testing-handbook

Trail of Bits 테스팅 핸드북 Trail of Bits Testing Handbook은 Trail of Bits에서 사용하는 많은 정적 및 동적 분석 도구를 구성, 최적화 및 자동화하는 방법에 대한 개발자 및 보안 전문가를 위한 리소스입니다. Testing Handbook 미리 보기: https://appsec.guide 🌐 왜 필요한가요? ✨ 📃 기존 도구의 구성 및 최적화에 대한 문서는 종종 보안 전문가를 대상으로 하기 때문에 개발자 친화적이지 않습니다. 특히 퍼징 유틸리티의 경우 더욱 그렇습니다. 이는 좌절감을...

claude-code-devcontainer

devcontainer 内の Claude Code bypassPermissions を安全に有効化した状態で Claude Code を実行するためのサンドボックス化された開発環境です。Trail of Bits でセキュリティ監査ワークフロー向けに構築されました。 なぜこれを使うのか？ ホストマシン上で bypassPermissions を有効にして Claude を実行するのは危険です。確認なしに任意のコマンドを実行できてしまうからです。この devcontainer は ファイルシステムの分離 を提供するため、ホストシステムを危険にさらすことなく、制限なしの Claude...

manticore

⚠️ 프로젝트가 보관됨 ⚠️ 이 프로젝트는 더 이상 내부적으로 개발 및 유지보수되지 않습니다. Manticore Manticore는 스마트 계약 및 바이너리 분석을 위한 기호 실행 도구입니다. 기능 프로그램 탐색 : Manticore는 기호 입력으로 프로그램을 실행하고 도달 가능한 모든 상태를 탐색할 수 있습니다. 입력 생성 : Manticore는 주어진 프로그램 상태를 초래하는 구체적인 입력을 자동으로 생성할 수 있습니다. 오류 발견 : Manticore는 바이너리 및 스마트 계약에서 크래시 및 기타 실패 사례를 탐지할 수...

skills

Trail of Bits 스킬 마켓플레이스 Trail of Bits가 제공하는 Claude Code 플러그인 마켓플레이스로, AI 기반 보안 분석, 테스트 및 개발 워크플로를 향상시키는 스킬을 제공합니다. Codex는 Claude 마켓플레이스 호환성을 통해 이 마켓플레이스를 로드할 수 있습니다. 또한 참조: claude-code-config · skills-curated · claude-code-devcontainer · dropkit 설치 Claude Code 마켓플레이스 root@kitploit: /plugin...

publications

Publications from Trail of Bits Publications from Trail of Bits Academic Papers White Papers Guides and Handbooks Conference Presentations Automated bug finding and exploitation Blockchain Compilers Cryptography Engineering Education Infrastructure Machine Learning Mobile security Programming Sid...

publications

Trail of Bits의 발간물 Trail of Bits의 발간물 학술 논문 백서 가이드 및 핸드북 컨퍼런스 발표 자료 자동 버그 탐지 및 취약점 공격 블록체인 컴파일러 암호학 엔지니어링 교육 인프라 머신러닝 모바일 보안 프로그래밍 부채널 공급망 위협 분석 및 악성코드 팟캐스트 웨비나 공개 의견 사례 연구 보안 검토 주요 고객사 Frax Finance MobileCoin Offchain Labs Reserve Protocol Scroll Uniswap Western Digital AI/ML 검토 암호학 검토 기술 제품 검토...

semgrep-rules

Trail of Bits 公開 Semgrep ルール このリポジトリには、Trail of Bits が開発し公開している Semgrep ルールが含まれています。これらは当社の継続的な開発活動の一部であり、セキュリティ監査、脆弱性調査、社内プロジェクトで使用されています。新しい技術を特定するにつれて、時間の経過とともに進化していきます。 Semgrep のガイダンスについては、Testing Handbook を参照してください。 Semgrep の使用方法 ルールを実行する最も簡単な方法は、Semgrep レジストリ...

