All

267 repositories

skills
Public
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
agent-skills
agent-skills
Python
•
Creative Commons Attribution Share Alike 4.0 International
•436•5k•15•5•Updated May 5, 2026May 5, 2026
CoBRA
Public
Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation
obfuscation compiler cpp
obfuscation compiler cpp llvm static-analysis reverse-engineering deobfuscation z3 binary-analysis boolean-algebra
C++
•
Apache License 2.0
•12•263•3•1•Updated May 5, 2026May 5, 2026
gosentry
Public
Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.
go nautilus fuzzing
go nautilus fuzzing goleak libafl
Go
•
BSD 3-Clause "New" or "Revised" License
•19k•34•1•0•Updated May 5, 2026May 5, 2026
multiplier
Public
Code auditing productivity multiplier.
analysis audit clang
analysis audit clang mlir
C++
•
Apache License 2.0
•34•473•115•2•Updated May 5, 2026May 5, 2026
elementhash-spec
Public archive
ElementMAC and ElementHash technical specification documents
0•1•1•0•Updated May 5, 2026May 5, 2026
necessist
Public
A mutation-based tool for finding bugs in tests
testing mutation
testing mutation
Rust
•
GNU Affero General Public License v3.0
•19•140•18•0•Updated May 5, 2026May 5, 2026
anchor-coverage
Public
A wrapper around `anchor test` for computing test coverage
testing coverage anchor
testing coverage anchor solana
Rust
•
GNU Affero General Public License v3.0
•6•15•4•2•Updated May 5, 2026May 5, 2026
polyfile
Public
A pure Python cleanroom implementation of libmagic, with instrumented parsing from Kaitai struct and an interactive hex viewer
python file-format-detection libmagic
python file-format-detection libmagic file-formats polyglots
Python
•
Apache License 2.0
•30•385•18•4•Updated May 5, 2026May 5, 2026
rfc3161-client
Public
An Opinionated Python RFC3161 Client
rfc3161 timestamp-protocol
rfc3161 timestamp-protocol
Rust
•
Apache License 2.0
•4•7•2•0•Updated May 5, 2026May 5, 2026
cargo-unmaintained
Public
Find unmaintained packages in Rust projects
rust unmaintained package-management
rust unmaintained package-management
Rust
•
GNU Affero General Public License v3.0
•13•88•11•0•Updated May 4, 2026May 4, 2026
it-depends
Public
A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.
dependency-analysis dependency-graph hacktoberfest
dependency-analysis dependency-graph hacktoberfest vulnerability-scanner sbom hacktoberfest2021 sbom-generator sbom-tool
Python
•
GNU Lesser General Public License v3.0
•24•390•8•1•Updated May 4, 2026May 4, 2026
dylint
Public
Run Rust lints from dynamic libraries
rust linting
rust linting
Rust
•
Apache License 2.0
•50•577•46•8•Updated May 4, 2026May 4, 2026
pajaMAS
Public
Multi-agent system (MAS) hijacking demos
multi-agent-systems ai-agents ai-security
multi-agent-systems ai-agents ai-security
Python
•
Apache License 2.0
•6•45•3•15•Updated May 3, 2026May 3, 2026
pasta
Public
Peter's Amazing Syntax Tree Analyzer
compiler llvm static-analysis
compiler llvm static-analysis ast clang
C++
•
Apache License 2.0
•7•137•19•0•Updated May 3, 2026May 3, 2026
build-wrap
Public
Help protect against malicious build scripts
rust sandboxing build-scripts
rust sandboxing build-scripts
Rust
•
GNU Affero General Public License v3.0
•4•27•1•0•Updated May 2, 2026May 2, 2026
cast_checks
Public
A procedural macro to check for invalid casts
rust casts
rust casts
Rust
•
Apache License 2.0
•4•10•0•0•Updated May 2, 2026May 2, 2026
monorepo-code-scanning-action
Public
Focus SAST scans (with CodeQL) on just the changed parts of your monorepo, split up as you define
JavaScript
•
MIT License
•4•0•0•3•Updated May 2, 2026May 2, 2026
scribe
Public
Local transcription and speaker diarization with pyannote and parakeet
Python
•
MIT License
•3•27•0•3•Updated May 2, 2026May 2, 2026
gh-action-adapt-sigstore-pypi
Public
Python
•
Apache License 2.0
•0•1•0•1•Updated May 1, 2026May 1, 2026
vscode-sarif-explorer
Public
SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results
static-analysis vscode-extension sarif
static-analysis vscode-extension sarif
TypeScript
•
GNU General Public License v3.0
•9•50•6•9•Updated May 1, 2026May 1, 2026
are-we-pep740-yet
Public
Are we PEP 740 yet?
HTML
•
BSD 2-Clause "Simplified" License
•6•10•1•0•Updated May 1, 2026May 1, 2026
vscode-weaudit
Public
Create code bookmarks and code highlights with a click.
TypeScript
•
GNU General Public License v3.0
•31•232•15•15•Updated Apr 30, 2026Apr 30, 2026
OCP-Security-SAFE
Public
Standardization of security reviews for datacenter products
Python
•
MIT License
•37•0•0•0•Updated Apr 30, 2026Apr 30, 2026
publications
Public
Publications from Trail of Bits
conference-presentations academic-papers security-reviews
conference-presentations academic-papers security-reviews
Python
•
Creative Commons Attribution Share Alike 4.0 International
•227•1.8k•0•4•Updated Apr 30, 2026Apr 30, 2026
mquire
Public
Zero-dependency Linux memory forensics PoC — leverages kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.
linux rust sql
linux rust sql kernel memory forensics
Rust
•
Apache License 2.0
•7•153•3•1•Updated Apr 30, 2026Apr 30, 2026
mishegos
Public
A differential fuzzer for x86 decoders
x86 fuzzing hacktoberfest
x86 fuzzing hacktoberfest
C++
•
Apache License 2.0
•30•269•9•1•Updated Apr 30, 2026Apr 30, 2026
test-fuzz
Public
To make fuzzing Rust easy
testing rust fuzzing
testing rust fuzzing
Rust
•
GNU Affero General Public License v3.0
•26•203•7•1•Updated Apr 30, 2026Apr 30, 2026
testing-handbook
Public
Trail of Bits Testing Handbook - appsec.guide
Rust
•
Creative Commons Attribution 4.0 International
•20•117•19•6•Updated Apr 30, 2026Apr 30, 2026
go-panikint
Public
It's the Go compiler, but it panics on arithmetic and truncation issues.
go golang arithmetic
go golang arithmetic fuzzing truncation
Go
•
BSD 3-Clause "New" or "Revised" License
•19k•43•1•0•Updated Apr 29, 2026Apr 29, 2026
trailmark
Public
Build and query a graph database representation of source code
C
•
Apache License 2.0
•17•337•3•0•Updated Apr 29, 2026Apr 29, 2026

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Trail of Bits

All

All

267 repositories

skills

CoBRA

gosentry

multiplier

elementhash-spec

necessist

anchor-coverage

polyfile

rfc3161-client

cargo-unmaintained

it-depends

dylint

pajaMAS

pasta

build-wrap

cast_checks

monorepo-code-scanning-action

scribe

gh-action-adapt-sigstore-pypi

vscode-sarif-explorer

are-we-pep740-yet

vscode-weaudit

OCP-Security-SAFE

publications

mquire

mishegos

test-fuzz

testing-handbook

go-panikint

trailmark

All

All

Repositories list

267 repositories