Repositories list

• necessist

  Public
  A mutation-based tool for finding bugs in tests

  testingmutation

  Rust

  •

  GNU Affero General Public License v3.0

  •15•116•17•2•Updated Apr 15, 2025Apr 15, 2025

• build-wrap

  Public
  Help protect against malicious build scripts

  rustsandboxingbuild-scripts

  Rust

  •

  GNU Affero General Public License v3.0

  •3•13•1•0•Updated Apr 14, 2025Apr 14, 2025

• instafix-llvm

  Public
  LLVM fork for INSTAFIX

  LLVM

  •

  Other

  •13k•2•0•13•Updated Apr 14, 2025Apr 14, 2025

• cargo-unmaintained

  Public
  Find unmaintained packages in Rust projects

  rustunmaintained

  Rust

  •

  GNU Affero General Public License v3.0

  •11•74•7•1•Updated Apr 14, 2025Apr 14, 2025

• anchor-coverage

  Public
  A wrapper around `anchor test` for computing test coverage

  testingcoverageanchor+ 1solana

  Rust

  •

  GNU Affero General Public License v3.0

  •1•2•2•1•Updated Apr 14, 2025Apr 14, 2025

• sigstore-rekor-types

  Public
  Python models for Rekor's API types

  Python

  •

  Apache License 2.0

  •1•6•0•3•Updated Apr 14, 2025Apr 14, 2025

• codeql-queries

  Public
  CodeQL queries developed by Trail of Bits

  CodeQL

  •

  GNU Affero General Public License v3.0

  •4•95•5•4•Updated Apr 14, 2025Apr 14, 2025

• cargo-line-test

  Public
  Run tests by the lines they exercise

  testingrust

  Rust

  •3•6•2•0•Updated Apr 14, 2025Apr 14, 2025

• siderophile

  Public
  Find the ideal fuzz targets in a Rust codebase

  fuzzingprogram-analysissecurity-testing+ 1rust

  Rust

  •

  MIT License

  •12•213•12•11•Updated Apr 14, 2025Apr 14, 2025

• dylint

  Public
  Run Rust lints from dynamic libraries

  rustlinting

  Rust

  •

  Apache License 2.0

  •36•445•27•12•Updated Apr 14, 2025Apr 14, 2025

• rfc3161-client

  Public
  An Opinionated Python RFC3161 Client

  rfc3161timestamp-protocol

  Rust

  •

  Apache License 2.0

  •2•2•2•1•Updated Apr 14, 2025Apr 14, 2025

• test-fuzz

  Public
  To make fuzzing Rust easy

  testingrustfuzzing

  Rust

  •

  GNU Affero General Public License v3.0

  •24•175•13•3•Updated Apr 12, 2025Apr 12, 2025

• publications

  Public
  Publications from Trail of Bits

  conference-presentationsacademic-paperssecurity-reviews

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •189•1.6k•4•2•Updated Apr 11, 2025Apr 11, 2025

• vspells-ai-agent

  Public
  AI agent designed to communicate with the VAST parser dialect converter

  Python

  •

  Apache License 2.0

  •0•1•0•0•Updated Apr 11, 2025Apr 11, 2025

• vast

  Public
  VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.

  ccppclang+ 5compilersprogram-analysisintermediate-representationcompiler-frontendmlir

  C++

  •

  Apache License 2.0

  •29•414•168•3•Updated Apr 11, 2025Apr 11, 2025

• testing-handbook

  Public
  Trail of Bits Testing Handbook

  Rust

  •

  Creative Commons Attribution 4.0 International

  •12•72•13•6•Updated Apr 9, 2025Apr 9, 2025

• polytracker

  Public
  An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

  dataflow-analysistaint-trackingllvm+ 2instrumentationtaint-analysis

  C++

  •

  Apache License 2.0

  •45•560•45•1•Updated Apr 8, 2025Apr 8, 2025

• empirehacking.nyc

  Public
  Empire Hacking NYC Meetup

  security-meetupnyc

  CSS

  •8•6•0•0•Updated Apr 8, 2025Apr 8, 2025

• nyc-infosec

  Public
  Mapping the NYC Infosec Community

  meetupuniversitycalendar+ 2nycconference

  CSS

  •20•52•0•0•Updated Apr 8, 2025Apr 8, 2025

• sigstore-apis

  Public
  Rust clients for the Fulcio and Rekor APIs

  sigstore

  Rust

  •

  Apache License 2.0

  •1•6•0•0•Updated Apr 8, 2025Apr 8, 2025

• pypi-attestations

  Public
  A library to convert between Sigstore Bundles and PEP 740 Attestation objects

  Python

  •

  Apache License 2.0

  •4•7•5•0•Updated Apr 7, 2025Apr 7, 2025

• datasig

  Public
  Dataset fingerprinting for AIBOM

  Python

  •

  GNU Affero General Public License v3.0

  •0•1•2•1•Updated Apr 4, 2025Apr 4, 2025

• opensearch-benchmark

  Public
  Artifacts related to benchmarking, including documentation, benchmarking harness source code and benchmarking results.

  Python

  •

  Apache License 2.0

  •0•3•8•7•Updated Apr 4, 2025Apr 4, 2025

• cookiecutter-python

  Public
  A cookiecutter template for a best-practices Python project

  Python

  •

  Apache License 2.0

  •5•16•0•1•Updated Apr 2, 2025Apr 2, 2025

• modelcontextprotocol-servers

  Public
  Model Context Protocol Servers

  JavaScript

  •

  MIT License

  •3.9k•3•0•0•Updated Apr 1, 2025Apr 1, 2025

• are-we-pep740-yet

  Public
  Are we PEP 740 yet?

  HTML

  •

  BSD 2-Clause "Simplified" License

  •6•9•0•0•Updated Apr 1, 2025Apr 1, 2025

• emit-lsp

  Public
  The LLVM Project is a collection of modular and reusable compiler and toolchain technologies.

  LLVM

  •

  Other

  •13k•1•0•2•Updated Mar 28, 2025Mar 28, 2025

• vscode-sarif-explorer

  Public
  SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results

  static-analysisvscode-extensionsarif

  TypeScript

  •

  GNU General Public License v3.0

  •3•23•5•2•Updated Mar 28, 2025Mar 28, 2025

• semgrep-rules

  Public
  Semgrep queries developed by Trail of Bits.

  Go

  •

  GNU Affero General Public License v3.0

  •40•397•7•2•Updated Mar 28, 2025Mar 28, 2025

• eth-security-toolbox

  Public
  A Docker container preconfigured with all of the Trail of Bits Ethereum security tools.

  Dockerfile

  •

  GNU Affero General Public License v3.0

  •109•692•1•0•Updated Mar 26, 2025Mar 26, 2025