Skip to content
@trailofbits

Trail of Bits

More code: binary lifters @lifting-bits, blockchain @crytic, forks @trail-of-forks
The Trail of Bits logo

Since 2012, Trail of Bits has helped secure some of the world's most targeted organizations and devices.

We combine high-end security research with a real-world attacker mentality to reduce risk and fortify code.

Some of our work:


Pinned Loading

  1. publications publications Public

    Publications from Trail of Bits

    Python 1.6k 188

  2. algo algo Public

    Set up a personal VPN in the cloud

    Jinja 29.3k 2.3k

  3. fickling fickling Public

    A Python pickling decompiler and static analyzer

    Python 489 53

  4. vscode-weaudit vscode-weaudit Public

    Create code bookmarks and code highlights with a click.

    TypeScript 195 19

  5. semgrep-rules semgrep-rules Public

    Semgrep queries developed by Trail of Bits.

    Go 395 40

  6. codeql-queries codeql-queries Public

    CodeQL queries developed by Trail of Bits

    CodeQL 91 4

Repositories

Showing 10 of 207 repositories
  • instafix-llvm Public Forked from llvm/llvm-project

    LLVM fork for INSTAFIX

    trailofbits/instafix-llvm’s past year of commit activity
    LLVM 1 13,393 0 12 Updated Apr 7, 2025
  • vast Public

    VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.

    trailofbits/vast’s past year of commit activity
    C++ 414 Apache-2.0 26 169 (19 issues need help) 3 Updated Apr 7, 2025
  • publications Public

    Publications from Trail of Bits

    trailofbits/publications’s past year of commit activity
    Python 1,550 CC-BY-SA-4.0 188 5 2 Updated Apr 7, 2025
  • sigstore-rekor-types Public

    Python models for Rekor's API types

    trailofbits/sigstore-rekor-types’s past year of commit activity
    Python 6 Apache-2.0 1 0 0 Updated Apr 7, 2025
  • cargo-unmaintained Public

    Find unmaintained packages in Rust projects

    trailofbits/cargo-unmaintained’s past year of commit activity
    Rust 73 AGPL-3.0 9 7 0 Updated Apr 7, 2025
  • vspells-ai-agent Public

    AI agent designed to communicate with the VAST parser dialect converter

    trailofbits/vspells-ai-agent’s past year of commit activity
    Python 1 Apache-2.0 0 0 0 Updated Apr 7, 2025
  • necessist Public

    A mutation-based tool for finding bugs in tests

    trailofbits/necessist’s past year of commit activity
    Rust 116 AGPL-3.0 14 17 2 Updated Apr 7, 2025
  • cargo-line-test Public

    Run tests by the lines they exercise

    trailofbits/cargo-line-test’s past year of commit activity
    Rust 6 3 2 0 Updated Apr 7, 2025
  • dylint Public

    Run Rust lints from dynamic libraries

    trailofbits/dylint’s past year of commit activity
    Rust 440 Apache-2.0 35 26 (1 issue needs help) 12 Updated Apr 7, 2025
  • pypi-attestations Public

    A library to convert between Sigstore Bundles and PEP 740 Attestation objects

    trailofbits/pypi-attestations’s past year of commit activity
    Python 5 Apache-2.0 4 4 0 Updated Apr 7, 2025