Repositories list

• algo

  Public

  trailofbits/algo’s past year of commit activity
  Set up a personal VPN in the cloud

  securityansibleencryption+ 8ipsecvpnvpn-servervpn-clientikev2strongswanssh-tunnel+ 1

  Python

  •

  GNU Affero General Public License v3.0

  •2.4k•30k•81•6•Updated Nov 24, 2025Nov 24, 2025

• dylint

  Public

  trailofbits/dylint’s past year of commit activity
  Run Rust lints from dynamic libraries

  rustlinting

  Rust

  •

  Apache License 2.0

  •48•516•43•11•Updated Nov 24, 2025Nov 24, 2025

• x509-limbo

  Public

  trailofbits/x509-limbo’s past year of commit activity
  A suite of testvectors for X.509 certificate path validation and tools for building them

  C++

  •

  Apache License 2.0

  •10•0•15•1•Updated Nov 24, 2025Nov 24, 2025

• anchor-coverage

  Public

  trailofbits/anchor-coverage’s past year of commit activity
  A wrapper around `anchor test` for computing test coverage

  testingcoverageanchor+ 1solana

  Rust

  •

  GNU Affero General Public License v3.0

  •3•12•3•3•Updated Nov 24, 2025Nov 24, 2025

• instafix-llvm

  Public

  trailofbits/instafix-llvm’s past year of commit activity
  LLVM fork for INSTAFIX

  LLVM

  •

  Other

  •15k•3•0•4•Updated Nov 24, 2025Nov 24, 2025

• rfc3161-client

  Public

  trailofbits/rfc3161-client’s past year of commit activity
  An Opinionated Python RFC3161 Client

  rfc3161timestamp-protocol

  Rust

  •

  Apache License 2.0

  •4•2•2•0•Updated Nov 24, 2025Nov 24, 2025

• check-up-to-dateness

  Public

  trailofbits/check-up-to-dateness’s past year of commit activity
  Check whether a merge group PR is up to date relative to its base branch

  github-actionmerge-queue

  Shell

  •1•0•0•1•Updated Nov 24, 2025Nov 24, 2025

• cargo-line-test

  Public

  trailofbits/cargo-line-test’s past year of commit activity
  Run tests by the lines they exercise

  testingrust

  Rust

  •3•7•2•3•Updated Nov 24, 2025Nov 24, 2025

• elaborate

  Public

  trailofbits/elaborate’s past year of commit activity
  Wrappers for standard library functions and types to produce more elaborate error messages

  rusterror-messages

  Rust

  •1•3•2•2•Updated Nov 24, 2025Nov 24, 2025

• vast

  Public

  trailofbits/vast’s past year of commit activity
  VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.

  ccppclang+ 5compilersprogram-analysisintermediate-representationcompiler-frontendmlir

  C++

  •

  Apache License 2.0

  •31•427•168•4•Updated Nov 24, 2025Nov 24, 2025

• necessist

  Public

  trailofbits/necessist’s past year of commit activity
  A mutation-based tool for finding bugs in tests

  testingmutation

  Rust

  •

  GNU Affero General Public License v3.0

  •18•126•17•6•Updated Nov 24, 2025Nov 24, 2025

• checksec-anywhere

  Public

  trailofbits/checksec-anywhere’s past year of commit activity
  Analyze binary security features instantly in your browser.

  Rust

  •

  Apache License 2.0

  •1•15•6•1•Updated Nov 24, 2025Nov 24, 2025

• testing-handbook

  Public
  Trail of Bits Testing Handbook

  Rust

  •

  Creative Commons Attribution 4.0 International

  •16•84•16•6•Updated Nov 22, 2025Nov 22, 2025

• pylock-attestations

  Public
  CLI tool to add attestation identities to `pylock.toml` files

  Python

  •

  Apache License 2.0

  •1•5•4•0•Updated Nov 21, 2025Nov 21, 2025

• go-panikint

  Public
  It's the Go compiler, but it panics on arithmetic and truncation issues.

  gogolangarithmetic+ 2fuzzingtruncation

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •18k•8•1•0•Updated Nov 21, 2025Nov 21, 2025

• pip-plugin-pep740

  Public
  An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails.

