Skip to content

@trailofbits Trail of Bits

Change the repository type filter

All

    Repositories list

    268 repositories

    • CoBRA

      Public
      Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation
      obfuscationcompilercpp
      obfuscationcompilercppllvmstatic-analysisreverse-engineeringdeobfuscationz3binary-analysisboolean-algebra
      C++
      •
      Apache License 2.0
      •8•219•3•2•Updated Apr 11, 2026Apr 11, 2026

    • dylint

      Public
      Run Rust lints from dynamic libraries
      rustlinting
      rustlinting
      Rust
      •
      Apache License 2.0
      •50•562•46•8•Updated Apr 11, 2026Apr 11, 2026

    • scribe

      Public
      Local transcription and speaker diarization with pyannote and parakeet
      Python
      •
      MIT License
      •3•25•0•3•Updated Apr 11, 2026Apr 11, 2026

    • cookiecutter-python

      Public
      A cookiecutter template for a best-practices Python project
      Python
      •
      Apache License 2.0
      •7•35•0•1•Updated Apr 10, 2026Apr 10, 2026

    • masm-lean

      Public
      Automatic translation of Miden assembly to Lean
      Lean
      •
      MIT License
      •0•1•0•3•Updated Apr 10, 2026Apr 10, 2026

    • cargo-unmaintained

      Public
      Find unmaintained packages in Rust projects
      rustunmaintainedpackage-management
      rustunmaintainedpackage-management
      Rust
      •
      GNU Affero General Public License v3.0
      •13•87•11•1•Updated Apr 10, 2026Apr 10, 2026

    • dropkit

      Public
      A CLI tool for managing DigitalOcean droplets with automated setup, SSH configuration, and lifecycle management.
      Python
      •
      Apache License 2.0
      •13•104•2•5•Updated Apr 10, 2026Apr 10, 2026

    • it-depends

      Public
      A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.
      dependency-analysisdependency-graphhacktoberfest
      dependency-analysisdependency-graphhacktoberfestvulnerability-scannersbomhacktoberfest2021sbom-generatorsbom-tool
      Python
      •
      GNU Lesser General Public License v3.0
      •22•389•8•2•Updated Apr 10, 2026Apr 10, 2026

    • masm-decompiler

      Public
      Decompiler for the Miden assembly language
      Rust
      •
      MIT License
      •0•1•0•0•Updated Apr 10, 2026Apr 10, 2026

    • build-wrap

      Public
      Help protect against malicious build scripts
      rustsandboxingbuild-scripts
      rustsandboxingbuild-scripts
      Rust
      •
      GNU Affero General Public License v3.0
      •4•28•1•0•Updated Apr 10, 2026Apr 10, 2026

    • test-fuzz

      Public
      To make fuzzing Rust easy
      testingrustfuzzing
      testingrustfuzzing
      Rust
      •
      GNU Affero General Public License v3.0
      •25•199•8•3•Updated Apr 10, 2026Apr 10, 2026

    • skills-curated

      Public
      Curated, community-vetted Claude Code plugin marketplace
      Python
      •
      Creative Commons Attribution Share Alike 4.0 International
      •15•348•0•3•Updated Apr 10, 2026Apr 10, 2026

    • rfc3161-client

      Public
      An Opinionated Python RFC3161 Client
      rfc3161timestamp-protocol
      rfc3161timestamp-protocol
      Rust
      •
      Apache License 2.0
      •4•6•2•0•Updated Apr 10, 2026Apr 10, 2026

    • vendetect

      Public
      A tool to automatically detect copy+pasted and vendored code between repositories
      program-analysisplagiarism-detectionsbom
      program-analysisplagiarism-detectionsbomsbom-tool
      Python
      •
      GNU Affero General Public License v3.0
      •6•76•2•7•Updated Apr 10, 2026Apr 10, 2026

