Skip to content

@trailofbits Trail of Bits

Change the repository type filter

All

    Repositories list

    269 repositories

    • rfc3161-client

      Public
      An Opinionated Python RFC3161 Client
      rfc3161timestamp-protocol
      rfc3161timestamp-protocol
      Rust
      •
      Apache License 2.0
      •4•6•2•1•Updated Apr 21, 2026Apr 21, 2026

    • pylock-attestations

      Public
      CLI tool to add attestation identities to `pylock.toml` files
      Python
      •
      Apache License 2.0
      •1•6•4•0•Updated Apr 20, 2026Apr 20, 2026

    • gh-action-adapt-sigstore-pypi

      Public
      Python
      •
      Apache License 2.0
      •0•1•0•1•Updated Apr 20, 2026Apr 20, 2026

    • zkdocs

      Public
      Interactive documentation on zero-knowledge proof systems and related primitives.
      cryptographyzero-knowledge
      cryptographyzero-knowledge
      HTML
      •
      Creative Commons Attribution 4.0 International
      •48•177•6•9•Updated Apr 20, 2026Apr 20, 2026

    • muton

      Public
      Mutation testing framework for TON smart contracts
      C
      •
      GNU Affero General Public License v3.0
      •0•5•0•0•Updated Apr 20, 2026Apr 20, 2026

    • mquire

      Public
      Zero-dependency Linux memory forensics PoC — leverages kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.
      linuxrustsql
      linuxrustsqlkernelmemoryforensics
      Rust
      •
      Apache License 2.0
      •6•143•3•0•Updated Apr 20, 2026Apr 20, 2026

    • mewt

      Public
      mewt is a mutation testing framework
      C
      •
      GNU Affero General Public License v3.0
      •0•24•0•2•Updated Apr 20, 2026Apr 20, 2026

    • multiplier

      Public
      Code auditing productivity multiplier.
      analysisauditclang
      analysisauditclangmlir
      C++
      •
      Apache License 2.0
      •34•471•115•2•Updated Apr 20, 2026Apr 20, 2026

    • cargo-unmaintained

      Public
      Find unmaintained packages in Rust projects
      rustunmaintainedpackage-management
      rustunmaintainedpackage-management
      Rust
      •
      GNU Affero General Public License v3.0
      •13•88•11•0•Updated Apr 20, 2026Apr 20, 2026

    • check-up-to-dateness

      Public
      Check whether a merge group PR is up to date relative to its base branch
      github-actionmerge-queue
      github-actionmerge-queue
      Shell
      •1•1•0•0•Updated Apr 20, 2026Apr 20, 2026

    • pip-plugin-pep740

      Public
      An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails.
      Python
      •
      Apache License 2.0
      •1•5•1•0•Updated Apr 20, 2026Apr 20, 2026

    • rfc8785.py

      Public
      A pure-Python implementation of RFC8785 (JSON Canonicalization Scheme)
      pythonserializationjson
      pythonserializationjsoncryptographycanonicalization
      Python
      •
      Apache License 2.0
      •3•9•0•1•Updated Apr 20, 2026Apr 20, 2026

    • test-fuzz

      Public
      To make fuzzing Rust easy
      testingrustfuzzing
      testingrustfuzzing
      Rust
      •
      GNU Affero General Public License v3.0
      •26•201•7•1•Updated Apr 20, 2026Apr 20, 2026

    • dylint

      Public
      Run Rust lints from dynamic libraries
      rustlinting
      rustlinting
      Rust
      •
      Apache License 2.0
      •50•571•46•9•Updated Apr 20, 2026Apr 20, 2026

    • it-depends

      Public
      A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.
      dependency-analysisdependency-graphhacktoberfest
      dependency-analysisdependency-graphhacktoberfestvulnerability-scannersbomhacktoberfest2021sbom-generatorsbom-tool
      Python
      •
      GNU Lesser General Public License v3.0
      •23•390•8•2•Updated Apr 20, 2026Apr 20, 2026

    • buttercup

      Public
      Buttercup finds and patches software vulnerabilities
      Python
      •
      GNU Affero General Public License v3.0
      •177•1.6k•52•7•Updated Apr 20, 2026Apr 20, 2026

    • testing-handbook

      Public
      Trail of Bits Testing Handbook - appsec.guide
      Rust
      •
      Creative Commons Attribution 4.0 International
      •18•112•18•6•Updated Apr 20, 2026Apr 20, 2026

    • gosentry

      Public
      Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.
      gonautilusfuzzing
      gonautilusfuzzinggoleaklibafl
      Go
      •
      BSD 3-Clause "New" or "Revised" License
      •19k•32•1•0•Updated Apr 20, 2026Apr 20, 2026

    • pajaMAS

      Public
      Multi-agent system (MAS) hijacking demos
      multi-agent-systemsai-agentsai-security
      multi-agent-systemsai-agentsai-security
      Python
      •
      Apache License 2.0
      •5•45•3•14•Updated Apr 19, 2026Apr 19, 2026

    • cast_checks

      Public
      A procedural macro to check for invalid casts
      rustcasts
      rustcasts
      Rust
      •
      Apache License 2.0
      •4•10•0•0•Updated Apr 18, 2026Apr 18, 2026

    • necessist

      Public
      A mutation-based tool for finding bugs in tests
      testingmutation
      testingmutation
      Rust
      •
      GNU Affero General Public License v3.0
      •19•140•18•0•Updated Apr 18, 2026Apr 18, 2026

    • scribe

      Public
      Local transcription and speaker diarization with pyannote and parakeet
      Python
      •
      MIT License
      •3•26•0•3•Updated Apr 18, 2026Apr 18, 2026

    • cookiecutter-python

      Public
      A cookiecutter template for a best-practices Python project
      Python
      •
      Apache License 2.0
      •7•37•0•2•Updated Apr 17, 2026Apr 17, 2026

    • codeql-queries

      Public
      CodeQL queries developed by Trail of Bits
      CodeQL
      •
      GNU Affero General Public License v3.0
      •9•159•5•3•Updated Apr 17, 2026Apr 17, 2026

    • qt-multiplier

      Public
      Graphical user interface for Multiplier
      C++
      •
      GNU Affero General Public License v3.0
      •2•4•54•0•Updated Apr 17, 2026Apr 17, 2026

    • skills

      Public
      Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
      agent-skills
      agent-skills
      Python
      •
      Creative Commons Attribution Share Alike 4.0 International
      •404•4.7k•17•10•Updated Apr 17, 2026Apr 17, 2026

    • tlslib.py

      Public
      MVP for updated PEP 543 proposal
      Python
      •
      Apache License 2.0
      •1•14•2•1•Updated Apr 17, 2026Apr 17, 2026

    • quantum-zk-proof-poc

      Public
      Proof-of-concept code for beating Google's ZK proof of quantum cryptanalysis
      Python
      •0•4•0•0•Updated Apr 17, 2026Apr 17, 2026

    • slither-mcp

      Public
      MCP server for Slither static analysis of Solidity smart contracts
      pythonsecuritymcp
      pythonsecuritymcpstatic-analysisethereumsmart-contractssolidityslithermodel-context-protocol
      Python
      •
      GNU Affero General Public License v3.0
      •8•87•0•12•Updated Apr 17, 2026Apr 17, 2026

    • vscode-weaudit

      Public
      Create code bookmarks and code highlights with a click.
      TypeScript
      •
      GNU General Public License v3.0
      •31•232•15•16•Updated Apr 16, 2026Apr 16, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.