Browse
Showing 20 of 56 components
Configure and run AFL++ fuzzing campaigns for C/C++ targets, including harness setup, corpus handling, dictionaries, par...
Build libFuzzer harnesses for C/C++ libraries, configure sanitizers and corpora, and turn crashes into minimized reprodu...
Use AddressSanitizer to find memory corruption bugs, configure instrumented builds, interpret sanitizer reports, and tur...
Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund lo...
Smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate documentation/s...
Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Je...
Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety,...
Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeab...
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, mis...
Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messagi...
Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weig...
Token integration and implementation analyzer based on Trail of Bits' token integration checklist. Analyzes token implem...
Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tool...
Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ow...
Red Hat-backed MCP server for Kubernetes and OpenShift cluster management, supporting kubectl, Helm, and Istio operation...
Systematically verifies suspected security bugs to eliminate false positives. Produces TRUE POSITIVE or FALSE POSITIVE v...
Provides expertise for analyzing DWARF debug files and understanding the DWARF debug format/standard (v3-v5). Triggers w...
Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing S...
Provides guidance for property-based testing across multiple languages and smart contracts. Use when writing tests, revi...
Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Take...