Trail of Bits

graphtage

A semantic diff utility and library for tree-like files such as JSON, JSON5, XML, HTML, YAML, and CSV.

maat

Open-source symbolic execution framework: https://maat.re

fickling

A Python pickling decompiler and static analyzer

polyfile

A pure Python cleanroom implementation of libmagic, with instrumented parsing from Kaitai struct and an interactive hex viewer

it-depends

A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.

uthenticode

A cross-platform library for verifying Authenticode signatures

BTIGhidra

Binary Type Inference Ghidra Plugin

blight

A framework for instrumenting build tools

ManticoreUI

The Manticore User Interface with plugins for Binary Ninja and Ghidra

differ

Detecting Inconsistencies in Feature or Function Evaluations of Requirements

nyc-infosec

Mapping the NYC Infosec Community

eatmynetwork

A small script for running programs with (minimal) network sandboxing

linuxevents

A sample PoC for container-aware exec events for osquery

circuitous

binary->LLVM->circuits

ml-file-formats

List of ML file formats

weggli-native

C API bindlings for Google's weggli

binary_type_inference

cookiecutter-python

A cookiecutter template for a best-practices Python project

cast_checks

A procedural macro to check for invalid casts

sv_circuit

Compile processor circuit to ZK-statement

empirehacking.nyc

Empire Hacking NYC Meetup

sholva

An experimental Tiny86 decoder and verifier for SIEVE

homebrew-tools

Homebrew tap for Trail of Bits tooling

.github

BTIEval

Tooling for evaluating BTI soundness and precision on a dataset of binaries.

cwe_checker

debloater-eval

Dataset and resources for evaluating software debloating tools.

lms-rust

vast-llvm-test-suite

LLVM Test suite extended to generate reports for VAST MLIR dialects

rfc8785.py

A pure-Python implementation of RFC8785 (JSON Canonicalization Scheme)