Trail of Bits ORG

Publications from Trail of Bits

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

A Python pickling decompiler and static analyzer

Create code bookmarks and code highlights with a click.

Semgrep queries developed by Trail of Bits.

CodeQL queries developed by Trail of Bits

Set up a personal VPN in the cloud

Symbolic execution tool

A semantic diff utility and library for tree-like files such as JSON, JSON5, XML, HTML, YAML, and CSV.

Opinionated defaults, documentation, and workflows for Claude Code at Trail of Bits

Buttercup finds and patches software vulnerabilities

CTF Field Guide

image scaling attacks for multi-modal prompt injection

Principled, lightweight C/C++ PE parser

Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.

A unit test-like interface for fuzzing and symbolic execution

A Docker container preconfigured with all of the Trail of Bits Ethereum security tools.

Fast SNMP Scanner

Open-source symbolic execution framework: https://maat.re

Run Rust lints from dynamic libraries

Checksec, but for Windows: static detection of security mitigations in executables

A tiny web auditor with strong opinions.

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

DARPA Challenges Sets for Linux, Windows, and macOS

Code auditing productivity multiplier.

Curated, community-vetted Claude Code plugin marketplace

VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.

Build and query a graph database representation of source code

A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.

A pure Python cleanroom implementation of libmagic, with instrumented parsing from Kaitai struct and an interactive hex viewer

Exploring RPC interfaces on Windows

A kernelspace syscall interceptor and randomized faulter

Peer-to-Peer Video Chat for Corporate LANs

Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation

A user-mode application authorization system for MacOS written in Swift

Demonstration library for using the Secure Enclave on iOS

Google Protocol Buffers message generator

osquery extensions by Trail of Bits

A differential fuzzer for x86 decoders

A static analyzer and linter for the Circom zero-knowledge DSL

Scripts for Binary Ninja

k8s audit repo

Find the ideal fuzz targets in a Rust codebase

MCP security wrapper

Privacy Testing for Deep Learning

To make fuzzing Rust easy

An LLVM sanitizer tutorial

Interactive documentation on zero-knowledge proof systems and related primitives.

Sandboxed, Rust-based, Windows Defender Client

A set of vulnerable Golang programs

Binary Type Inference Ghidra Plugin

No description.

Zero-dependency Linux memory forensics, leveraging kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.

A cross-platform library for verifying Authenticode signatures

CTF Challenge Framework for Windows 8 and above

BinRec: Dynamic Binary Lifting and Recompilation

A mutation-based tool for finding bugs in tests

CTF Challenges

Peter's Amazing Syntax Tree Analyzer

An experimental high performance, fuzzing oriented Intel Processor Trace capture and analysis suite

A user-friendly fuzzing and crash triage tool for Windows

Deptective automatically determines the native dependencies required to run any arbitrary program or command.

Trail of Bits Testing Handbook - appsec.guide

A graph view plugin for Binary Ninja to visualize Objective-C

ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.

A CLI tool for managing DigitalOcean droplets with automated setup, SSH configuration, and lifecycle management.

A coverage-guided fuzzer for pure Ruby code and Ruby C extensions

An easy-to-use, extensible and lightweight C++17 wrapper for SQLite

Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.

A BPF-based syscall fault injector

AppJailLauncher in Rust

Sample programs that illustrate how to use control flow integrity with the clang compiler

Integrity validator for iOS devices

Buttercup CRS as submitted to the AIxCC Final Competition

A library for detecting certain improper uses of the "Defer, Panic, and Recover" pattern in Go programs

Find unmaintained packages in Rust projects

MCP server for Slither static analysis of Solidity smart contracts

A framework for instrumenting build tools

A tool to automatically detect copy+pasted and vendored code between repositories

No description.

The Manticore User Interface with plugins for Binary Ninja and Ghidra

The public release of LeftoverLocals code

Example Manticore scripts

List of ML file formats

Detecting Inconsistencies in Feature or Function Evaluations of Requirements

An efficient and generalized implementation of the IKOS-style KKW proof system (https://eprint.iacr.org/2018/475) for arbitrary rings.

Use computer vision to determine if an IDN can be interpreted as something it's not

No description.

Mapping the NYC Infosec Community

No description.

A small script for running programs with (minimal) network sandboxing

SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results

Sample programs that illustrate how to use Control Flow Guard, VS2015's control flow integrity implementation

mewt is a mutation testing framework

Multi-agent system (MAS) hijacking demos

It's the Go compiler, but it panics on arithmetic and truncation issues.

Security scanner for VS Code extensions

Easily create authenticated data structures

Local transcription and speaker diarization with pyannote and parakeet

SQL powered operating system instrumentation, monitoring, and analytics.

