Repositories list

• pylock-attestations

  Public

  trailofbits/pylock-attestations’s past year of commit activity
  CLI tool to add attestation identities to `pylock.toml` files

  Python

  •

  Apache License 2.0

  •1•5•4•0•Updated Mar 29, 2026Mar 29, 2026

• rfc3161-client

  Public

  trailofbits/rfc3161-client’s past year of commit activity
  An Opinionated Python RFC3161 Client

  rfc3161timestamp-protocol

  rfc3161timestamp-protocol

  Rust

  •

  Apache License 2.0

  •4•6•2•0•Updated Mar 29, 2026Mar 29, 2026

• vendetect

  Public

  trailofbits/vendetect’s past year of commit activity
  A tool to automatically detect copy+pasted and vendored code between repositories

  program-analysisplagiarism-detectionsbom+ 1

  program-analysisplagiarism-detectionsbomsbom-tool

  Python

  •

  GNU Affero General Public License v3.0

  •6•76•2•6•Updated Mar 29, 2026Mar 29, 2026

• algo

  Public

  trailofbits/algo’s past year of commit activity
  Set up a personal VPN in the cloud

  securityansibleencryption+ 8

  securityansibleencryptionipsecvpnvpn-servervpn-clientikev2strongswanssh-tunnel+ 1

  Python

  •

  GNU Affero General Public License v3.0

  •2.4k•30k•65•6•Updated Mar 29, 2026Mar 29, 2026

• buttercup

  Public

  trailofbits/buttercup’s past year of commit activity
  Buttercup finds and patches software vulnerabilities

  Python

  •

  GNU Affero General Public License v3.0

  •170•1.5k•52•8•Updated Mar 29, 2026Mar 29, 2026

• dropkit

  Public

  trailofbits/dropkit’s past year of commit activity
  A CLI tool for managing DigitalOcean droplets with automated setup, SSH configuration, and lifecycle management.

  Python

  •

  Apache License 2.0

  •12•95•2•6•Updated Mar 29, 2026Mar 29, 2026

• slither-mcp

  Public

  trailofbits/slither-mcp’s past year of commit activity
  MCP server for Slither static analysis of Solidity smart contracts

  pythonsecuritymcp+ 6

  pythonsecuritymcpstatic-analysisethereumsmart-contractssolidityslithermodel-context-protocol

  Python

  •

  GNU Affero General Public License v3.0

  •8•81•0•6•Updated Mar 29, 2026Mar 29, 2026

• datasig

  Public

  trailofbits/datasig’s past year of commit activity
  Dataset fingerprinting for AIBOM

  Python

  •

  GNU Affero General Public License v3.0

  •0•15•0•6•Updated Mar 29, 2026Mar 29, 2026

• dylint

  Public

  trailofbits/dylint’s past year of commit activity
  Run Rust lints from dynamic libraries

  rustlinting

  rustlinting

  Rust

  •

  Apache License 2.0

  •50•553•46•10•Updated Mar 29, 2026Mar 29, 2026

• wycheproof-php

  Public

  trailofbits/wycheproof-php’s past year of commit activity
  Use the Wycheproof test vectors in PHP software

  PHP

  •

  Apache License 2.0

  •0•1•0•0•Updated Mar 29, 2026Mar 29, 2026

• pajaMAS

  Public

  trailofbits/pajaMAS’s past year of commit activity
  Multi-agent system (MAS) hijacking demos

  multi-agent-systemsai-agentsai-security

  multi-agent-systemsai-agentsai-security

  Python

  •

  Apache License 2.0

  •3•44•3•9•Updated Mar 29, 2026Mar 29, 2026

• CoBRA

  Public

  trailofbits/CoBRA’s past year of commit activity
  Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation

  obfuscationcompilercpp+ 9

  obfuscationcompilercppllvmstatic-analysisreverse-engineeringdeobfuscationz3binary-analysisboolean-algebra+ 2

  C++

  •

  Apache License 2.0

  •7•180•2•0•Updated Mar 29, 2026Mar 29, 2026

• build-wrap

  Public

  trailofbits/build-wrap’s past year of commit activity
  Help protect against malicious build scripts

  rustsandboxingbuild-scripts

  rustsandboxingbuild-scripts

  Rust

  •

  GNU Affero General Public License v3.0

  •4•27•1•0•Updated Mar 28, 2026Mar 28, 2026

• cast_checks

  Public

  trailofbits/cast_checks’s past year of commit activity
  A procedural macro to check for invalid casts

  rustcasts

  rustcasts

  Rust

  •

  Apache License 2.0

  •3•10•0•0•Updated Mar 28, 2026Mar 28, 2026

• mquire

  Public

  trailofbits/mquire’s past year of commit activity
  Zero-dependency Linux memory forensics PoC — leverages kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.

