Repositories list

• dylint

  Public
  Run Rust lints from dynamic libraries

  Rust

  •

  Apache License 2.0

  •21•404•23•5•Updated Nov 25, 2024Nov 25, 2024

• necessist

  Public
  A mutation-based tool for finding bugs in tests

  testingrust

  Rust

  •

  GNU Affero General Public License v3.0

  •10•110•15•7•Updated Nov 25, 2024Nov 25, 2024

• rfc3161-client

  Public
  An Opinionated Python RFC3161 Client

  rfc3161timestamp-protocol

  Rust

  •

  Apache License 2.0

  •0•2•1•3•Updated Nov 25, 2024Nov 25, 2024

• build-wrap

  Public
  Help protect against malicious build scripts

  Rust

  •

  GNU Affero General Public License v3.0

  •3•7•0•0•Updated Nov 25, 2024Nov 25, 2024

• sigstore-rekor-types

  Public
  Python models for Rekor's API types

  Python

  •

  Apache License 2.0

  •1•4•0•2•Updated Nov 25, 2024Nov 25, 2024

• cargo-unmaintained

  Public
  Find unmaintained packages in Rust projects

  Rust

  •

  GNU Affero General Public License v3.0

  •2•66•5•10•Updated Nov 23, 2024Nov 23, 2024

• publications

  Public
  Publications from Trail of Bits

  conference-presentationsacademic-paperssecurity-reviews

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •184•1.5k•4•4•Updated Nov 22, 2024Nov 22, 2024

• vast

  Public
  VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.

  ccppclang+ 5compilersprogram-analysisintermediate-representationcompiler-frontendmlir

  C++

  •

  Apache License 2.0

  •25•397•161•6•Updated Nov 22, 2024Nov 22, 2024

• zkdocs

  Public
  Interactive documentation on zero-knowledge proof systems and related primitives.

  cryptographyzero-knowledge

  HTML

  •

  Creative Commons Attribution 4.0 International

  •23•146•5•3•Updated Nov 22, 2024Nov 22, 2024

• pip-plugin-pep740

  Public
  An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails.

  Python

  •

  Apache License 2.0

  •0•0•1•1•Updated Nov 22, 2024Nov 22, 2024

• test-fuzz

  Public
  To make fuzzing Rust easy

  Rust

  •

  GNU Affero General Public License v3.0

  •16•162•11•3•Updated Nov 22, 2024Nov 22, 2024

• awesome-ml-security

  Public
  machine-learning

  Creative Commons Attribution 4.0 International

  •12•96•1•1•Updated Nov 21, 2024Nov 21, 2024

• polytracker

  Public
  An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

  dataflow-analysistaint-trackingllvm+ 2instrumentationtaint-analysis

  C++

  •

  Apache License 2.0

  •46•534•44•2•Updated Nov 20, 2024Nov 20, 2024

• pypi-attestations

  Public
  A library to convert between Sigstore Bundles and PEP 740 Attestation objects

  Python

  •

  Apache License 2.0

  •1•4•4•1•Updated Nov 20, 2024Nov 20, 2024

• cookiecutter-python

  Public
  A cookiecutter template for a best-practices Python project

  Python

  •

  Apache License 2.0

  •5•13•0•0•Updated Nov 20, 2024Nov 20, 2024

• are-we-pep740-yet

  Public
  Are we PEP 740 yet?

  HTML

  •

  BSD 2-Clause "Simplified" License

  •3•6•0•0•Updated Nov 20, 2024Nov 20, 2024

• codeql-queries

  Public
  CodeQL queries developed by Trail of Bits

  CodeQL

  •

  GNU Affero General Public License v3.0

  •3•76•4•4•Updated Nov 19, 2024Nov 19, 2024

• CompChomper

  Public
  CompChomper is a framework for measuring how LLMs perform at code completion.

  Python

  •

  Apache License 2.0

  •0•13•0•0•Updated Nov 19, 2024Nov 19, 2024

• krf

  Public
  A kernelspace syscall interceptor and randomized faulter

  linux-kernelsyscallsfault-injection+ 2hacktoberfestfreebsd

  C

  •

  GNU General Public License v3.0

  •35•350•11•0•Updated Nov 18, 2024Nov 18, 2024

• cargo-line-test

  Public
  Run tests by the lines they exercise

  Rust

  •0•0•1•0•Updated Nov 18, 2024Nov 18, 2024

• ctf

  Public
  CTF Field Guide

  tutorialsctfsecurity-ctf

  C

  •

  Creative Commons Attribution Share Alike 4.0 International

  •242•1.3k•12•2•Updated Nov 15, 2024Nov 15, 2024

• semgrep-rules

  Public
  Semgrep queries developed by Trail of Bits.

  Go

  •

  GNU Affero General Public License v3.0

  •32•331•7•1•Updated Nov 15, 2024Nov 15, 2024

• windows-ctl

  Public
  Rust libraries and utilities for parsing Windows Certificate Trust Lists

  cryptographyauthenticoderust

  Rust

  •

  Apache License 2.0

  •2•8•0•0•Updated Nov 11, 2024Nov 11, 2024

• vscode-sarif-explorer

  Public
  SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results

  static-analysisvscode-extensionsarif

  TypeScript

  •

  GNU General Public License v3.0

  •3•21•6•1•Updated Nov 11, 2024Nov 11, 2024

• osquery

  Public
  SQL powered operating system instrumentation, monitoring, and analytics.

  C++

  •

  Other

  •2.5k•37•0•2•Updated Nov 10, 2024Nov 10, 2024

• instafix-llvm

  Public
  LLVM fork for INSTAFIX

  LLVM

  •

  Other

  •12k•0•0•0•Updated Nov 2, 2024Nov 2, 2024

• vscode-weaudit

  Public
  Create code bookmarks and code highlights with a click.

  TypeScript

  •

  GNU General Public License v3.0

  •17•177•11•4•Updated Oct 29, 2024Oct 29, 2024

• empirehacking.nyc

  Public
  Empire Hacking NYC Meetup

  security-meetupnyc

  CSS

  •8•5•0•1•Updated Oct 28, 2024Oct 28, 2024

• nyc-infosec

  Public
  Mapping the NYC Infosec Community

  meetupuniversitycalendar+ 2nycconference

  CSS

  •22•50•0•1•Updated Oct 28, 2024Oct 28, 2024

• uthenticode

  Public
  A cross-platform library for verifying Authenticode signatures

  cryptographycppauthenticode+ 2hacktoberfestcode-signing

  C++

  •

  MIT License

  •33•139•8•2•Updated Oct 28, 2024Oct 28, 2024