Repositories list

• eth-security-toolbox

  Public
  A Docker container preconfigured with all of the Trail of Bits Ethereum security tools.

  Dockerfile

  •

  GNU Affero General Public License v3.0

  •108•676•2•1•Updated Dec 18, 2024Dec 18, 2024

• rfc8785.py

  Public
  A pure-Python implementation of RFC8785 (JSON Canonicalization Scheme)

  pythonserializationjson+ 2cryptographycanonicalization

  Python

  •

  Apache License 2.0

  •2•1•0•1•Updated Dec 18, 2024Dec 18, 2024

• zkdocs

  Public
  Interactive documentation on zero-knowledge proof systems and related primitives.

  cryptographyzero-knowledge

  HTML

  •

  Creative Commons Attribution 4.0 International

  •32•151•5•3•Updated Dec 18, 2024Dec 18, 2024

• rfc3161-client

  Public
  An Opinionated Python RFC3161 Client

  rfc3161timestamp-protocol

  Rust

  •

  Apache License 2.0

  •0•2•1•0•Updated Dec 18, 2024Dec 18, 2024

• challenge-tasks

  Public
  Python

  •0•0•0•0•Updated Dec 18, 2024Dec 18, 2024

• angrop

  Public
  Python

  •

  BSD 2-Clause "Simplified" License

  •1•0•0•0•Updated Dec 18, 2024Dec 18, 2024

• pypi-attestations

  Public
  A library to convert between Sigstore Bundles and PEP 740 Attestation objects

  Python

  •

  Apache License 2.0

  •2•4•3•1•Updated Dec 18, 2024Dec 18, 2024

• dylint

  Public
  Run Rust lints from dynamic libraries

  Rust

  •

  Apache License 2.0

  •22•414•24•3•Updated Dec 18, 2024Dec 18, 2024

• cargo-unmaintained

  Public
  Find unmaintained packages in Rust projects

  Rust

  •

  GNU Affero General Public License v3.0

  •2•66•5•2•Updated Dec 18, 2024Dec 18, 2024

• vast

  Public
  VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.

  ccppclang+ 5compilersprogram-analysisintermediate-representationcompiler-frontendmlir

  C++

  •

  Apache License 2.0

  •25•401•161•6•Updated Dec 17, 2024Dec 17, 2024

• ctf-challenges

  Public
  CTF Challenges

  ctfctf-challenges

  Solidity

  •16•125•0•0•Updated Dec 17, 2024Dec 17, 2024

• semgrep-rules

  Public
  Semgrep queries developed by Trail of Bits.

  Go

  •

  GNU Affero General Public License v3.0

  •35•361•7•2•Updated Dec 17, 2024Dec 17, 2024

• codeql-queries

  Public
  CodeQL queries developed by Trail of Bits

  CodeQL

  •

  GNU Affero General Public License v3.0

  •3•81•5•4•Updated Dec 17, 2024Dec 17, 2024

• build-wrap

  Public
  Help protect against malicious build scripts

  Rust

  •

  GNU Affero General Public License v3.0

  •3•7•0•0•Updated Dec 16, 2024Dec 16, 2024

• publications

  Public
  Publications from Trail of Bits

  conference-presentationsacademic-paperssecurity-reviews

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •184•1.5k•4•1•Updated Dec 16, 2024Dec 16, 2024

• vscode-weaudit

  Public
  Create code bookmarks and code highlights with a click.

  TypeScript

  •

  GNU General Public License v3.0

  •17•182•12•3•Updated Dec 16, 2024Dec 16, 2024

• sigstore-rekor-types

  Public
  Python models for Rekor's API types

  Python

  •

  Apache License 2.0

  •1•4•0•0•Updated Dec 16, 2024Dec 16, 2024

• necessist

  Public
  A mutation-based tool for finding bugs in tests

  testingrust

  Rust

  •

  GNU Affero General Public License v3.0

  •10•110•16•0•Updated Dec 16, 2024Dec 16, 2024

• v4-core

  Public
  🦄 🦄 🦄 🦄 Core smart contracts of Uniswap v4

  Solidity

  •

  Other

  •1k•1•0•2•Updated Dec 14, 2024Dec 14, 2024

• polytracker

  Public
  An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

  dataflow-analysistaint-trackingllvm+ 2instrumentationtaint-analysis

  C++

  •

  Apache License 2.0

  •45•538•45•1•Updated Dec 13, 2024Dec 13, 2024

• pip-plugin-pep740

  Public
  An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails.

  Python

  •

  Apache License 2.0

  •0•0•1•1•Updated Dec 13, 2024Dec 13, 2024

• it-depends

  Public
  A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.

  dependency-analysisdependency-graphhacktoberfest+ 4vulnerability-scannersbomhacktoberfest2021sbom-generator

  Python

  •

  GNU Lesser General Public License v3.0

  •20•334•24•0•Updated Dec 12, 2024Dec 12, 2024

• test-fuzz

  Public
  To make fuzzing Rust easy

  Rust

  •

  GNU Affero General Public License v3.0

  •16•163•11•2•Updated Dec 12, 2024Dec 12, 2024

• ruzzy

  Public
  A coverage-guided fuzzer for pure Ruby code and Ruby C extensions

  rubyruby-gemruby-extension+ 3fuzzingfuzzerlibfuzzer

  Ruby

  •

  GNU Affero General Public License v3.0

  •6•91•10•0•Updated Dec 11, 2024Dec 11, 2024

• cookiecutter-python

  Public
  A cookiecutter template for a best-practices Python project

  Python

  •

  Apache License 2.0

  •5•13•0•0•Updated Dec 10, 2024Dec 10, 2024

• gh-action-adapt-sigstore-pypi

  Public
  Python

  •

  Apache License 2.0

  •0•0•0•0•Updated Dec 10, 2024Dec 10, 2024

• instafix-llvm

  Public
  LLVM fork for INSTAFIX

  LLVM

  •

  Other

  •12k•0•0•9•Updated Dec 9, 2024Dec 9, 2024

• cargo-line-test

  Public
  Run tests by the lines they exercise

  Rust

  •0•0•1•0•Updated Dec 9, 2024Dec 9, 2024

• deepstate

  Public
  A unit test-like interface for fuzzing and symbolic execution

  unit-testingsymbolic-executionproperty-based-testing+ 3fuzzingtesting-toolstesting-framework

  Python

  •

  Apache License 2.0

  •99•824•82•8•Updated Dec 8, 2024Dec 8, 2024

• osquery

  Public
  SQL powered operating system instrumentation, monitoring, and analytics.

  C++

  •

  Other

  •2.5k•37•0•2•Updated Dec 4, 2024Dec 4, 2024