  Python

  •

  Apache License 2.0

  •0•3•1•0•Updated Nov 21, 2025Nov 21, 2025

• rfc8785.py

  Public
  A pure-Python implementation of RFC8785 (JSON Canonicalization Scheme)

  pythonserializationjson+ 2cryptographycanonicalization

  Python

  •

  Apache License 2.0

  •2•7•0•1•Updated Nov 21, 2025Nov 21, 2025

• fickling

  Public

  trailofbits/fickling’s past year of commit activity
  A Python pickling decompiler and static analyzer

  pythonsecuritymachine-learning

  Python

  •

  GNU Lesser General Public License v3.0

  •63•574•14•8•Updated Nov 21, 2025Nov 21, 2025

• polyfile

  Public

  trailofbits/polyfile’s past year of commit activity
  A pure Python cleanroom implementation of libmagic, with instrumented parsing from Kaitai struct and an interactive hex viewer

  pythonfile-format-detectionlibmagic+ 2file-formatspolyglots

  Python

  •

  Apache License 2.0

  •28•372•21•4•Updated Nov 21, 2025Nov 21, 2025

• buttercup

  Public
  Buttercup finds and patches software vulnerabilities

  Python

  •

  GNU Affero General Public License v3.0

  •146•1.4k•53•5•Updated Nov 21, 2025Nov 21, 2025

• pe-parse

  Public
  Principled, lightweight C/C++ PE parser

  pe-formatportable-executablehacktoberfest

  C++

  •

  MIT License

  •163•877•17•5•Updated Nov 21, 2025Nov 21, 2025

• siderophile

  Public
  Find the ideal fuzz targets in a Rust codebase

  rustfuzzingprogram-analysis+ 1security-testing

  Rust

  •

  MIT License

  •13•221•12•12•Updated Nov 21, 2025Nov 21, 2025

• manticore

  Public

  trailofbits/manticore’s past year of commit activity
  Symbolic execution tool

  pythontestingsecurity+ 8emulationethereumblockchainsymbolic-executionz3binary-analysisprogram-analysis+ 1

  Python

  •

  GNU Affero General Public License v3.0

  •487•3.8k•262•27•Updated Nov 21, 2025Nov 21, 2025

• graphtage

  Public

  trailofbits/graphtage’s past year of commit activity
  A semantic diff utility and library for tree-like files such as JSON, JSON5, XML, HTML, YAML, and CSV.

  pythondiffutility+ 5librarygraph-algorithmscommand-line-toolhacktoberfesthacktoberfest2021

  Python

  •

  GNU Lesser General Public License v3.0

  •51•2.4k•21•6•Updated Nov 20, 2025Nov 20, 2025

• blight

  Public
  A framework for instrumenting build tools

  instrumentationbuild-toolbuild-system+ 2hacktoberfestcompiler-wrapper

  Python

  •

  Apache License 2.0

  •7•90•20•6•Updated Nov 20, 2025Nov 20, 2025

• aifirst-insecure-agent-labs

  Public
  Python

  •0•1•0•5•Updated Nov 20, 2025Nov 20, 2025

• tlslib.py

  Public
  MVP for updated PEP 543 proposal

  Python

  •

  Apache License 2.0

  •1•13•2•1•Updated Nov 20, 2025Nov 20, 2025

• muton

  Public
  Mutation testing framework for TON smart contracts

  C

  •

  GNU Affero General Public License v3.0

  •0•1•0•0•Updated Nov 20, 2025Nov 20, 2025

• test-fuzz

  Public
  To make fuzzing Rust easy

  testingrustfuzzing

  Rust

  •

  GNU Affero General Public License v3.0

  •24•190•10•2•Updated Nov 20, 2025Nov 20, 2025

• sigstore-tuf-simple

  Public
  Go

  •

  Apache License 2.0

  •0•0•0•1•Updated Nov 20, 2025Nov 20, 2025