Trail of Bits

All

247 repositories

algo
Public
Set up a personal VPN in the cloud
security ansible encryption ipsec vpn vpn-server vpn-client ikev2 strongswan ssh-tunnel
Python
•
GNU Affero General Public License v3.0
•2.4k•30k•77•7•Updated Nov 27, 2025Nov 27, 2025
buttercup
Public
Buttercup finds and patches software vulnerabilities
Python
•
GNU Affero General Public License v3.0
•147•1.4k•52•5•Updated Nov 27, 2025Nov 27, 2025
test-fuzz
Public
To make fuzzing Rust easy
testing rust fuzzing
Rust
•
GNU Affero General Public License v3.0
•24•190•10•4•Updated Nov 27, 2025Nov 27, 2025
dylint
Public
Run Rust lints from dynamic libraries
rust linting
Rust
•
Apache License 2.0
•48•515•43•15•Updated Nov 27, 2025Nov 27, 2025
fickling
Public
A Python pickling decompiler and static analyzer
python security machine-learning
Python
•
GNU Lesser General Public License v3.0
•63•576•14•9•Updated Nov 27, 2025Nov 27, 2025
x509-limbo
Public
A suite of testvectors for X.509 certificate path validation and tools for building them
C++
•
Apache License 2.0
•10•0•33•18•Updated Nov 26, 2025Nov 26, 2025
polyfile
Public
A pure Python cleanroom implementation of libmagic, with instrumented parsing from Kaitai struct and an interactive hex viewer
python file-format-detection libmagic file-formats polyglots
Python
•
Apache License 2.0
•29•372•21•6•Updated Nov 26, 2025Nov 26, 2025
mewt
Public
mewt is a mutation testing framework
C
•
GNU Affero General Public License v3.0
•0•1•0•0•Updated Nov 26, 2025Nov 26, 2025
publications
Public
Publications from Trail of Bits
conference-presentations academic-papers security-reviews
Python
•
Creative Commons Attribution Share Alike 4.0 International
•208•1.7k•7•6•Updated Nov 26, 2025Nov 26, 2025
vendetect
Public
A tool to automatically detect copy+pasted and vendored code between repositories
program-analysis plagiarism-detection sbom sbom-tool
Python
•
GNU Affero General Public License v3.0
•5•72•2•1•Updated Nov 26, 2025Nov 26, 2025
vscode-masm
Public
VS Code extension for MASM (Microsoft Macro Assembler)
TypeScript
•0•0•0•0•Updated Nov 26, 2025Nov 26, 2025
masm-lsp
Public
Language Server Protocol implementation for Miden Assembly
Rust
•0•0•0•0•Updated Nov 26, 2025Nov 26, 2025
ml-dsa
Public
FIPS-204 (ML-DSA) implementation in Go
Go
•
BSD 3-Clause "New" or "Revised" License
•0•12•0•3•Updated Nov 26, 2025Nov 26, 2025
vscode-weaudit
Public
Create code bookmarks and code highlights with a click.
TypeScript
•
GNU General Public License v3.0
•26•219•25•23•Updated Nov 26, 2025Nov 26, 2025
pe-parse
Public
Principled, lightweight C/C++ PE parser
pe-format portable-executable hacktoberfest
C++
•
MIT License
•163•878•18•5•Updated Nov 26, 2025Nov 26, 2025
deptective
Public
Deptective automatically determines the native dependencies required to run any arbitrary program or command.
dependency-analysis sbom sbom-tool
Python
•
GNU Lesser General Public License v3.0
•0•126•1•7•Updated Nov 25, 2025Nov 25, 2025
instafix-llvm
Public
LLVM fork for INSTAFIX
LLVM
•
Other
•15k•3•0•4•Updated Nov 25, 2025Nov 25, 2025
it-depends
Public
A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.
dependency-analysis dependency-graph hacktoberfest vulnerability-scanner sbom hacktoberfest2021 sbom-generator sbom-tool
Python
•
GNU Lesser General Public License v3.0
•22•376•22•3•Updated Nov 25, 2025Nov 25, 2025
protofuzz
Public
Google Protocol Buffers message generator
protobuf protocol-buffers fuzzer
Python
•
MIT License
•36•283•9•4•Updated Nov 25, 2025Nov 25, 2025
ebpfault
Public
A BPF-based syscall fault injector
debugging llvm ebpf fault-injection bpf
C++
•
Apache License 2.0
•11•105•1•5•Updated Nov 25, 2025Nov 25, 2025
ebpfpub
Public
ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.
security monitoring llvm tracing ebpf bpf tracepoints
C++
•
Apache License 2.0
•10•117•0•4•Updated Nov 25, 2025Nov 25, 2025
anchor-coverage
Public
A wrapper around `anchor test` for computing test coverage
testing coverage anchor solana
Rust
•
GNU Affero General Public License v3.0
•3•12•3•2•Updated Nov 25, 2025Nov 25, 2025
graphtage
Public
A semantic diff utility and library for tree-like files such as JSON, JSON5, XML, HTML, YAML, and CSV.
python diff utility library graph-algorithms command-line-tool hacktoberfest hacktoberfest2021
Python
•
GNU Lesser General Public License v3.0
•52•2.4k•20•8•Updated Nov 25, 2025Nov 25, 2025
necessist
Public
A mutation-based tool for finding bugs in tests
testing mutation
Rust
•
GNU Affero General Public License v3.0
•18•126•17•6•Updated Nov 25, 2025Nov 25, 2025
build-wrap
Public
Help protect against malicious build scripts
rust sandboxing build-scripts
Rust
•
GNU Affero General Public License v3.0
•4•18•2•1•Updated Nov 24, 2025Nov 24, 2025
eatmynetwork
Public
A small script for running programs with (minimal) network sandboxing
macos linux sandbox resilience-testing
Shell
•
Apache License 2.0
•2•52•0•1•Updated Nov 24, 2025Nov 24, 2025
uthenticode
Public
A cross-platform library for verifying Authenticode signatures
cryptography cpp authenticode hacktoberfest code-signing
C++
•
MIT License
•34•161•9•4•Updated Nov 24, 2025Nov 24, 2025
cast_checks
Public
A procedural macro to check for invalid casts
rust casts
Rust
•
Apache License 2.0
•3•9•0•1•Updated Nov 24, 2025Nov 24, 2025
cargo-unmaintained
Public
Find unmaintained packages in Rust projects
rust unmaintained package-management
Rust
•
GNU Affero General Public License v3.0
•13•81•11•3•Updated Nov 24, 2025Nov 24, 2025
windows-ctl
Public
Rust libraries and utilities for parsing Windows Certificate Trust Lists
rust cryptography authenticode
Rust
•
Apache License 2.0
•3•10•0•3•Updated Nov 24, 2025Nov 24, 2025