Semgrep queries developed by Trail of Bits.

Find, verify, and analyze leaked credentials

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

🚀 Caido releases, wiki and roadmap

Modern JavaScript Tutorial

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

a Hassle-Free Python Experience

Diff and display virtual machine snapshots

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

A low effort and cheap to run, framework for tracking and alerting on dangerous patterns

get things from one computer to another, safely

Parsing, analyzing, and comparing source code across many languages

Issue tracker for Simplify Gmail, a browser extension to simplify Gmail's interface

Simple, private file sharing from the makers of Firefox

Docker files based on windows containers

A tool for exploring each layer in a docker image

Many-Time Pad Interactive

All available versions of launchd, tagged for diffing

truffleHog but more savage

A formatter for Python files

Low-Budget Password Strength Estimation

A retro game engine for Python

Automatically brute force all services running on a target.

Bash Automated Testing System

Learn to crypto workshop

Application Kernel for Containers

Markdown Presentations for Tech Conferences, Training, Developer Advocates, and Educators.

A simple operating system (SOS) built on top of the seL4 microkernel

A service that analyzes docker images and scans for vulnerabilities