  linuxrustsql+ 3

  linuxrustsqlkernelmemoryforensics

  Rust

  •

  Apache License 2.0

  •5•121•2•1•Updated Mar 28, 2026Mar 28, 2026

• anchor-coverage

  Public

  trailofbits/anchor-coverage’s past year of commit activity
  A wrapper around `anchor test` for computing test coverage

  testingcoverageanchor+ 1

  testingcoverageanchorsolana

  Rust

  •

  GNU Affero General Public License v3.0

  •5•14•4•2•Updated Mar 28, 2026Mar 28, 2026

• gosentry

  Public

  trailofbits/gosentry’s past year of commit activity
  Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.

  gonautilusfuzzing+ 2

  gonautilusfuzzinggoleaklibafl

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •19k•25•1•0•Updated Mar 28, 2026Mar 28, 2026

• aifirst-insecure-agent-labs

  Public

  trailofbits/aifirst-insecure-agent-labs’s past year of commit activity
  Python

  •2•5•0•6•Updated Mar 27, 2026Mar 27, 2026

• cookiecutter-python

  Public

  trailofbits/cookiecutter-python’s past year of commit activity
  A cookiecutter template for a best-practices Python project

  Python

  •

  Apache License 2.0

  •7•35•0•1•Updated Mar 27, 2026Mar 27, 2026

• masm-lsp

  Public

  trailofbits/masm-lsp’s past year of commit activity
  An LSP server for the Miden assembly language

  Rust

  •

  MIT License

  •3•4•1•0•Updated Mar 27, 2026Mar 27, 2026

• masm-lean

  Public

  trailofbits/masm-lean’s past year of commit activity
  Automatic translation of Miden assembly to Lean

  Lean

  •

  MIT License

  •0•1•0•2•Updated Mar 27, 2026Mar 27, 2026

• skills

  Public

  trailofbits/skills’s past year of commit activity
  Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

  agent-skills

  agent-skills

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •356•4.1k•13•12•Updated Mar 27, 2026Mar 27, 2026

• masm-decompiler

  Public

  trailofbits/masm-decompiler’s past year of commit activity
  Decompiler for the Miden assembly language

  Rust

  •

  MIT License

  •0•0•0•0•Updated Mar 27, 2026Mar 27, 2026

• testing-handbook

  Public

  trailofbits/testing-handbook’s past year of commit activity
  Trail of Bits Testing Handbook - appsec.guide

  Rust

  •

  Creative Commons Attribution 4.0 International

  •18•101•18•4•Updated Mar 27, 2026Mar 27, 2026

• skills-curated

  Public

  trailofbits/skills-curated’s past year of commit activity
  Curated, community-vetted Claude Code plugin marketplace

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •13•304•0•3•Updated Mar 27, 2026Mar 27, 2026

• monorepo-code-scanning-action

  Public

  trailofbits/monorepo-code-scanning-action’s past year of commit activity
  Focus SAST scans (with CodeQL) on just the changed parts of your monorepo, split up as you define

  JavaScript

  •

  MIT License

  •4•0•0•2•Updated Mar 27, 2026Mar 27, 2026

• fickling

  Public

  trailofbits/fickling’s past year of commit activity
  A Python pickling decompiler and static analyzer

  pythonsecuritymachine-learning

  pythonsecuritymachine-learning

  Python

  •

  GNU Lesser General Public License v3.0

  •69•615•9•9•Updated Mar 26, 2026Mar 26, 2026

• vscode-weaudit

  Public

  trailofbits/vscode-weaudit’s past year of commit activity
  Create code bookmarks and code highlights with a click.

  TypeScript

  •

  GNU General Public License v3.0

  •30•231•15•15•Updated Mar 26, 2026Mar 26, 2026

• blight

  Public

  trailofbits/blight’s past year of commit activity
  A framework for instrumenting build tools

  instrumentationbuild-toolbuild-system+ 2

  instrumentationbuild-toolbuild-systemhacktoberfestcompiler-wrapper

  Python

  •

  Apache License 2.0

  •7•90•20•8•Updated Mar 26, 2026Mar 26, 2026

• tlslib.py

  Public

  trailofbits/tlslib.py’s past year of commit activity
  MVP for updated PEP 543 proposal

  Python

  •

  Apache License 2.0

  •1•14•2•2•Updated Mar 26, 2026Mar 26, 2026