Trail of Bits @trailofbits Twitter profile

Pinned Tweet

Trail of Bits

2 months

Check out our ‘Fuzzing February’ Newsletter: we published a fuzzing chapter to our Testing Handbook, fuzzed Python, and added a smart fuzzer on top of Cosmos SDK.

1

12

30

Last Seen Profiles

@jeanhenryceant

@JaipurLitFest

@jssi

@eckodemon

@YamazakiVanilla

@cromdao

@cozailuvu

@makiizenin_

@rvng_ksa

@ZacksJerryRig

@CoachBlanchard

@chbombgirl

@sc_scoop

@AlqarniAwwad

@chiko9329110295

@challam19

@TamamAbdull

@mokawnzzn

@dunacsr

@Mike_Hoover

@miawoods74

@haram_64

@supervegito0999

@alicia_cresw

@AlchemyPlatform

@nagisa201915657

@rbbrightvc

@JPPlayhouse

@S_a_mi_i

@e_ivi9

@TakeAStand2018

@Xavian_Beats

@streakinmyhair

@mokumo71

@Glasgow_Jon

@VilmaBonilla

Trail of Bits

@trailofbits

4 months

Today, we are disclosing LeftoverLocals, a vulnerability that allows listening to LLM responses through leaked GPU local memory created by another process on Apple, Qualcomm, AMD, and Imagination GPUs (CVE-2023-4969)

11

237

969

Trail of Bits

@trailofbits

2 months

Today we’re releasing weAudit, the VSCode extension we use during secure code reviews to collaboratively take notes and highlight code regions.

17

162

583

Trail of Bits

@trailofbits

2 years

For the last year, a 9-person team from @trailofbits has deeply studied the security of blockchains for @DARPA . Today, our analysis and tools are public:

94

294

599

Trail of Bits

@trailofbits

5 years

Fuck RSA

11

137

454

Trail of Bits

@trailofbits

1 year

Today, we are releasing RPC Investigator, made for exploring RPC clients and servers on Windows. This .NET application builds on the NtApiDotNet platform, adding features that offer a new way to explore RPC

Introducing RPC Investigator

A new tool for Windows RPC research By Aaron LeMasters Trail of Bits is releasing a new tool for exploring RPC clients and servers on Windows. RPC Investigator is a .NET application that builds on …

blog.trailofbits.com

7

162

423

Trail of Bits

@trailofbits

2 years

Your code might be vulnerable! Our cryptography team has discovered a number of Fiat-Shamir vulnerabilities affecting proof systems such as Bulletproofs and PlonK. Check out this blog series for details and contact us if you think your codebase might be…

12

132

383

Trail of Bits

@trailofbits

6 months

Event Tracing for Windows (ETW) is crucial for modern EDR solutions. But what do you really know about its internal workings? Dive into ETW to discover useful attack targets and forensic information.

ETW internals for security research and forensics

By Yarden Shafir Why has Event Tracing for Windows (ETW) become so pivotal for endpoint detection and response (EDR) solutions in Windows 10 and 11? The answer lies in the value of the intelligence…

blog.trailofbits.com

2

134

375

Trail of Bits

@trailofbits

10 months

We’re thrilled to announce our new Testing Handbook, which gathers insights we gained over years of experience using static and dynamic analysis tools. It goes beyond standard documentation, focusing on giving the right answers rather than all the answers.

Announcing the Trail of Bits Testing Handbook

By Maciej Domanski Trail of Bits is thrilled to announce the Testing Handbook, the shortest path for developers and security professionals to derive maximum value from the static and dynamic analys…

blog.trailofbits.com

1

87

363

Trail of Bits

@trailofbits

7 years

Microsoft didn’t sandbox Windows Defender, so I did

5

229

315

Trail of Bits

@trailofbits

2 years

Earlier this year, one of our interns found a vulnerability that affects applications using the SQLite library API. We are publicly disclosing that vuln today.

Stranger Strings: An exploitable flaw in SQLite

By Andreas Kellas Trail of Bits is publicly disclosing CVE-2022-35737, which affects applications that use the SQLite library API. CVE-2022-35737 was introduced in SQLite version 1.0.12 (released o…

blog.trailofbits.com

10

102

312

Trail of Bits

@trailofbits

6 years

It's easy to find bugs when you know how to build the right tools. Check out our blog to learn how to model vulnerabilities with Binary Ninja's MLIL and SSA form.

2

132

303

Trail of Bits

@trailofbits

6 years

Check out our _accessible_ Meltdown and Spectre explainer, made for developers without a background in computer architecture. No awkward analogies, we stick to the real details.