ANT-2026-QA1CT79B · Ghostscript · heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview SECURITY RESEARCH FIRM ANALYSIS Triage and disclosure were performed by Trail of Bits. The writeup below is the document the firm sent to the maintainer. Verdict: true...

CVE-2026-14535

In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shortencodenode on every import node it inspects, regardless of whether the import is flagged as unsafe. This call registers the shortened code representation in...

PT-2026-55705

Name of the Vulnerable Software and Affected Versions Trail of Bits fickling versions prior to 0.1.12 Description An issue exists where the UnsafeImportsML analysis pass unconditionally calls the AnalysisContext.shorten codenode function on every import node. This action populates a shared...

Fickling 代码问题漏洞

Fickling is an open source decompiler and static analyzer for Python by Trail of Bits. Fickling 0.1.7 before the version of the code problem vulnerability , the vulnerability stems from the existence of detection blindness to the builder module , which may lead to detection bypass...

DragonFly's manager generates mTLS certificates for arbitrary IP addresses

Impact A peer can obtain a valid TLS certificate for arbitrary IP addresses, effectively rendering the mTLS authentication useless. The issue is that the Manager’s Certificate gRPC service does not validate if the requested IP addresses “belong to” the peer requesting the certificate—that is, if...

GHSA-C2FC-9Q9C-5486 Dragonfly vulnerable to timing attacks against Proxy’s basic authentication

Impact The access control mechanism for the Proxy feature uses simple string comparisons and is therefore vulnerable to timing attacks. An attacker may try to guess the password one character at a time by sending all possible characters to a vulnerable mechanism and measuring the comparison...

protobuf-java has potential Denial of Service issue

Summary When parsing unknown fields in the Protobuf Java Lite and Full library, a maliciously crafted message can cause a StackOverflow error and lead to a program crash. Reporter: Alexis Challande, Trail of Bits Ecosystem Security Team Affected versions: This issue affects all versions of both t...

GPU kernel implementations susceptible to memory leak

Overview General-purpose graphics processing unit GPGPU platforms from AMD, Apple, and Qualcomm fail to adequately isolate process memory, thereby enabling a local attacker to read memory from other processes. An attacker with access to GPU capabilities using a vulnerable GPU's programmable...

uthenticode security breach

Authenticode is Trail of Bits open source a small cross-platform library . Used to partially verify Authenticode digital signatures . A security vulnerability exists in versions prior to uthenticode 2.0.0 , the vulnerability stems from not checking the extended key usage in the certificate ,...

Single-step process for critical ownership transfer/renounce is risky

Lines of code Vulnerability details Single-step process for critical ownership transfer/renounce is risky Impact The following contracts and functions, allow owners to interact with core functions such as: execute, rawExecute and setApproval in OwnableSmartWallet registerKnotsToSyndicate,...

curl: CVE-2022-43552: HTTP Proxy deny use-after-free

Issues reported by Trail of Bits. This is either one or two issues. Summary: ./src/curl 0 -x0:80 telnet:/j-uj-u//0 -m 01 ./src/curl 0 -x0:80 smb:/j-uj-u//0 -m 01 Both command line ends up having libcurl access and use already freed heap-memory. For read and write. Steps To Reproduce: See above, r...

curl: CVE-2022-42915: HTTP proxy double-free

This is a finding that Trail of Bits found in their ongoing curl security audit. Reported at a status meeting today. Summary: curl frees memory twice in some cleanup function related to HTTP proxies. It as simple as curl -x http://localhost:80 dict://127.0.0.1 Using valgrind on the current git...

Pip-Audit - Audits Python Environments And Dependency Trees For Known Vulnerabilities

pip-audit is a tool for scanning Python environments for packages with known vulnerabilities. It uses the Python Packaging Advisory Database https://github.com/pypa/advisory-db via the PyPI JSON API as a source of vulnerability reports. This project is developed by Trail of Bits with support from...