Skip to content

@trailofbits Trail of Bits

Change the repository type filter

All

    Repositories list

    269 repositories

    • dropkit

      Public
      A CLI tool for managing DigitalOcean droplets with automated setup, SSH configuration, and lifecycle management.
      Python
      •
      Apache License 2.0
      •14•115•2•3•Updated Apr 28, 2026Apr 28, 2026

    • anchor-coverage

      Public
      A wrapper around `anchor test` for computing test coverage
      testingcoverageanchor
      testingcoverageanchorsolana
      Rust
      •
      GNU Affero General Public License v3.0
      •6•15•4•1•Updated Apr 28, 2026Apr 28, 2026

    • ruzzy

      Public
      A coverage-guided fuzzer for pure Ruby code and Ruby C extensions
      rubyruby-gemruby-extension
      rubyruby-gemruby-extensionfuzzingfuzzerlibfuzzer
      Ruby
      •
      GNU Affero General Public License v3.0
      •7•113•8•2•Updated Apr 28, 2026Apr 28, 2026

    • buttercup

      Public
      Buttercup finds and patches software vulnerabilities
      Python
      •
      GNU Affero General Public License v3.0
      •177•1.6k•52•6•Updated Apr 28, 2026Apr 28, 2026

    • masm-decompiler

      Public
      Decompiler for the Miden assembly language
      Rust
      •
      MIT License
      •1•1•0•1•Updated Apr 28, 2026Apr 28, 2026

    • it-depends

      Public
      A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.
      dependency-analysisdependency-graphhacktoberfest
      dependency-analysisdependency-graphhacktoberfestvulnerability-scannersbomhacktoberfest2021sbom-generatorsbom-tool
      Python
      •
      GNU Lesser General Public License v3.0
      •24•390•8•2•Updated Apr 28, 2026Apr 28, 2026

    • vscode-weaudit

      Public
      Create code bookmarks and code highlights with a click.
      TypeScript
      •
      GNU General Public License v3.0
      •31•232•15•15•Updated Apr 28, 2026Apr 28, 2026

    • gosentry

      Public
      Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.
      gonautilusfuzzing
      gonautilusfuzzinggoleaklibafl
      Go
      •
      BSD 3-Clause "New" or "Revised" License
      •19k•34•1•0•Updated Apr 28, 2026Apr 28, 2026

    • are-we-pep740-yet

      Public
      Are we PEP 740 yet?
      HTML
      •
      BSD 2-Clause "Simplified" License
      •6•10•1•0•Updated Apr 27, 2026Apr 27, 2026

    • skills

      Public
      Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
      agent-skills
      agent-skills
      Python
      •
      Creative Commons Attribution Share Alike 4.0 International
      •421•4.9k•15•14•Updated Apr 27, 2026Apr 27, 2026

    • necessist

      Public
      A mutation-based tool for finding bugs in tests
      testingmutation
      testingmutation
      Rust
      •
      GNU Affero General Public License v3.0
      •19•140•18•0•Updated Apr 27, 2026Apr 27, 2026

    • rfc3161-client

      Public
      An Opinionated Python RFC3161 Client
      rfc3161timestamp-protocol
      rfc3161timestamp-protocol
      Rust
      •
      Apache License 2.0
      •4•6•2•0•Updated Apr 27, 2026Apr 27, 2026

    • mquire

      Public
      Zero-dependency Linux memory forensics PoC — leverages kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.
      linuxrustsql
      linuxrustsqlkernelmemoryforensics
      Rust
      •
      Apache License 2.0
      •6•150•3•0•Updated Apr 26, 2026Apr 26, 2026

    • dylint

      Public
      Run Rust lints from dynamic libraries
      rustlinting
      rustlinting
      Rust
      •
      Apache License 2.0
      •50•573•46•8•Updated Apr 26, 2026Apr 26, 2026

    • build-wrap

      Public
      Help protect against malicious build scripts
      rustsandboxingbuild-scripts
      rustsandboxingbuild-scripts
      Rust
      •
      GNU Affero General Public License v3.0
      •4•27•2•0•Updated Apr 26, 2026Apr 26, 2026

    • pajaMAS

      Public
      Multi-agent system (MAS) hijacking demos
      multi-agent-systemsai-agentsai-security
      multi-agent-systemsai-agentsai-security
      Python
      •
      Apache License 2.0
      •6•45•3•15•Updated Apr 26, 2026Apr 26, 2026

    • masm-lsp

      Public
      An LSP server for the Miden assembly language
      Rust
      •
      MIT License
      •3•4•0•0•Updated Apr 26, 2026Apr 26, 2026

    • irene3

      Public
      C++
      •
      GNU Affero General Public License v3.0
      •2•11•1•6•Updated Apr 26, 2026Apr 26, 2026

    • test-fuzz

      Public
      To make fuzzing Rust easy
      testingrustfuzzing
      testingrustfuzzing
      Rust
      •
      GNU Affero General Public License v3.0
      •26•203•7•1•Updated Apr 25, 2026Apr 25, 2026

    • cast_checks

      Public
      A procedural macro to check for invalid casts
      rustcasts
      rustcasts
      Rust
      •
      Apache License 2.0
      •4•10•0•0•Updated Apr 25, 2026Apr 25, 2026

    • scribe

      Public
      Local transcription and speaker diarization with pyannote and parakeet
      Python
      •
      MIT License
      •3•27•0•3•Updated Apr 25, 2026Apr 25, 2026

    • cookiecutter-python

      Public
      A cookiecutter template for a best-practices Python project
      Python
      •
      Apache License 2.0
      •7•37•0•1•Updated Apr 25, 2026Apr 25, 2026

    • publications

      Public
      Publications from Trail of Bits
      conference-presentationsacademic-paperssecurity-reviews
      conference-presentationsacademic-paperssecurity-reviews
      Python
      •
      Creative Commons Attribution Share Alike 4.0 International
      •227•1.8k•0•4•Updated Apr 24, 2026Apr 24, 2026

    • sigstore-tuf-simple

      Public
      Go
      •
      Apache License 2.0
      •0•0•0•3•Updated Apr 24, 2026Apr 24, 2026

    • signal-auditor

      Public
      Key Transparency Auditor for Signal
      Rust
      •
      GNU Affero General Public License v3.0
      •0•6•0•5•Updated Apr 24, 2026Apr 24, 2026

    • cargo-unmaintained

      Public
      Find unmaintained packages in Rust projects
      rustunmaintainedpackage-management
      rustunmaintainedpackage-management
      Rust
      •
      GNU Affero General Public License v3.0
      •13•88•11•1•Updated Apr 24, 2026Apr 24, 2026

    • claude-code-devcontainer

      Public
      Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.
      Shell
      •
      Apache License 2.0
      •77•776•3•0•Updated Apr 24, 2026Apr 24, 2026

    • skills-curated

      Public
      Curated, community-vetted Claude Code plugin marketplace
      Python
      •
      Creative Commons Attribution Share Alike 4.0 International
      •18•377•1•4•Updated Apr 24, 2026Apr 24, 2026

    • trailmark

      Public
      Build and query a graph database representation of source code
      C
      •
      Apache License 2.0
      •14•269•4•4•Updated Apr 24, 2026Apr 24, 2026

    • codeql-queries

      Public
      CodeQL queries developed by Trail of Bits
      CodeQL
      •
      GNU Affero General Public License v3.0
      •9•160•5•4•Updated Apr 23, 2026Apr 23, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.