Trail of Bits

All

199 repositories

pypi-attestations
Public
A library to convert between Sigstore Bundles and PEP 740 Attestation objects
Python
•
Apache License 2.0
•1•4•3•0•Updated Dec 4, 2024Dec 4, 2024
semgrep-rules
Public
Semgrep queries developed by Trail of Bits.
Go
•
GNU Affero General Public License v3.0
•33•334•7•2•Updated Dec 4, 2024Dec 4, 2024
osquery
Public
SQL powered operating system instrumentation, monitoring, and analytics.
C++
•
Other
•2.5k•37•0•2•Updated Dec 4, 2024Dec 4, 2024
necessist
Public
A mutation-based tool for finding bugs in tests
testing rust
Rust
•
GNU Affero General Public License v3.0
•10•110•16•1•Updated Dec 4, 2024Dec 4, 2024
instafix-llvm
Public
LLVM fork for INSTAFIX
LLVM
•
Other
•12k•0•0•9•Updated Dec 4, 2024Dec 4, 2024
vscode-weaudit
Public
Create code bookmarks and code highlights with a click.
TypeScript
•
GNU General Public License v3.0
•17•179•11•4•Updated Dec 4, 2024Dec 4, 2024
rfc3161-client
Public
An Opinionated Python RFC3161 Client
rfc3161 timestamp-protocol
Rust
•
Apache License 2.0
•0•2•1•0•Updated Dec 4, 2024Dec 4, 2024
publications
Public
Publications from Trail of Bits
conference-presentations academic-papers security-reviews
Python
•
Creative Commons Attribution Share Alike 4.0 International
•184•1.5k•4•1•Updated Dec 3, 2024Dec 3, 2024
polytracker
Public
An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
dataflow-analysis taint-tracking llvm instrumentation taint-analysis
C++
•
Apache License 2.0
•45•535•45•1•Updated Dec 2, 2024Dec 2, 2024
are-we-pep740-yet
Public
Are we PEP 740 yet?
HTML
•
BSD 2-Clause "Simplified" License
•3•6•0•0•Updated Dec 2, 2024Dec 2, 2024
testing-handbook
Public
Trail of Bits Testing Handbook
C++
•
Creative Commons Attribution 4.0 International
•7•58•12•6•Updated Dec 2, 2024Dec 2, 2024
dylint
Public
Run Rust lints from dynamic libraries
Rust
•
Apache License 2.0
•21•408•24•3•Updated Dec 2, 2024Dec 2, 2024
zkdocs
Public
Interactive documentation on zero-knowledge proof systems and related primitives.
cryptography zero-knowledge
HTML
•
Creative Commons Attribution 4.0 International
•25•148•5•4•Updated Dec 1, 2024Dec 1, 2024
blight
Public
A framework for instrumenting build tools
instrumentation build-tool build-system hacktoberfest compiler-wrapper
Python
•
Apache License 2.0
•7•84•20•2•Updated Dec 1, 2024Dec 1, 2024
cargo-unmaintained
Public
Find unmaintained packages in Rust projects
Rust
•
GNU Affero General Public License v3.0
•2•66•5•0•Updated Nov 30, 2024Nov 30, 2024
test-fuzz
Public
To make fuzzing Rust easy
Rust
•
GNU Affero General Public License v3.0
•16•162•11•3•Updated Nov 29, 2024Nov 29, 2024
pip-plugin-pep740
Public
An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails.
Python
•
Apache License 2.0
•0•0•1•1•Updated Nov 29, 2024Nov 29, 2024
vast
Public
VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.
c cpp clang compilers program-analysis intermediate-representation compiler-frontend mlir
C++
•
Apache License 2.0
•24•400•160•5•Updated Nov 28, 2024Nov 28, 2024
pe-parse
Public
Principled, lightweight C/C++ PE parser
pe-format portable-executable hacktoberfest
C++
•
MIT License
•157•806•16•1•Updated Nov 27, 2024Nov 27, 2024
vscode-sarif-explorer
Public
SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results
static-analysis vscode-extension sarif
TypeScript
•
GNU General Public License v3.0
•3•21•5•1•Updated Nov 26, 2024Nov 26, 2024
build-wrap
Public
Help protect against malicious build scripts
Rust
•
GNU Affero General Public License v3.0
•3•7•1•0•Updated Nov 26, 2024Nov 26, 2024
sigstore-rekor-types
Public
Python models for Rekor's API types
Python
•
Apache License 2.0
•1•4•0•0•Updated Nov 25, 2024Nov 25, 2024
cargo-line-test
Public
Run tests by the lines they exercise
Rust
•0•0•1•0•Updated Nov 25, 2024Nov 25, 2024
awesome-ml-security
Public
machine-learning
Creative Commons Attribution 4.0 International
•12•98•1•1•Updated Nov 21, 2024Nov 21, 2024
cookiecutter-python
Public
A cookiecutter template for a best-practices Python project
Python
•
Apache License 2.0
•5•13•0•0•Updated Nov 20, 2024Nov 20, 2024
codeql-queries
Public
CodeQL queries developed by Trail of Bits
CodeQL
•
GNU Affero General Public License v3.0
•3•76•4•4•Updated Nov 19, 2024Nov 19, 2024
CompChomper
Public
CompChomper is a framework for measuring how LLMs perform at code completion.
Python
•
Apache License 2.0
•0•15•0•0•Updated Nov 19, 2024Nov 19, 2024
krf
Public
A kernelspace syscall interceptor and randomized faulter
linux-kernel syscalls fault-injection hacktoberfest freebsd
C
•
GNU General Public License v3.0
•35•350•11•0•Updated Nov 18, 2024Nov 18, 2024
ctf
Public
CTF Field Guide
tutorials ctf security-ctf
C
•
Creative Commons Attribution Share Alike 4.0 International
•242•1.3k•12•2•Updated Nov 15, 2024Nov 15, 2024
windows-ctl
Public
Rust libraries and utilities for parsing Windows Certificate Trust Lists
cryptography authenticode rust
Rust
•
Apache License 2.0
•2•8•0•0•Updated Nov 11, 2024Nov 11, 2024