testing-handbook

Trail of Bits テストハンドブック Trail of Bits テストハンドブックは、Trail of Bits が使用する多くの静的解析・動的解析ツールの設定、最適化、自動化に関する、開発者とセキュリティ専門家のためのリソースです。 テストハンドブックのプレビュー: https://appsec.guide 🌐 なぜこれが必要なのか？ ✨ 📃...

claude-code-devcontainer

devcontainer의 Claude Code bypassPermissions를 안전하게 활성화한 상태에서 Claude Code를 실행하기 위한 샌드박스 개발 환경입니다. 보안 감사 워크플로를 위해 Trail of Bits에서 제작했습니다. 왜 사용해야 하나요? 호스트 머신에서 bypassPermissions로 Claude를 실행하는 것은 위험합니다. 확인 없이 어떤 명령이든 실행할 수 있기 때문입니다. 이 devcontainer는 파일시스템 격리 를 제공하므로 호스트 시스템을 위험에 빠뜨리지 않으면서 제한 없는 Claude의...

skills

Trail of Bits 스킬 마켓플레이스 Trail of Bits가 제공하는 Claude Code 플러그인 마켓플레이스로, AI 기반 보안 분석, 테스트 및 개발 워크플로를 향상시키는 스킬을 제공합니다. Codex는 Claude 마켓플레이스 호환성을 통해 이 마켓플레이스를 로드할 수 있습니다. 또한 참조: claude-code-config · skills-curated · claude-code-devcontainer · dropkit 설치 Claude Code 마켓플레이스 /plugin marketplace add...

publications

Publications from Trail of Bits Publications from Trail of Bits Academic Papers White Papers Guides and Handbooks Conference Presentations Automated bug finding and exploitation Blockchain Compilers Cryptography Engineering Education Infrastructure Machine Learning Mobile security Programming Sid...

publications

Publications from Trail of Bits Publications from Trail of Bits Academic Papers White Papers Guides and Handbooks Conference Presentations Automated bug finding and exploitation Blockchain Compilers Cryptography Engineering Education Infrastructure Machine Learning Mobile security Programming Sid...

semgrep-rules

Trail of Bits 공개 Semgrep 규칙 이 저장소에는 Trail of Bits가 개발하여 공개한 Semgrep 규칙이 포함되어 있습니다. 이 규칙은 지속적인 개발 노력의 일부이며 보안 감사, 취약점 연구 및 내부 프로젝트에 사용됩니다. 새로운 기술을 식별함에 따라 시간이 지나면서 발전할 것입니다. Semgrep 지침은 Testing Handbook을 방문하세요. Semgrep 사용 규칙을 실행하는 가장 쉬운 방법은 Semgrep 레지스트리에서 실행하는 것입니다. 그러려면 프로젝트의 루트 폴더로 이동하여 다음을...

manticore

⚠️ Проект заархивирован ⚠️ Этот проект больше не разрабатывается и не поддерживается. Manticore Manticore — это инструмент символьного выполнения для анализа смарт-контрактов и бинарных файлов. Возможности Исследование программ : Manticore может выполнять программу с символьными входными данными и...

ANT-2026-QA1CT79B · Ghostscript · heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview SECURITY RESEARCH FIRM ANALYSIS Triage and disclosure were performed by Trail of Bits. The writeup below is the document the firm sent to the maintainer. Verdict: true...

PYSEC-2026-2150

In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shortencodenode on every import node it inspects, regardless of whether the import is flagged as unsafe. This call registers the shortened code representation in...

CVE-2026-14535

In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shortencodenode on every import node it inspects, regardless of whether the import is flagged as unsafe. This call registers the shortened code representation in...

CVE-2026-14535: Protection Mechanism Failure

In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shortencodenode on every import node it inspects, regardless of whether the import is flagged as unsafe. This call registers the shortened code representation in...

PT-2026-55705

Name of the Vulnerable Software and Affected Versions Trail of Bits fickling versions prior to 0.1.12 Description An issue exists where the UnsafeImportsML analysis pass unconditionally calls the AnalysisContext.shorten codenode function on every import node. This action populates a shared...

CVE-2026-14534: Incomplete List of Disallowed Inputs

Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules posixsubprocess, site, and atexit in the UNSAFEIMPORTS denylist fickle.py. Because these modules are absent from the denylist, fickling's checksafety function returns LIKELYSAFE with zero...

Fickling 代码问题漏洞

Fickling is an open source decompiler and static analyzer for Python by Trail of Bits. Fickling 0.1.7 before the version of the code problem vulnerability , the vulnerability stems from the existence of detection blindness to the builder module , which may lead to detection bypass...

DragonFly's manager generates mTLS certificates for arbitrary IP addresses

Impact A peer can obtain a valid TLS certificate for arbitrary IP addresses, effectively rendering the mTLS authentication useless. The issue is that the Manager’s Certificate gRPC service does not validate if the requested IP addresses “belong to” the peer requesting the certificate—that is, if...

GHSA-C2FC-9Q9C-5486 Dragonfly vulnerable to timing attacks against Proxy’s basic authentication

Impact The access control mechanism for the Proxy feature uses simple string comparisons and is therefore vulnerable to timing attacks. An attacker may try to guess the password one character at a time by sending all possible characters to a vulnerable mechanism and measuring the comparison...

protobuf-java has potential Denial of Service issue

Summary When parsing unknown fields in the Protobuf Java Lite and Full library, a maliciously crafted message can cause a StackOverflow error and lead to a program crash. Reporter: Alexis Challande, Trail of Bits Ecosystem Security Team Affected versions: This issue affects all versions of both t...

GPU kernel implementations susceptible to memory leak

Overview General-purpose graphics processing unit GPGPU platforms from AMD, Apple, and Qualcomm fail to adequately isolate process memory, thereby enabling a local attacker to read memory from other processes. An attacker with access to GPU capabilities using a vulnerable GPU's programmable...

uthenticode security breach

Authenticode is Trail of Bits open source a small cross-platform library . Used to partially verify Authenticode digital signatures . A security vulnerability exists in versions prior to uthenticode 2.0.0 , the vulnerability stems from not checking the extended key usage in the certificate ,...

Single-step process for critical ownership transfer/renounce is risky

Lines of code Vulnerability details Single-step process for critical ownership transfer/renounce is risky Impact The following contracts and functions, allow owners to interact with core functions such as: execute, rawExecute and setApproval in OwnableSmartWallet registerKnotsToSyndicate,...