Explore @trailofbits Open Source projects

Trail of Bits (@trailofbits)

trailofbits

Stars
49,676
Global Org. Rank 320 (Top 0.2 %)
Registered about 12 years ago
Most used languages

C++
22.7 %

Python
19.0 %

Rust
14.1 %

Ruby
8.0 %

C
8.0 %

Shell
6.1 %

Go
3.7 %

CSS
1.8 %

Dockerfile
1.8 %

JavaScript
1.8 %

Haskell
1.2 %

Swift
1.2 %

Java
1.2 %

HTML
1.2 %

Others 7.8 %
Location 🇺🇸 United States
Country Total Rank 147
Country Ranking

Jinja 1

CodeQL 6

MLIR 8

LLVM 21

Dockerfile
36

C++
83

C
115

Python
126

HCL 162

Rust
207

CMake 243

Haskell
302

Swift
332

Shell
335

PowerShell
406

Nix
485

Verilog 570

Go
717

Ruby
761

C#
797

HTML
1,332

CSS
1,471

Java
1,770

Makefile 2,234

TypeScript
2,552

JavaScript
3,454

algo

Set up a personal VPN in the cloud

manticore

Symbolic execution tool

graphtage

A semantic diff utility and library for tree-like files such as JSON, JSON5, XML, HTML, YAML, and CSV.

ctf

CTF Field Guide

publications

Publications from Trail of Bits

deepstate

A unit test-like interface for fuzzing and symbolic execution

pe-parse

Principled, lightweight C/C++ PE parser

eth-security-toolbox

A Docker container preconfigured with all of the Trail of Bits Ethereum security tools.

maat

Open-source symbolic execution framework: https://maat.re

twa

A tiny web auditor with strong opinions.

winchecksec

Checksec, but for Windows: static detection of security mitigations in executables

polytracker

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

cb-multios

DARPA Challenges Sets for Linux, Windows, and macOS

multiplier

Code auditing productivity multiplier.

onesixtyone

Fast SNMP Scanner

fickling

A Python pickling decompiler and static analyzer

vast

VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.

tubertc

Peer-to-Peer Video Chat for Corporate LANs

krf

A kernelspace syscall interceptor and randomized faulter

polyfile

A pure Python cleanroom implementation of libmagic, with instrumented parsing from Kaitai struct and an interactive hex viewer

it-depends

A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.

sinter

A user-mode application authorization system for MacOS written in Swift

SecureEnclaveCrypto

Demonstration library for using the Secure Enclave on iOS

protofuzz

Google Protocol Buffers message generator

osquery-extensions

osquery extensions by Trail of Bits

dylint

A tool for running Rust lints from dynamic libraries

RpcInvestigator

Exploring RPC interfaces on Windows

constexpr-everything

Rewrite C++ code to automatically apply `constexpr` where possible

binjascripts

Scripts for Binary Ninja

audit-kubernetes

mishegos

A differential fuzzer for x86 decoders

semgrep-rules

Semgrep queries developed by Trail of Bits.

circomspect

A static analyzer and linter for the Circom zero-knowledge DSL

PrivacyRaven

Privacy Testing for Deep Learning

llvm-sanitizer-tutorial

An LLVM sanitizer tutorial

siderophile

Find the ideal fuzz targets in a Rust codebase

flying-sandbox-monster

Sandboxed, Rust-based, Windows Defender Client

not-going-anywhere

A set of vulnerable Golang programs

AppJailLauncher

CTF Challenge Framework for Windows 8 and above

BTIGhidra

Binary Type Inference Ghidra Plugin

uthenticode

A cross-platform library for verifying Authenticode signatures

zkdocs

Interactive documentation on zero-knowledge proof systems and related primitives.

sienna-locomotive

A user-friendly fuzzing and crash triage tool for Windows

Honeybee

An experimental high performance, fuzzing oriented Intel Processor Trace capture and analysis suite

ObjCGraphView

A graph view plugin for Binary Ninja to visualize Objective-C

pasta

Peter's Amazing Syntax Tree Analyzer

sqlite_wrapper

An easy-to-use, extensible and lightweight C++17 wrapper for SQLite

ebpfpub

ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.

ctf-challenges

binrec-tob

BinRec: Dynamic Binary Lifting and Recompilation

appjaillauncher-rs

AppJailLauncher in Rust

vscode-weaudit

Create code bookmarks and code highlights with a click.

test-fuzz

To make fuzzing Rust easy

on-edge

A library for detecting certain improper uses of the "Defer, Panic, and Recover" pattern in Go programs

ios-integrity-validator

Integrity validator for iOS devices

abi3audit

Scans Python packages for abi3 violations and inconsistencies

ebpfault

A BPF-based syscall fault injector

clang-cfi-showcase

Sample programs that illustrate how to use control flow integrity with the clang compiler

awesome-ml-security

blight

A framework for instrumenting build tools

ruzzy

A coverage-guided fuzzer for pure Ruby code and Ruby C extensions

ManticoreUI

The Manticore User Interface with plugins for Binary Ninja and Ghidra

bisc

Borrowed Instructions Synthetic Computation

manticore-examples

Example Manticore scripts

algo-ng

Experimental version of Algo built on Terraform

differ

Detecting Inconsistencies in Feature or Function Evaluations of Requirements

deceptiveidn

Use computer vision to determine if an IDN can be interpreted as something it's not

LeftoverLocalsRelease

The public release of LeftoverLocals code

necessist

A tool for finding bugs in tests

reverie

An efficient and generalized implementation of the IKOS-style KKW proof system (https://eprint.iacr.org/2018/475) for arbitrary rings.

Codex-Decompiler

testing-handbook

Trail of Bits Testing Handbook

magnifier

sixtyfour

How fast can we brute force a 64-bit comparison?

DomTreSat

Dominator Tree LLVM Pass to Test Satisfiability

HVCI-loldrivers-check

nyc-infosec

Mapping the NYC Infosec Community

cfg-showcase

Sample programs that illustrate how to use Control Flow Guard, VS2015's control flow integrity implementation

tsc_freq_khz

Linux kernel driver to export the TSC frequency via sysfs

rubysec

RubySec Field Guide

macroni

C and C++ compiler frontend using PASTA to parse code, and VAST to represent the code as MLIR.

indurative

Easily create authenticated data structures

http-security

Parse HTTP Security Headers

trailofphish

Phishing e-mail repository

KRFAnalysis

Collection of LLVM passes and triage tools for use with the KRF fuzzer

ebpf-verifier

Harness for the Linux kernel eBPF verifier

ml-file-formats

List of ML file formats

umberto

poststructural fuzzing

spf-query

Ruby SPF Parser

ebpf-common

Various utilities useful for developers writing BPF tools

clang-tidy-audit

Rewrite C/C++/Obj-C to Annotate Points of Interest

eatmynetwork

A small script for running programs with (minimal) network sandboxing

btfparse

A C++ library that parses debug information encoded in BTF format

anselm

Detect patterns of bad behavior in function calls

dmarc

Ruby DMARC Parser

linuxevents

A sample PoC for container-aware exec events for osquery

mpc-learning

Perform multi-party computation on machine learning applications

WinDbg-JS

go-mutexasserts

A small library that allows to check if Go mutexes are locked

screen

Measure branching along code paths