trailofbits repositories

293 repositories

coop
Public
Isolated VM environment for running Claude Code and Codex
rust cli vm
rust cli vm sandbox kvm lima codex firecracker microvm claude-code
Rust
•
Apache License 2.0
•2•54•28•5•Updated Sep 7, 2026Sep 7, 2026
cargo-unmaintained
Public
Find unmaintained packages in Rust projects
rust unmaintained package-management
rust unmaintained package-management
Rust
•
GNU Affero General Public License v3.0
•15•98•9•4•Updated Sep 7, 2026Sep 7, 2026
necessist
Public
A mutation-based tool for finding bugs in tests
testing mutation
testing mutation
Rust
•
GNU Affero General Public License v3.0
•20•145•17•6•Updated Sep 7, 2026Sep 7, 2026
testing-handbook
Public
Trail of Bits Testing Handbook - appsec.guide
HTML
•
Creative Commons Attribution 4.0 International
•22•134•19•2•Updated Sep 7, 2026Sep 7, 2026
bt-log
Public
Binary transparency log to make tampered artifact distribution auditable
Go
•1•0•0•4•Updated Sep 7, 2026Sep 7, 2026
it-depends
Public
A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.
dependency-analysis dependency-graph hacktoberfest
dependency-analysis dependency-graph hacktoberfest vulnerability-scanner sbom hacktoberfest2021 sbom-generator sbom-tool
Python
•
GNU Lesser General Public License v3.0
•24•412•6•2•Updated Sep 7, 2026Sep 7, 2026
rfc3161-client
Public
An Opinionated Python RFC3161 Client
rfc3161 timestamp-protocol
rfc3161 timestamp-protocol
Rust
•
Apache License 2.0
•4•7•2•3•Updated Sep 7, 2026Sep 7, 2026
dylint
Public
Run Rust lints from dynamic libraries
rust linting
rust linting
Rust
•
Apache License 2.0
•58•650•50•9•Updated Sep 6, 2026Sep 6, 2026
mquire
Public
Zero-dependency Linux memory forensics, leveraging kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.
linux rust sql
linux rust sql kernel memory forensics
Rust
•
Apache License 2.0
•8•184•3•0•Updated Sep 6, 2026Sep 6, 2026
gosentry
Public
Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.
go nautilus fuzzing
go nautilus fuzzing goleak libafl
Go
•
BSD 3-Clause "New" or "Revised" License
•19k•120•0•0•Updated Sep 6, 2026Sep 6, 2026
build-wrap
Public
Help protect against malicious build scripts
rust sandboxing build-scripts
rust sandboxing build-scripts
Rust
•
GNU Affero General Public License v3.0
•5•36•1•1•Updated Sep 5, 2026Sep 5, 2026
gh-action-adapt-sigstore-pypi
Public
Python
•
Apache License 2.0
•0•2•0•2•Updated Sep 4, 2026Sep 4, 2026
anchor-coverage
Public
A wrapper around `anchor test` for computing test coverage
testing coverage anchor
testing coverage anchor solana
Rust
•
GNU Affero General Public License v3.0
•7•15•3•2•Updated Sep 4, 2026Sep 4, 2026
publications
Public
Publications from Trail of Bits
conference-presentations academic-papers security-reviews
conference-presentations academic-papers security-reviews
Python
•
Creative Commons Attribution Share Alike 4.0 International
•239•1.9k•0•3•Updated Sep 4, 2026Sep 4, 2026
constructive-cryptography
Public
Lean 4 formalization of Constructive Cryptography: abstract specification calculus, resource algebra, and the constructive-cryptography layer.
Lean
•
MIT License
•0•0•0•1•Updated Sep 4, 2026Sep 4, 2026
cbc-mac-cc
Public
Lean formalization of the CBC-MAC Random Systems bound
Lean
•
MIT License
•0•0•0•1•Updated Sep 4, 2026Sep 4, 2026
vscode-weaudit
Public
Create code bookmarks and code highlights with a click.
TypeScript
•
GNU General Public License v3.0
•34•243•15•9•Updated Sep 3, 2026Sep 3, 2026
idac
Public
idac - IDA Pro command line tool for agents and humans
Python
•
Apache License 2.0
•5•52•1•1•Updated Sep 3, 2026Sep 3, 2026
mishegos
Public
A differential fuzzer for x86 decoders
x86 fuzzing hacktoberfest
x86 fuzzing hacktoberfest
C++
•
Apache License 2.0
•30•274•9•2•Updated Sep 3, 2026Sep 3, 2026
test-fuzz
Public
To make fuzzing Rust easy
testing rust fuzzing
testing rust fuzzing
Rust
•
GNU Affero General Public License v3.0
•27•208•8•2•Updated Sep 3, 2026Sep 3, 2026
vscode-sarif-explorer
Public
SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results
static-analysis vscode-extension sarif
static-analysis vscode-extension sarif
TypeScript
•
GNU General Public License v3.0
•10•53•5•2•Updated Sep 3, 2026Sep 3, 2026
skills
Public
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
agent-skills
agent-skills
Python
•
Creative Commons Attribution Share Alike 4.0 International
•603•7k•20•1•Updated Sep 2, 2026Sep 2, 2026
algo
Public
Set up a personal VPN in the cloud
security ansible encryption
security ansible encryption ipsec vpn vpn-server vpn-client ikev2 strongswan ssh-tunnel
Python
•
GNU Affero General Public License v3.0
•2.4k•30k•70•7•Updated Sep 2, 2026Sep 2, 2026
rekor-watch
Public
Go
•
Apache License 2.0
•0•0•0•16•Updated Sep 2, 2026Sep 2, 2026
dropkit
Public
A CLI tool for managing DigitalOcean droplets with automated setup, SSH configuration, and lifecycle management.
Python
•
Apache License 2.0
•14•129•3•5•Updated Sep 2, 2026Sep 2, 2026
llvm-project
Public
The LLVM Project is a collection of modular and reusable compiler and toolchain technologies.
LLVM
•
Other
•19k•1•0•7•Updated Sep 2, 2026Sep 2, 2026
codex-config
Public
Shell
•0•23•0•0•Updated Sep 1, 2026Sep 1, 2026
binaryninja-finder
Public
Python
•
MIT License
•0•1•0•2•Updated Sep 1, 2026Sep 1, 2026
agentcov
Public
gcov for what lines of code agents read
Python
•
Apache License 2.0
•1•53•0•4•Updated Sep 1, 2026Sep 1, 2026
are-we-pep740-yet
Public
Are we PEP 740 yet?
HTML
•
BSD 2-Clause "Simplified" License
•6•9•1•2•Updated Sep 1, 2026Sep 1, 2026

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Navigation Menu

Trail of Bits

All

293 repositories

coop

cargo-unmaintained

necessist

testing-handbook

bt-log

it-depends

rfc3161-client

dylint

mquire

gosentry

build-wrap

gh-action-adapt-sigstore-pypi

anchor-coverage

publications

constructive-cryptography

cbc-mac-cc

vscode-weaudit

idac

mishegos

test-fuzz

vscode-sarif-explorer

skills

algo

rekor-watch

dropkit

llvm-project

codex-config

binaryninja-finder

agentcov

are-we-pep740-yet

Repositories list

293 repositories