trailofbits repositories

293 repositories

anchor-coverage
Public
A wrapper around `anchor test` for computing test coverage
testing coverage anchor
testing coverage anchor solana
Rust
•
GNU Affero General Public License v3.0
•7•15•3•3•Updated Sep 13, 2026Sep 13, 2026
dylint
Public
Run Rust lints from dynamic libraries
rust linting
rust linting
Rust
•
Apache License 2.0
•59•659•51•12•Updated Sep 13, 2026Sep 13, 2026
vendetect
Public
A tool to automatically detect copy+pasted and vendored code between repositories
program-analysis plagiarism-detection sbom
program-analysis plagiarism-detection sbom sbom-tool
Python
•
GNU Affero General Public License v3.0
•6•84•1•0•Updated Sep 12, 2026Sep 12, 2026
deptective
Public
Deptective automatically determines the native dependencies required to run any arbitrary program or command.
dependency-analysis sbom sbom-tool
dependency-analysis sbom sbom-tool
Python
•
GNU Lesser General Public License v3.0
•1•132•1•2•Updated Sep 12, 2026Sep 12, 2026
polyfile
Public
A pure Python cleanroom implementation of libmagic, with instrumented parsing from Kaitai struct and an interactive hex viewer
python file-format-detection libmagic
python file-format-detection libmagic file-formats polyglots
Python
•
Apache License 2.0
•31•390•15•0•Updated Sep 12, 2026Sep 12, 2026
necessist
Public
A mutation-based tool for finding bugs in tests
testing mutation
testing mutation
Rust
•
GNU Affero General Public License v3.0
•21•145•19•4•Updated Sep 12, 2026Sep 12, 2026
cookiecutter-python
Public
A cookiecutter template for a best-practices Python project
Python
•
Apache License 2.0
•5•39•0•2•Updated Sep 11, 2026Sep 11, 2026
llvm-project
Public
The LLVM Project is a collection of modular and reusable compiler and toolchain technologies.
LLVM
•
Other
•19k•2•0•6•Updated Sep 11, 2026Sep 11, 2026
cargo-unmaintained
Public
Find unmaintained packages in Rust projects
rust unmaintained package-management
rust unmaintained package-management
Rust
•
GNU Affero General Public License v3.0
•15•98•9•1•Updated Sep 11, 2026Sep 11, 2026
rekor-watch
Public
Go
•
Apache License 2.0
•0•0•1•15•Updated Sep 11, 2026Sep 11, 2026
coop
Public
Isolated VM environment for running Claude Code and Codex
rust cli vm
rust cli vm sandbox kvm lima codex firecracker microvm claude-code
Rust
•
Apache License 2.0
•13•229•32•3•Updated Sep 11, 2026Sep 11, 2026
vscode-weaudit
Public
Create code bookmarks and code highlights with a click.
TypeScript
•
GNU General Public License v3.0
•34•243•16•10•Updated Sep 11, 2026Sep 11, 2026
it-depends
Public
A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.
dependency-analysis dependency-graph hacktoberfest
dependency-analysis dependency-graph hacktoberfest vulnerability-scanner sbom hacktoberfest2021 sbom-generator sbom-tool
Python
•
GNU Lesser General Public License v3.0
•25•412•6•2•Updated Sep 11, 2026Sep 11, 2026
papertrail
Public
TypeScript
•2•1•0•2•Updated Sep 11, 2026Sep 11, 2026
mishegos
Public
A differential fuzzer for x86 decoders
x86 fuzzing hacktoberfest
x86 fuzzing hacktoberfest
C++
•
Apache License 2.0
•30•275•9•1•Updated Sep 10, 2026Sep 10, 2026
mquire
Public
Zero-dependency Linux memory forensics, leveraging kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.
linux rust sql
linux rust sql kernel memory forensics
Rust
•
Apache License 2.0
•8•186•3•3•Updated Sep 10, 2026Sep 10, 2026
test-fuzz
Public
To make fuzzing Rust easy
