閲覧
59 件中 20 件を表示
Test cryptographic implementations for timing leaks with dudect-style workflows, leakage hypotheses, and reproducible me...
Design high-value fuzzing dictionaries for structured inputs, parsers, protocols, file formats, and smart contract ABI s...
Set up cargo-fuzz for Rust crates, write effective fuzz targets, manage corpora, and triage panics or sanitizer crashes.
Measure fuzzing or test coverage, identify untested parser and protocol paths, and translate coverage gaps into better h...
Write targeted fuzz harnesses that isolate parsers, state machines, and security-sensitive APIs without hiding bugs behi...
Prepare OSS-Fuzz integrations with build scripts, fuzz targets, seed corpora, dictionaries, and project metadata for con...
Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weig...
Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ow...
Token integration and implementation analyzer based on Trail of Bits' token integration checklist. Analyzes token implem...
Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messagi...
Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeab...
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, mis...
Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tool...
Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety,...
Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Je...
Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund lo...
Smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate documentation/s...
Scans codebases for exposed secrets, API keys, credentials, and sensitive data.
Automated code review skill with security and quality checks.
Configures mewt or muton mutation testing campaigns — scopes targets, tunes timeouts, and optimizes long-running runs. U...