Trail of Bits

All

197 repositories

are-we-pep740-yet
Public
Are we PEP 740 yet?
HTML
•
BSD 2-Clause "Simplified" License
•3•1•0•0•Updated Nov 14, 2024Nov 14, 2024
test-fuzz
Public
To make fuzzing Rust easy
Rust
•
GNU Affero General Public License v3.0
•16•159•11•3•Updated Nov 14, 2024Nov 14, 2024
dylint
Public
Run Rust lints from dynamic libraries
Rust
•
Apache License 2.0
•21•401•22•3•Updated Nov 14, 2024Nov 14, 2024
necessist
Public
A mutation-based tool for finding bugs in tests
testing rust
Rust
•
GNU Affero General Public License v3.0
•10•110•15•1•Updated Nov 14, 2024Nov 14, 2024
codeql-queries
Public
CodeQL queries developed by Trail of Bits
CodeQL
•
GNU Affero General Public License v3.0
•3•75•1•4•Updated Nov 14, 2024Nov 14, 2024
vast
Public
VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.
c cpp clang compilers program-analysis intermediate-representation compiler-frontend mlir
C++
•
Apache License 2.0
•25•396•161•4•Updated Nov 14, 2024Nov 14, 2024
semgrep-rules
Public
Semgrep queries developed by Trail of Bits.
Go
•
GNU Affero General Public License v3.0
•32•330•7•2•Updated Nov 14, 2024Nov 14, 2024
sigstore-rekor-types
Public
Python models for Rekor's API types
Python
•
Apache License 2.0
•1•4•0•0•Updated Nov 14, 2024Nov 14, 2024
cargo-unmaintained
Public
Find unmaintained packages in Rust projects
Rust
•
GNU Affero General Public License v3.0
•2•66•4•0•Updated Nov 13, 2024Nov 13, 2024
pypi-attestations
Public
A library to convert between Sigstore Bundles and PEP 740 Attestation objects
Python
•
Apache License 2.0
•1•1•4•0•Updated Nov 12, 2024Nov 12, 2024
build-wrap
Public
Help protect against malicious build scripts
Rust
•
GNU Affero General Public License v3.0
•3•7•0•0•Updated Nov 12, 2024Nov 12, 2024
cargo-line-test
Public
Run tests by the lines they exercise
Rust
•0•0•1•0•Updated Nov 11, 2024Nov 11, 2024
windows-ctl
Public
Rust libraries and utilities for parsing Windows Certificate Trust Lists
cryptography authenticode rust
Rust
•
Apache License 2.0
•2•6•0•0•Updated Nov 11, 2024Nov 11, 2024
vscode-sarif-explorer
Public
SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results
static-analysis vscode-extension sarif
TypeScript
•
GNU General Public License v3.0
•3•21•6•1•Updated Nov 11, 2024Nov 11, 2024
rfc3161-client
Public
An Opinionated Python RFC3161 Client
rfc3161 timestamp-protocol
Rust
•
Apache License 2.0
•0•2•1•1•Updated Nov 11, 2024Nov 11, 2024
osquery
Public
SQL powered operating system instrumentation, monitoring, and analytics.
C++
•
Other
•2.5k•37•0•2•Updated Nov 10, 2024Nov 10, 2024
pip-plugin-pep740
Public
An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails.
Python
•
Apache License 2.0
•0•0•1•0•Updated Nov 8, 2024Nov 8, 2024
instafix-llvm
Public
LLVM fork for INSTAFIX
LLVM
•
Other
•12k•0•0•0•Updated Nov 2, 2024Nov 2, 2024
publications
Public
Publications from Trail of Bits
conference-presentations academic-papers security-reviews
Python
•
Creative Commons Attribution Share Alike 4.0 International
•184•1.5k•4•0•Updated Oct 31, 2024Oct 31, 2024
vscode-weaudit
Public
Create code bookmarks and code highlights with a click.
TypeScript
•
GNU General Public License v3.0
•17•175•11•4•Updated Oct 29, 2024Oct 29, 2024
empirehacking.nyc
Public
Empire Hacking NYC Meetup
security-meetup nyc
CSS
•8•5•0•1•Updated Oct 28, 2024Oct 28, 2024
nyc-infosec
Public
Mapping the NYC Infosec Community
meetup university calendar nyc conference
CSS
•22•50•0•1•Updated Oct 28, 2024Oct 28, 2024
uthenticode
Public
A cross-platform library for verifying Authenticode signatures
cryptography cpp authenticode hacktoberfest code-signing
C++
•
MIT License
•33•139•8•2•Updated Oct 28, 2024Oct 28, 2024
blight
Public
A framework for instrumenting build tools
instrumentation build-tool build-system hacktoberfest compiler-wrapper
Python
•
Apache License 2.0
•8•83•20•4•Updated Oct 23, 2024Oct 23, 2024
testing-handbook
Public
Trail of Bits Testing Handbook
C++
•
Creative Commons Attribution 4.0 International
•7•58•11•6•Updated Oct 22, 2024Oct 22, 2024
v4-core
Public
🦄 🦄 🦄 🦄 Core smart contracts of Uniswap v4
Solidity
•
Other
•968•0•0•2•Updated Oct 21, 2024Oct 21, 2024
fickling
Public
A Python pickling decompiler and static analyzer
machine-learning python security
Python
•
GNU Lesser General Public License v3.0
•48•418•12•6•Updated Oct 21, 2024Oct 21, 2024
mishegos
Public
A differential fuzzer for x86 decoders
x86 fuzzing hacktoberfest
C++
•
Apache License 2.0
•30•234•9•15•Updated Oct 21, 2024Oct 21, 2024
cast_checks
Public
A procedural macro to check for invalid casts
Rust
•
Apache License 2.0
•4•8•0•0•Updated Oct 17, 2024Oct 17, 2024
rfc8785.py
Public
A pure-Python implementation of RFC8785 (JSON Canonicalization Scheme)
python serialization json cryptography canonicalization
Python
•
Apache License 2.0
•2•1•0•0•Updated Oct 10, 2024Oct 10, 2024