Repositories list

• muton

  Public

  trailofbits/muton’s past year of commit activity
  Mutation testing framework for TON smart contracts

  C

  •

  GNU Affero General Public License v3.0

  •00 forks•55 stars•00 issues•00 pull requests•Updated Apr 20, 2026Apr 20, 2026

• mewt

  Public

  trailofbits/mewt’s past year of commit activity
  mewt is a mutation testing framework

  C

  •

  GNU Affero General Public License v3.0

  •00 forks•2424 stars•00 issues•22 pull requests•Updated Apr 20, 2026Apr 20, 2026

• multiplier

  Public

  trailofbits/multiplier’s past year of commit activity
  Code auditing productivity multiplier.

  analysisauditclang+ 1

  analysisauditclangmlir

  C++

  •

  Apache License 2.0

  •3434 forks•471471 stars•115115 issues•22 pull requests•Updated Apr 20, 2026Apr 20, 2026

• cargo-unmaintained

  Public

  trailofbits/cargo-unmaintained’s past year of commit activity
  Find unmaintained packages in Rust projects

  rustunmaintainedpackage-management

  rustunmaintainedpackage-management

  Rust

  •

  GNU Affero General Public License v3.0

  •1313 forks•8888 stars•1111 issues•00 pull requests•Updated Apr 20, 2026Apr 20, 2026

• check-up-to-dateness

  Public

  trailofbits/check-up-to-dateness’s past year of commit activity
  Check whether a merge group PR is up to date relative to its base branch

  github-actionmerge-queue

  github-actionmerge-queue

  Shell

  •11 fork•11 star•00 issues•00 pull requests•Updated Apr 20, 2026Apr 20, 2026

• zkdocs

  Public

  trailofbits/zkdocs’s past year of commit activity
  Interactive documentation on zero-knowledge proof systems and related primitives.

  cryptographyzero-knowledge

  cryptographyzero-knowledge

  HTML

  •

  Creative Commons Attribution 4.0 International

  •4848 forks•177177 stars•66 issues•99 pull requests•Updated Apr 20, 2026Apr 20, 2026

• pip-plugin-pep740

  Public

  trailofbits/pip-plugin-pep740’s past year of commit activity
  An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails.

  Python

  •

  Apache License 2.0

  •11 fork•55 stars•11 issue•00 pull requests•Updated Apr 20, 2026Apr 20, 2026

• rfc8785.py

  Public

  trailofbits/rfc8785.py’s past year of commit activity
  A pure-Python implementation of RFC8785 (JSON Canonicalization Scheme)

  pythonserializationjson+ 2

  pythonserializationjsoncryptographycanonicalization

  Python

  •

  Apache License 2.0

  •33 forks•99 stars•00 issues•11 pull request•Updated Apr 20, 2026Apr 20, 2026

• test-fuzz

  Public

  trailofbits/test-fuzz’s past year of commit activity
  To make fuzzing Rust easy

  testingrustfuzzing

  testingrustfuzzing

  Rust

  •

  GNU Affero General Public License v3.0

  •2626 forks•201201 stars•77 issues•11 pull request•Updated Apr 20, 2026Apr 20, 2026

• dylint

  Public

  trailofbits/dylint’s past year of commit activity
  Run Rust lints from dynamic libraries

  rustlinting

  rustlinting

  Rust

  •

  Apache License 2.0

  •5050 forks•570570 stars•4646 issues•99 pull requests•Updated Apr 20, 2026Apr 20, 2026

• it-depends

  Public

  trailofbits/it-depends’s past year of commit activity
  A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.

  dependency-analysisdependency-graphhacktoberfest+ 5

  dependency-analysisdependency-graphhacktoberfestvulnerability-scannersbomhacktoberfest2021sbom-generatorsbom-tool

  Python

  •

  GNU Lesser General Public License v3.0

  •2323 forks•390390 stars•88 issues•22 pull requests•Updated Apr 20, 2026Apr 20, 2026

• buttercup

  Public

  trailofbits/buttercup’s past year of commit activity
  Buttercup finds and patches software vulnerabilities

  Python

  •

  GNU Affero General Public License v3.0

  •177177 forks•1.6k1.6k stars•5252 issues•77 pull requests•Updated Apr 20, 2026Apr 20, 2026

• testing-handbook

  Public

  trailofbits/testing-handbook’s past year of commit activity
  Trail of Bits Testing Handbook - appsec.guide

  Rust

  •

  Creative Commons Attribution 4.0 International

  •1818 forks•112112 stars•1818 issues•66 pull requests•Updated Apr 20, 2026Apr 20, 2026

• gosentry

  Public

  trailofbits/gosentry’s past year of commit activity
  Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.

  gonautilusfuzzing+ 2

  gonautilusfuzzinggoleaklibafl

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •19k19k forks•3232 stars•11 issue•00 pull requests•Updated Apr 20, 2026Apr 20, 2026

• pajaMAS

  Public

  trailofbits/pajaMAS’s past year of commit activity
  Multi-agent system (MAS) hijacking demos

  multi-agent-systemsai-agentsai-security

  multi-agent-systemsai-agentsai-security

  Python

  •

  Apache License 2.0

  •55 forks•4545 stars•33 issues•1414 pull requests•Updated Apr 19, 2026Apr 19, 2026

