All

269 repositories

build-wrap
Public
Help protect against malicious build scripts
rust sandboxing build-scripts
rust sandboxing build-scripts
Rust
•
GNU Affero General Public License v3.0
•4•27•2•3•Updated Apr 25, 2026Apr 25, 2026
dylint
Public
Run Rust lints from dynamic libraries
rust linting
rust linting
Rust
•
Apache License 2.0
•50•573•46•8•Updated Apr 25, 2026Apr 25, 2026
necessist
Public
A mutation-based tool for finding bugs in tests
testing mutation
testing mutation
Rust
•
GNU Affero General Public License v3.0
•19•140•18•0•Updated Apr 25, 2026Apr 25, 2026
test-fuzz
Public
To make fuzzing Rust easy
testing rust fuzzing
testing rust fuzzing
Rust
•
GNU Affero General Public License v3.0
•26•203•7•1•Updated Apr 25, 2026Apr 25, 2026
cast_checks
Public
A procedural macro to check for invalid casts
rust casts
rust casts
Rust
•
Apache License 2.0
•4•10•0•0•Updated Apr 25, 2026Apr 25, 2026
gosentry
Public
Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.
go nautilus fuzzing
go nautilus fuzzing goleak libafl
Go
•
BSD 3-Clause "New" or "Revised" License
•19k•34•1•0•Updated Apr 25, 2026Apr 25, 2026
scribe
Public
Local transcription and speaker diarization with pyannote and parakeet
Python
•
MIT License
•3•26•0•3•Updated Apr 25, 2026Apr 25, 2026
cookiecutter-python
Public
A cookiecutter template for a best-practices Python project
Python
•
Apache License 2.0
•7•37•0•1•Updated Apr 25, 2026Apr 25, 2026
publications
Public
Publications from Trail of Bits
conference-presentations academic-papers security-reviews
conference-presentations academic-papers security-reviews
Python
•
Creative Commons Attribution Share Alike 4.0 International
•226•1.8k•0•4•Updated Apr 24, 2026Apr 24, 2026
sigstore-tuf-simple
Public
Go
•
Apache License 2.0
•0•0•0•3•Updated Apr 24, 2026Apr 24, 2026
signal-auditor
Public
Key Transparency Auditor for Signal
Rust
•
GNU Affero General Public License v3.0
•0•6•0•5•Updated Apr 24, 2026Apr 24, 2026
masm-decompiler
Public
Decompiler for the Miden assembly language
Rust
•
MIT License
•1•1•0•2•Updated Apr 24, 2026Apr 24, 2026
pajaMAS
Public
Multi-agent system (MAS) hijacking demos
multi-agent-systems ai-agents ai-security
multi-agent-systems ai-agents ai-security
Python
•
Apache License 2.0
•5•45•3•15•Updated Apr 24, 2026Apr 24, 2026
cargo-unmaintained
Public
Find unmaintained packages in Rust projects
rust unmaintained package-management
rust unmaintained package-management
Rust
•
GNU Affero General Public License v3.0
•13•88•11•1•Updated Apr 24, 2026Apr 24, 2026
claude-code-devcontainer
Public
Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.
Shell
•
Apache License 2.0
•78•764•2•0•Updated Apr 24, 2026Apr 24, 2026
anchor-coverage
Public
A wrapper around `anchor test` for computing test coverage
testing coverage anchor
testing coverage anchor solana
Rust
•
GNU Affero General Public License v3.0
•6•15•4•1•Updated Apr 24, 2026Apr 24, 2026
skills-curated
Public
Curated, community-vetted Claude Code plugin marketplace
Python
•
Creative Commons Attribution Share Alike 4.0 International
•18•376•1•4•Updated Apr 24, 2026Apr 24, 2026
skills
Public
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
agent-skills
agent-skills
Python
•
Creative Commons Attribution Share Alike 4.0 International
•415•4.8k•15•13•Updated Apr 24, 2026Apr 24, 2026
trailmark
Public
Build and query a graph database representation of source code
C
•
Apache License 2.0
•8•200•3•2•Updated Apr 24, 2026Apr 24, 2026
codeql-queries
Public
CodeQL queries developed by Trail of Bits
CodeQL
•
GNU Affero General Public License v3.0
•9•160•5•4•Updated Apr 23, 2026Apr 23, 2026
vscode-weaudit
Public
Create code bookmarks and code highlights with a click.
TypeScript
•
GNU General Public License v3.0
•31•232•15•16•Updated Apr 23, 2026Apr 23, 2026
pylock-attestations
Public
CLI tool to add attestation identities to `pylock.toml` files
Python
•
Apache License 2.0
•1•6•4•0•Updated Apr 23, 2026Apr 23, 2026
gh-action-adapt-sigstore-pypi
Public
Python
•
Apache License 2.0
•0•1•0•1•Updated Apr 23, 2026Apr 23, 2026
mquire
Public
Zero-dependency Linux memory forensics PoC — leverages kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.
linux rust sql
linux rust sql kernel memory forensics
Rust
•
Apache License 2.0
•6•144•3•3•Updated Apr 23, 2026Apr 23, 2026
mishegos
Public
A differential fuzzer for x86 decoders
x86 fuzzing hacktoberfest
x86 fuzzing hacktoberfest
C++
•
Apache License 2.0
•30•269•9•1•Updated Apr 23, 2026Apr 23, 2026
pip-plugin-pep740
Public
An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails.
Python
•
Apache License 2.0
•1•5•1•0•Updated Apr 23, 2026Apr 23, 2026
fickling
Public
A Python pickling decompiler and static analyzer
python security machine-learning
python security machine-learning
Python
•
GNU Lesser General Public License v3.0
•68•620•9•14•Updated Apr 23, 2026Apr 23, 2026
it-depends
Public
A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.
dependency-analysis dependency-graph hacktoberfest
dependency-analysis dependency-graph hacktoberfest vulnerability-scanner sbom hacktoberfest2021 sbom-generator sbom-tool
Python
•
GNU Lesser General Public License v3.0
•23•390•8•2•Updated Apr 23, 2026Apr 23, 2026
rfc3161-client
Public
An Opinionated Python RFC3161 Client
rfc3161 timestamp-protocol
rfc3161 timestamp-protocol
Rust
•
Apache License 2.0
•4•6•2•0•Updated Apr 23, 2026Apr 23, 2026
mewt
Public
mewt is a mutation testing framework
C
•
GNU Affero General Public License v3.0
•0•27•0•5•Updated Apr 23, 2026Apr 23, 2026

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Trail of Bits

All

All

269 repositories

build-wrap

dylint

necessist

test-fuzz

cast_checks

gosentry

scribe

cookiecutter-python

publications

sigstore-tuf-simple

signal-auditor

masm-decompiler

pajaMAS

cargo-unmaintained

claude-code-devcontainer

anchor-coverage

skills-curated

skills

trailmark

codeql-queries

vscode-weaudit

pylock-attestations

gh-action-adapt-sigstore-pypi

mquire

mishegos

pip-plugin-pep740

fickling

it-depends

rfc3161-client

mewt

All

All

Repositories list

269 repositories