Ethereum Security Toolbox
This repository contains scripts to create a Docker container preinstalled and preconfigured with all of Trail of Bitsβ Ethereum security tools, including:
- Echidna property-based fuzz tester
- Etheno integration tool and differential tester
- Manticore symbolic analyzer and formal contract verifier
- Slither static analysis tool
- Rattle EVM lifter
- Not So Smart Contracts repository
Quickstart
Use our prebuilt Docker container to quickly install and run the toolkit:
docker pull trailofbits/eth-security-toolbox
docker run -it trailofbits/eth-security-toolbox
Alternatively, build the image from scratch:
$ git clone https://github.com/trailofbits/eth-security-toolbox.git
$ cd eth-security-toolbox
$ docker build -t eth-security-toolbox .
Usage
Simply start an instance of the Docker container:
docker run -it trailofbits/eth-security-toolbox
As many versions of Solidity as possible are installed. They can be individually executed as solc-v0.4.18 or solc-v0.5.2. By default, solc (with no version suffix) corresponds to the latest release. This can be changed using the solc-select script:
$ solc --version
solc, the solidity compiler commandline interface
Version: 0.5.2+commit.1df8f40c.Linux.g++
$ solc-select 0.4.24
$ solc --version
solc, the solidity compiler commandline interface
Version: 0.4.24+commit.e67f0147.Linux.g++
Getting Help
Feel free to stop by our Slack channel for help on using or extending this toolbox.
License
The Ethereum Security Toolbox is licensed and distributed under the AGPLv3 license. Contact us if youβre looking for an exception to the terms.