

    • test-fuzz

      Public
      To make fuzzing Rust easy
      testingrustfuzzing
      testingrustfuzzing
      Rust
      •
      GNU Affero General Public License v3.0
      •26•203•7•1•Updated Apr 23, 2026Apr 23, 2026

    • mishegos

      Public
      A differential fuzzer for x86 decoders
      x86fuzzinghacktoberfest
      x86fuzzinghacktoberfest
      C++
      •
      Apache License 2.0
      •30•269•9•1•Updated Apr 23, 2026Apr 23, 2026

    • pip-plugin-pep740

      Public
      An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails.
      Python
      •
      Apache License 2.0
      •1•5•1•0•Updated Apr 23, 2026Apr 23, 2026

    • fickling

      Public
      A Python pickling decompiler and static analyzer
      pythonsecuritymachine-learning
      pythonsecuritymachine-learning
      Python
      •
      GNU Lesser General Public License v3.0
      •68•621•9•14•Updated Apr 23, 2026Apr 23, 2026

    • it-depends

      Public
      A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.
      dependency-analysisdependency-graphhacktoberfest
      dependency-analysisdependency-graphhacktoberfestvulnerability-scannersbomhacktoberfest2021sbom-generatorsbom-tool
      Python
      •
      GNU Lesser General Public License v3.0
      •23•390•8•2•Updated Apr 23, 2026Apr 23, 2026

    • rfc3161-client

      Public
      An Opinionated Python RFC3161 Client
      rfc3161timestamp-protocol
      rfc3161timestamp-protocol
      Rust
      •
      Apache License 2.0
      •4•6•2•0•Updated Apr 23, 2026Apr 23, 2026

    • mewt

      Public
      mewt is a mutation testing framework
      C
      •
      GNU Affero General Public License v3.0
      •0•26•0•5•Updated Apr 23, 2026Apr 23, 2026

    • KEMs

      Public
      Collection of Key Encapsulation Mechanisms written in pure Rust
      Rust
      •40•0•0•2•Updated Apr 23, 2026Apr 23, 2026

    • signal-auditor

      Public
      Key Transparency Auditor for Signal
      Rust
      •
      GNU Affero General Public License v3.0
      •0•6•0•5•Updated Apr 23, 2026Apr 23, 2026

    • sigstore-apis

      Public
      Rust clients for the Fulcio and Rekor APIs
      sigstore
      sigstore
      Rust
      •
      Apache License 2.0
      •2•6•0•3•Updated Apr 23, 2026Apr 23, 2026

    • traits

      Public
      Collection of cryptography-related traits
      Rust
      •242•0•0•2•Updated Apr 23, 2026Apr 23, 2026

    • vscode-sarif-explorer

      Public
      SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results
      static-analysisvscode-extensionsarif
      static-analysisvscode-extensionsarif
      TypeScript
      •
      GNU General Public License v3.0
      •9•49•6•8•Updated Apr 22, 2026Apr 22, 2026

    • elaborate

      Public
      Wrappers for standard library functions and types to produce more elaborate error messages
      rusterror-messages
      rusterror-messages
      Rust
      •
      Apache License 2.0
      •1•5•2•1•Updated Apr 22, 2026Apr 22, 2026

    • build-wrap

      Public
      Help protect against malicious build scripts
      rustsandboxingbuild-scripts
      rustsandboxingbuild-scripts
      Rust
      •
      GNU Affero General Public License v3.0
      •4•27•2•1•Updated Apr 22, 2026Apr 22, 2026

    • algo

      Public
      Set up a personal VPN in the cloud
      securityansibleencryption
      securityansibleencryptionipsecvpnvpn-servervpn-clientikev2strongswanssh-tunnel
      Python
      •
      GNU Affero General Public License v3.0
      •2.4k•30k•65•6•Updated Apr 22, 2026Apr 22, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.