trailofbits

Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other memory errors during fuzzing or tests.

Sets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with afl-clang-fast or afl-gcc-fast.

Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field…

Sets up and runs Atheris, the coverage-guided Python fuzzer built on libFuzzer.

Augments Trailmark code graphs with external audit findings from SARIF static analysis results, weAudit annotation files, and…

Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere.

Prepares codebases for security review using Trail of Bits' checklist.

Burp Suite Professional is an HTTP interception proxy with numerous security testing features.

Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific…

Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address…

Sets up and runs cargo-fuzz, the standard fuzzing tool for Cargo-based Rust projects.

Diagnose and fix Claude in Chrome MCP extension connectivity issues.