EXPLORE COMPONENTS

libFuzzer

skilltrail-of-bitsfuzzing+3

87/100

Build libFuzzer harnesses for C/C++ libraries, configure sanitizers and corpora, and turn crashes into minimized reprodu...

AddressSanitizer

skilltrail-of-bitsfuzzing+4

87/100

Use AddressSanitizer to find memory corruption bugs, configure instrumented builds, interpret sanitizer reports, and tur...

Substrate Vulnerability Scanner

Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weig...

Secure Workflow Guide

Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeab...

Solana Vulnerability Scanner

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ow...

Algorand Vulnerability Scanner

Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, mis...

Audit Prep Assistant

skilltrail-of-bitssmart-contracts+4

Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tool...

Cairo Vulnerability Scanner

Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messagi...

Code Maturity Assessor

Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety,...

Ton Vulnerability Scanner

Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Je...

Cosmos Vulnerability Scanner

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund lo...

Token Integration Analyzer

Token integration and implementation analyzer based on Trail of Bits' token integration checklist. Analyzes token implem...

Guidelines Advisor

skilltrail-of-bitssmart-contracts+4

Smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate documentation/s...

Firebase APK Scanner

skilltrail-of-bitsfirebase+2

Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication iss...

Semgrep Rule Variant Creator

skilltrail-of-bitssemgrep+3

Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Take...

Audit Context Building

skilltrail-of-bitsaudit+2

Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug findi...

Supply Chain Risk Auditor

skilltrail-of-bitssupply+3

Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface,...

False Positive Check

Systematically verifies suspected security bugs to eliminate false positives. Produces TRUE POSITIVE or FALSE POSITIVE v...

skilltrail-of-bitscheck

Insecure Defaults

skilltrail-of-bitsinsecure+1

Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurel...