Trail of Bits

More code: binary lifters @lifting-bits, blockchain @crytic, forks @trail-of-forks

Verified
We've verified that the organization trailofbits controls the domains:
- www.trailofbits.com
- trailofbits.com
Learn more about verified organizations
Sponsor

Overview
Repositories
Projects
Packages
People
Sponsoring

README.md

Since 2012, Trail of Bits has helped secure some of the world's most targeted organizations and devices.

We combine high-end security research with a real-world attacker mentality to reduce risk and fortify code.

Some of our work:

@trailofbits — Our main GitHub organization
@crytic — Our blockchain security group
@lifting-bits — Our binary lifting research projects
@trail-of-forks — Development on others' projects

Pinned Loading

publications publications Public

Publications from Trail of Bits

Python 1.9k 237
skills skills Public

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

Python 6.7k 579
fickling fickling Public

A Python pickling decompiler and static analyzer

Python 663 73
vscode-weaudit vscode-weaudit Public

Create code bookmarks and code highlights with a click.

TypeScript 239 33
semgrep-rules semgrep-rules Public

Semgrep queries developed by Trail of Bits.

Go 517 59
codeql-queries codeql-queries Public

CodeQL queries developed by Trail of Bits

CodeQL 171 10

Repositories

Type Language

Select language

All Assembly C C# C++ CMake CodeQL CSS Dockerfile Go Haskell HCL HTML Java JavaScript Jupyter Notebook Lean LLVM Logos MLIR Nix PHP PowerShell Python Ruby Rust Shell Solidity Swift TypeScript Verilog

Sort

skills Public
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

trailofbits/skills's past year of commit activity

Python 6,679 CC-BY-SA-4.0 579 25 13 Updated Aug 20, 2026
necessist Public
A mutation-based tool for finding bugs in tests

trailofbits/necessist's past year of commit activity

Rust 145 AGPL-3.0 20 17 3 Updated Aug 20, 2026
dylint Public
Run Rust lints from dynamic libraries

trailofbits/dylint's past year of commit activity

Rust 639 Apache-2.0 56 49 (1 issue needs help) 15 Updated Aug 19, 2026
coop Public
Isolated VM environment for running Claude Code and Codex

trailofbits/coop's past year of commit activity

Rust 21 Apache-2.0 0 27 3 Updated Aug 19, 2026
pylock-attestations Public
CLI tool to add attestation identities to `pylock.toml` files

trailofbits/pylock-attestations's past year of commit activity

Python 6 Apache-2.0 1 3 1 Updated Aug 19, 2026
cargo-unmaintained Public
Find unmaintained packages in Rust projects

trailofbits/cargo-unmaintained's past year of commit activity

Rust 97 AGPL-3.0 15 8 0 Updated Aug 19, 2026
gh-action-adapt-sigstore-pypi Public

trailofbits/gh-action-adapt-sigstore-pypi's past year of commit activity

Python 2 Apache-2.0 0 0 3 Updated Aug 19, 2026
dropkit Public
A CLI tool for managing DigitalOcean droplets with automated setup, SSH configuration, and lifecycle management.

trailofbits/dropkit's past year of commit activity

Python 127 Apache-2.0 14 3 5 Updated Aug 19, 2026
llvm-project Public Forked from llvm/llvm-project
The LLVM Project is a collection of modular and reusable compiler and toolchain technologies.

trailofbits/llvm-project's past year of commit activity

LLVM 0 18,604 0 12 Updated Aug 19, 2026
it-depends Public
A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.

trailofbits/it-depends's past year of commit activity

Python 410 LGPL-3.0 25 6 1 Updated Aug 19, 2026