A cookiecutter template for a best-practices Python project

idac - IDA Pro command line tool for agents and humans

Phishing e-mail repository

Harness for the Linux kernel eBPF verifier

Various utilities useful for developers writing BPF tools

Malicious skills for testing skill scanners

Help protect against malicious build scripts

A C++ library that parses debug information encoded in BTF format

No description.

A small library that allows to check if Go mutexes are locked

Analyze binary security features instantly in your browser.

A sample PoC for container-aware exec events for osquery

No description.

AES Galois Extended Mode

CVE querying library and utility that uses a local store syncing directly to the National Vulnerability Database

Ruby DMARC Parser

FIPS-204 (ML-DSA) implementation in Go

No description.

No description.

No description.

CodeQL library and queries for iterator invalidation

Perform multi-party computation on machine learning applications

CompChomper is a framework for measuring how LLMs perform at code completion.

Rust crate to simplify Windows ACL operations

binary->LLVM->circuits

Dataset fingerprinting for AIBOM

A wrapper around `anchor test` for computing test coverage

A terminal-first approach to CodeQL multi-repo variant analysis

Proof-of-concept code for beating Google's ZK proof of quantum cryptanalysis

No description.

MVP for updated PEP 543 proposal

Leighton-Micali Hash-Based Signatures, for Go

A pure-Python implementation of RFC8785 (JSON Canonicalization Scheme)

Repository for demonstrating a GitHub Copilot Agent prompt injection exploit. See the associated blog post for details.

A Ruby interface to sslyze python utility.

Decree Fiat Shamir Library

FIPS-205 / SLH-DSA (Stateless Hash-Based Digital Signature Algorithm)

No description.

ManticoreUI support for Ghidra. This is primarily a prototype repository. See the main ManticoreUI repo (https://github.com/trailofbits/ManticoreUI) for a more complete implementation with Binary Ninja.

A procedural macro to check for invalid casts

Are we PEP 740 yet?

Android sandbox and IPC enumeration tools

Empire Hacking NYC Meetup

🦄 🦄 🦄 🦄 Core smart contracts of Uniswap v4

No description.

Run tests by the lines they exercise

Wrappers for standard library functions and types to produce more elaborate error messages

An Opinionated Python RFC3161 Client

Mutation testing framework for TON smart contracts

An experimental Tiny86 decoder and verifier for SIEVE

Key Transparency Auditor for Signal

Artifacts related to benchmarking, including documentation, benchmarking harness source code and benchmarking results.

CLI tool to add attestation identities to `pylock.toml` files

No description.

Detect bugs that have already been fixed in one codebase and determine whether the same issues apply to the target codebase.

No description.

Public releases of internal IT/Security tools

Painless JSON logging for Nginx.

Rust clients for the Fulcio and Rekor APIs

Compile processor circuit to ZK-statement

An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails.

An LSP server for the Miden assembly language

Graphical user interface for Multiplier

VS Code extension for the Miden assembly language

Isolated VM environment for running Claude Code and Codex

AI model compromise through malicious pickle files

VS Code extension malware samples

Dataset and resources for evaluating software debloating tools.

No description.

✨ Lightweight GitHub Actions workflow for AI vulnerability discovery (under development)

gcov for what lines of code agents read

No description.

GCC 11.1 fork with a hacked implementation of ASan container overflow checks on the containers-annotations branch

Use the Wycheproof test vectors in PHP software

A GitHub Action for running CodeQL binaries

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Check whether a merge group PR is up to date relative to its base branch

An ACME-based certificate authority, written in Go.

No description.

Miden Assembly grammar for tree-sitter

ElementMAC and ElementHash technical specification documents

Decompiler for the Miden assembly language

A tool for making restaurant reservations to maximize diners' preferences

Configurable Rust library that can be injected to processes to replace them with other processes based on input from environment variables or files.

Automatic translation of Miden assembly to Lean

Fast multi-platform (ELF/PE/MachO) binary checksec written in Rust.

An open-source background agents coding system

No description.

Binary transparency log to make tampered artifact distribution auditable

No description.

No description.

Patches for pq-code-package/mldsa-native

Main source code repository of the Tamarin prover for security protocol verification.

An implementation of JOSE standards (JWE, JWS, JWT) in Go

An interface to PKCS#11 devices that satisfies the crypto.Signer interface

Boulder's version of go-gorp/gorp

No description.

No description.

Formal verification of Scroll's zkvm-prover circuits in Lean 4 (Aeneas + Charon extraction, openvm-fv-derived RV32IM semantics)

Standardization of security reviews for datacenter products