    • codeql

      Public
      CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
      CodeQL
      •
      MIT License
      •2k•2•0•6•Updated Apr 10, 2026Apr 10, 2026

    • vscode-sarif-explorer

      Public
      SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results
      static-analysisvscode-extensionsarif
      static-analysisvscode-extensionsarif
      TypeScript
      •
      GNU General Public License v3.0
      •9•49•6•8•Updated Apr 10, 2026Apr 10, 2026

    • vscode-weaudit

      Public
      Create code bookmarks and code highlights with a click.
      TypeScript
      •
      GNU General Public License v3.0
      •31•232•15•16•Updated Apr 10, 2026Apr 10, 2026

    • mquire

      Public
      Zero-dependency Linux memory forensics PoC — leverages kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.
      linuxrustsql
      linuxrustsqlkernelmemoryforensics
      Rust
      •
      Apache License 2.0
      •6•136•2•4•Updated Apr 9, 2026Apr 9, 2026

    • mishegos

      Public
      A differential fuzzer for x86 decoders
      x86fuzzinghacktoberfest
      x86fuzzinghacktoberfest
      C++
      •
      Apache License 2.0
      •30•268•9•1•Updated Apr 9, 2026Apr 9, 2026

    • masm-lsp

      Public
      An LSP server for the Miden assembly language
      Rust
      •
      MIT License
      •3•4•1•0•Updated Apr 9, 2026Apr 9, 2026

    • fickling

      Public
      A Python pickling decompiler and static analyzer
      pythonsecuritymachine-learning
      pythonsecuritymachine-learning
      Python
      •
      GNU Lesser General Public License v3.0
      •69•618•9•12•Updated Apr 9, 2026Apr 9, 2026

    • claude-code-devcontainer

      Public
      Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.
      Shell
      •
      Apache License 2.0
      •66•651•3•1•Updated Apr 9, 2026Apr 9, 2026

    • buttercup

      Public
      Buttercup finds and patches software vulnerabilities
      Python
      •
      GNU Affero General Public License v3.0
      •175•1.6k•52•6•Updated Apr 9, 2026Apr 9, 2026

    • pylock-attestations

      Public
      CLI tool to add attestation identities to `pylock.toml` files
      Python
      •
      Apache License 2.0
      •1•6•4•0•Updated Apr 8, 2026Apr 8, 2026

    • algo

      Public
      Set up a personal VPN in the cloud
      securityansibleencryption
      securityansibleencryptionipsecvpnvpn-servervpn-clientikev2strongswanssh-tunnel
      Python
      •
      GNU Affero General Public License v3.0
      •2.4k•30k•65•4•Updated Apr 8, 2026Apr 8, 2026

    • pajaMAS

      Public
      Multi-agent system (MAS) hijacking demos
      multi-agent-systemsai-agentsai-security
      multi-agent-systemsai-agentsai-security
      Python
      •
      Apache License 2.0
      •4•45•3•12•Updated Apr 8, 2026Apr 8, 2026

    • datasig

      Public
      Dataset fingerprinting for AIBOM
      Python
      •
      GNU Affero General Public License v3.0
      •0•15•0•7•Updated Apr 8, 2026Apr 8, 2026

    • slither-mcp

      Public
      MCP server for Slither static analysis of Solidity smart contracts
      pythonsecuritymcp
      pythonsecuritymcpstatic-analysisethereumsmart-contractssolidityslithermodel-context-protocol
      Python
      •
      GNU Affero General Public License v3.0
      •8•83•0•10•Updated Apr 8, 2026Apr 8, 2026

    • testing-handbook

      Public
      Trail of Bits Testing Handbook - appsec.guide
      Rust
      •
      Creative Commons Attribution 4.0 International
      •17•110•18•4•Updated Apr 8, 2026Apr 8, 2026

    • trailmark

      Public
      Build and query a graph database representation of source code
      C
      •
      Apache License 2.0
      •0•9•0•0•Updated Apr 8, 2026Apr 8, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.