Trail of Bits

All

263 repositories

vscode-sarif-explorer
Public
SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results
static-analysis vscode-extension sarif
TypeScript
•
GNU General Public License v3.0
•9•46•6•5•Updated Feb 28, 2026Feb 28, 2026
modelcontextprotocol-servers
Public
Model Context Protocol Servers
JavaScript
•
MIT License
•9.7k•5•0•10•Updated Feb 28, 2026Feb 28, 2026
gosentry
Public
Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.
go nautilus fuzzing goleak libafl
Go
•
BSD 3-Clause "New" or "Revised" License
•19k•16•1•0•Updated Feb 28, 2026Feb 28, 2026
build-wrap
Public
Help protect against malicious build scripts
rust sandboxing build-scripts
Rust
•
GNU Affero General Public License v3.0
•4•25•1•0•Updated Feb 28, 2026Feb 28, 2026
test-fuzz
Public
To make fuzzing Rust easy
testing rust fuzzing
Rust
•
GNU Affero General Public License v3.0
•25•197•11•4•Updated Feb 27, 2026Feb 27, 2026
elaborate
Public
Wrappers for standard library functions and types to produce more elaborate error messages
rust error-messages
Rust
•
Apache License 2.0
•1•4•2•1•Updated Feb 27, 2026Feb 27, 2026
cargo-unmaintained
Public
Find unmaintained packages in Rust projects
rust unmaintained package-management
Rust
•
GNU Affero General Public License v3.0
•13•85•11•2•Updated Feb 27, 2026Feb 27, 2026
claude-code-devcontainer
Public
Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.
Shell
•
Apache License 2.0
•38•450•0•3•Updated Feb 27, 2026Feb 27, 2026
publications
Public
Publications from Trail of Bits
conference-presentations academic-papers security-reviews
Python
•
Creative Commons Attribution Share Alike 4.0 International
•220•1.8k•0•0•Updated Feb 27, 2026Feb 27, 2026
mcp-context-protector
Public
MCP security wrapper
Python
•
Apache License 2.0
•17•213•5•6•Updated Feb 27, 2026Feb 27, 2026
pip-plugin-pep740
Public
An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails.
Python
•
Apache License 2.0
•0•5•1•0•Updated Feb 27, 2026Feb 27, 2026
deptective
Public
Deptective automatically determines the native dependencies required to run any arbitrary program or command.
dependency-analysis sbom sbom-tool
Python
•
GNU Lesser General Public License v3.0
•0•129•1•3•Updated Feb 27, 2026Feb 27, 2026
skills
Public
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
agent-skills
Python
•
Creative Commons Attribution Share Alike 4.0 International
•235•3k•8•3•Updated Feb 27, 2026Feb 27, 2026
vscode-weaudit
Public
Create code bookmarks and code highlights with a click.
TypeScript
•
GNU General Public License v3.0
•28•230•15•10•Updated Feb 26, 2026Feb 26, 2026
codeql-queries
Public
CodeQL queries developed by Trail of Bits
CodeQL
•
GNU Affero General Public License v3.0
•7•147•5•2•Updated Feb 26, 2026Feb 26, 2026
mquire
Public
Zero-dependency Linux memory forensics PoC — leverages kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.
linux rust sql kernel memory forensics
Rust
•
Apache License 2.0
•2•36•1•1•Updated Feb 26, 2026Feb 26, 2026
mishegos
Public
A differential fuzzer for x86 decoders
x86 fuzzing hacktoberfest
C++
•
Apache License 2.0
•29•262•9•2•Updated Feb 26, 2026Feb 26, 2026
fickling
Public
A Python pickling decompiler and static analyzer
python security machine-learning
Python
•
GNU Lesser General Public License v3.0
•67•604•9•7•Updated Feb 26, 2026Feb 26, 2026
different
Public
Detect bugs that have already been fixed in one codebase and determine whether the same issues apply to the target codebase.
code-review deepagent agentic-security
Python
•1•4•0•2•Updated Feb 26, 2026Feb 26, 2026
it-depends
Public
A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.
dependency-analysis dependency-graph hacktoberfest vulnerability-scanner sbom hacktoberfest2021 sbom-generator sbom-tool
Python
•
GNU Lesser General Public License v3.0
•22•385•12•3•Updated Feb 26, 2026Feb 26, 2026
dropkit
Public
A CLI tool for managing DigitalOcean droplets with automated setup, SSH configuration, and lifecycle management.
Python
•
Apache License 2.0
•9•72•0•3•Updated Feb 25, 2026Feb 25, 2026
claude-code-config
Public
Opinionated defaults, documentation, and workflows for Claude Code at Trail of Bits
claude developer-tool claude-code claude-code-cli
Shell
•105•1.4k•1•0•Updated Feb 25, 2026Feb 25, 2026
algo
Public
Set up a personal VPN in the cloud
security ansible encryption ipsec vpn vpn-server vpn-client ikev2 strongswan ssh-tunnel
Python
•
GNU Affero General Public License v3.0
•2.4k•30k•66•3•Updated Feb 25, 2026Feb 25, 2026
cargo-line-test
Public
Run tests by the lines they exercise
testing rust
Rust
•3•8•2•0•Updated Feb 25, 2026Feb 25, 2026
v4-core
Public
🦄 🦄 🦄 🦄 Core smart contracts of Uniswap v4
Solidity
•
Other
•1.3k•8•0•4•Updated Feb 25, 2026Feb 25, 2026
nyc-infosec
Public
Mapping the NYC Infosec Community
nyc meetup university conference calendar
CSS
•23•57•0•0•Updated Feb 25, 2026Feb 25, 2026
sleepy-pickle-public
Public
AI model compromise through malicious pickle files
Python
•
MIT License
•1•0•0•3•Updated Feb 25, 2026Feb 25, 2026
anchor-coverage
Public
A wrapper around `anchor test` for computing test coverage
testing coverage anchor solana
Rust
•
GNU Affero General Public License v3.0
•4•13•4•2•Updated Feb 24, 2026Feb 24, 2026
vsix-audit
Public
Security scanner for VS Code extensions
security vscode vscode-extension
TypeScript
•
GNU Affero General Public License v3.0
•3•4•0•3•Updated Feb 24, 2026Feb 24, 2026
cast_checks
Public
A procedural macro to check for invalid casts
rust casts
Rust
•
Apache License 2.0
•3•10•0•0•Updated Feb 24, 2026Feb 24, 2026