testing rust fuzzing
testing rust fuzzing
Rust
•
GNU Affero General Public License v3.0
•27•208•8•2•Updated Sep 10, 2026Sep 10, 2026
fickling
Public
A Python pickling decompiler and static analyzer
python security machine-learning
python security machine-learning
Python
•
GNU Lesser General Public License v3.0
•76•666•8•13•Updated Sep 10, 2026Sep 10, 2026
rfc3161-client
Public
An Opinionated Python RFC3161 Client
rfc3161 timestamp-protocol
rfc3161 timestamp-protocol
Rust
•
Apache License 2.0
•4•7•2•1•Updated Sep 10, 2026Sep 10, 2026
vscode-sarif-explorer
Public
SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results
static-analysis vscode-extension sarif
static-analysis vscode-extension sarif
TypeScript
•
GNU General Public License v3.0
•10•53•5•1•Updated Sep 10, 2026Sep 10, 2026
graphtage
Public
A semantic diff utility and library for tree-like files such as JSON, JSON5, XML, HTML, YAML, and CSV.
python diff utility
python diff utility library graph-algorithms command-line-tool hacktoberfest hacktoberfest2021
Python
•
GNU Lesser General Public License v3.0
•61•2.5k•15•7•Updated Sep 9, 2026Sep 9, 2026
skills
Public
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
agent-skills
agent-skills
Python
•
Creative Commons Attribution Share Alike 4.0 International
•604•7.1k•23•1•Updated Sep 9, 2026Sep 9, 2026
gosentry
Public
Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.
go nautilus fuzzing
go nautilus fuzzing goleak libafl
Go
•
BSD 3-Clause "New" or "Revised" License
•19k•120•0•1•Updated Sep 9, 2026Sep 9, 2026
mewt
Public
mewt is a mutation testing framework
C
•
GNU Affero General Public License v3.0
•3•57•0•8•Updated Sep 9, 2026Sep 9, 2026
algo
Public
Set up a personal VPN in the cloud
security ansible encryption
security ansible encryption ipsec vpn vpn-server vpn-client ikev2 strongswan ssh-tunnel
Python
•
GNU Affero General Public License v3.0
•2.4k•30k•70•7•Updated Sep 9, 2026Sep 9, 2026
elaborate
Public
Wrappers for standard library functions and types to produce more elaborate error messages
rust error-messages
rust error-messages
Rust
•
Apache License 2.0
•1•9•5•0•Updated Sep 9, 2026Sep 9, 2026
publications
Public
Publications from Trail of Bits
conference-presentations academic-papers security-reviews
conference-presentations academic-papers security-reviews
Python
•
Creative Commons Attribution Share Alike 4.0 International
•240•1.9k•0•3•Updated Sep 9, 2026Sep 9, 2026
pylock-attestations
Public
CLI tool to add attestation identities to `pylock.toml` files
Python
•
Apache License 2.0
•1•6•3•1•Updated Sep 8, 2026Sep 8, 2026
dropkit
Public
A CLI tool for managing DigitalOcean droplets with automated setup, SSH configuration, and lifecycle management.
Python
•
Apache License 2.0
•14•129•3•6•Updated Sep 8, 2026Sep 8, 2026
tlslib.py
Public
MVP for updated PEP 543 proposal
Python
•
Apache License 2.0
•1•14•2•3•Updated Sep 8, 2026Sep 8, 2026

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Navigation Menu

Trail of Bits

All

293 repositories

anchor-coverage

dylint

vendetect

deptective

polyfile

necessist

cookiecutter-python

llvm-project

cargo-unmaintained

rekor-watch

coop

vscode-weaudit

it-depends

papertrail

mishegos

mquire

test-fuzz

fickling

rfc3161-client

vscode-sarif-explorer

graphtage

skills

gosentry

mewt

algo

elaborate

publications

pylock-attestations

dropkit

tlslib.py

Repositories list

293 repositories