• cast_checks

  Public

  trailofbits/cast_checks’s past year of commit activity
  A procedural macro to check for invalid casts

  rustcasts

  rustcasts

  Rust

  •

  Apache License 2.0

  •44 forks•1010 stars•00 issues•00 pull requests•Updated Apr 18, 2026Apr 18, 2026

• necessist

  Public

  trailofbits/necessist’s past year of commit activity
  A mutation-based tool for finding bugs in tests

  testingmutation

  testingmutation

  Rust

  •

  GNU Affero General Public License v3.0

  •1919 forks•140140 stars•1818 issues•00 pull requests•Updated Apr 18, 2026Apr 18, 2026

• scribe

  Public

  trailofbits/scribe’s past year of commit activity
  Local transcription and speaker diarization with pyannote and parakeet

  Python

  •

  MIT License

  •33 forks•2626 stars•00 issues•33 pull requests•Updated Apr 18, 2026Apr 18, 2026

• pylock-attestations

  Public

  trailofbits/pylock-attestations’s past year of commit activity
  CLI tool to add attestation identities to `pylock.toml` files

  Python

  •

  Apache License 2.0

  •11 fork•66 stars•44 issues•00 pull requests•Updated Apr 17, 2026Apr 17, 2026

• cookiecutter-python

  Public

  trailofbits/cookiecutter-python’s past year of commit activity
  A cookiecutter template for a best-practices Python project

  Python

  •

  Apache License 2.0

  •77 forks•3737 stars•00 issues•22 pull requests•Updated Apr 17, 2026Apr 17, 2026

• codeql-queries

  Public

  trailofbits/codeql-queries’s past year of commit activity
  CodeQL queries developed by Trail of Bits

  CodeQL

  •

  GNU Affero General Public License v3.0

  •99 forks•159159 stars•55 issues•33 pull requests•Updated Apr 17, 2026Apr 17, 2026

• qt-multiplier

  Public

  trailofbits/qt-multiplier’s past year of commit activity
  Graphical user interface for Multiplier

  C++

  •

  GNU Affero General Public License v3.0

  •22 forks•44 stars•5454 issues•00 pull requests•Updated Apr 17, 2026Apr 17, 2026

• skills

  Public

  trailofbits/skills’s past year of commit activity
  Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

  agent-skills

  agent-skills

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •403403 forks•4.7k4.7k stars•1717 issues•1010 pull requests•Updated Apr 17, 2026Apr 17, 2026

• tlslib.py

  Public

  trailofbits/tlslib.py’s past year of commit activity
  MVP for updated PEP 543 proposal

  Python

  •

  Apache License 2.0

  •11 fork•1414 stars•22 issues•11 pull request•Updated Apr 17, 2026Apr 17, 2026

• rfc3161-client

  Public
  An Opinionated Python RFC3161 Client

  rfc3161timestamp-protocol

  rfc3161timestamp-protocol

  Rust

  •

  Apache License 2.0

  •44 forks•66 stars•22 issues•00 pull requests•Updated Apr 17, 2026Apr 17, 2026

• quantum-zk-proof-poc

  Public

  trailofbits/quantum-zk-proof-poc’s past year of commit activity
  Proof-of-concept code for beating Google's ZK proof of quantum cryptanalysis

  Python

  •00 forks•44 stars•00 issues•00 pull requests•Updated Apr 17, 2026Apr 17, 2026

• slither-mcp

  Public

  trailofbits/slither-mcp’s past year of commit activity
  MCP server for Slither static analysis of Solidity smart contracts

  pythonsecuritymcp+ 6

  pythonsecuritymcpstatic-analysisethereumsmart-contractssolidityslithermodel-context-protocol

  Python

  •

  GNU Affero General Public License v3.0

  •88 forks•8787 stars•00 issues•1212 pull requests•Updated Apr 17, 2026Apr 17, 2026

• vscode-weaudit

  Public

  trailofbits/vscode-weaudit’s past year of commit activity
  Create code bookmarks and code highlights with a click.

  TypeScript

  •

  GNU General Public License v3.0

  •3131 forks•232232 stars•1515 issues•1616 pull requests•Updated Apr 16, 2026Apr 16, 2026

• gh-action-adapt-sigstore-pypi

  Public

  trailofbits/gh-action-adapt-sigstore-pypi’s past year of commit activity
  Python

  •

  Apache License 2.0

  •00 forks•11 star•00 issues•11 pull request•Updated Apr 16, 2026Apr 16, 2026

• CoBRA

  Public

  trailofbits/CoBRA’s past year of commit activity
  Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation

  obfuscationcompilercpp+ 9

  obfuscationcompilercppllvmstatic-analysisreverse-engineeringdeobfuscationz3binary-analysisboolean-algebra+ 2

  C++

  •

  Apache License 2.0

  •1010 forks•238238 stars•33 issues•22 pull requests•Updated Apr 16, 2026Apr 16, 2026