0

172

300

Trail of Bits

@trailofbits

8 years

How to instantly exploit 2000 binaries with Binary Ninja

1

197

288

Trail of Bits

@trailofbits

3 months

We’re releasing a Ghidra extension, BTIGhidra, that automatically recovers types with inter-procedural analysis and enhances decompilation for improved reverse engineering comprehension.

3

74

287

Trail of Bits

@trailofbits

1 year

We've just released , a revamp of our guide to building secure contracts! It contains security guidelines, best practices, tool tutorials, and many other resources.

6

71

271

Trail of Bits

@trailofbits

2 years

Over the years, we have accumulated advanced knowledge and guidance for writing better smart contracts. We are sharing this knowledge in the first release of building-secure-contracts: Check out the repo to learn about best practices and tooling!

Release v0.1.0 · crytic/building-secure-contracts

0.1.0 - 2022-08-05 This is the first release of building-secure-contracts. This collaborative repo aims to help smart contracts developers and auditors to build safer contracts by providing best pr...

github.com

15

80

261

Trail of Bits

@trailofbits

3 years

Breaking Aave Upgradeability

On December 3rd, Aave deployed version 2 of their codebase. While we were not hired to look at the code, we briefly reviewed it the following day. We quickly discovered a vulnerability that affecte…

blog.trailofbits.com

13

36

255

Trail of Bits

@trailofbits

5 years

We fuzzed modern Linux distributions with 30 year old fuzzers and you won't believe what happened next!

Fuzzing Like It’s 1989

With 2019 a day away, let’s reflect on the past to see how we can improve. Yes, let’s take a long look back 30 years and reflect on the original fuzzing paper, An Empirical Study of the Reliability…

blog.trailofbits.com

2

129

257

Trail of Bits

@trailofbits

6 years

We've just released DeepState, a Google Test-like framework that lets you symbolically execute your C/C++ unit tests. #NDSS18 #BAR18

GitHub - trailofbits/deepstate: A unit test-like interface for fuzzing and symbolic execution

A unit test-like interface for fuzzing and symbolic execution - trailofbits/deepstate

github.com

1

122

250

Trail of Bits

@trailofbits

6 years

Today we released Echidna, our next generation EVM smart fuzzer at #EthCC . It's the first-ever fuzzer to target smart contracts!

6

138

245

Trail of Bits

@trailofbits

5 years

Destroying x86_64 instruction decoders with differential fuzzing

4

106

235

Trail of Bits

@trailofbits

1 year

Who knew that a joke about "curl AAAAAAAAAA..." could uncover memory corruption bugs in libcurl?!

cURL audit: How a joke led to significant findings

By Maciej Domanski In fall 2022, Trail of Bits audited cURL, a widely-used command-line utility that transfers data between a server and supports various protocols. The project coincided with a Tra…

blog.trailofbits.com

1

65

218

Trail of Bits

@trailofbits

2 years

Our software engineer Boyan Milanov introduces Maat, a low-level symbolic execution framework based on Ghidra's IR language p-code.

Maat: Symbolic execution made easy

By Boyan Milanov We have released Maat, a cross-architecture, multi-purpose, and user-friendly symbolic execution framework. It provides common symbolic execution capabilities such as dynamic symbo…

blog.trailofbits.com

2

72

213

Trail of Bits

@trailofbits

7 years

Meet Algo, the VPN that works

I think you’ll agree when I say: there’s no VPN option on the market designed with equal emphasis on security and ease of use. That changes now. Today we’re introducing Algo, a self-hosted personal…

blog.trailofbits.com

13

98

199

Trail of Bits

@trailofbits

1 year

Process reparenting is a Windows technique used by malicious actors, but it can also be a benign, legitimate event. @yarden_shafir has insights on how to investigate this behavior

What child is this?

A Primer on Process Reparenting in Windows By Yarden Shafir Process reparenting is a technique used in Microsoft Windows to create a child process under a different parent process than the one maki…

blog.trailofbits.com

0

89

197

Trail of Bits

@trailofbits

1 year

As smart contract security evolves, property-based fuzzing has become a go-to technique for developers and security engineers. To help the community define properties, we are releasing a set of 168 pre-built properties that can be used to guide Echidna.

Reusable properties for Ethereum contracts

As smart contract security constantly evolves, property-based fuzzing has become a go-to technique for developers and security engineers. This technique relies on the creation of code properties &#…

blog.trailofbits.com

5

47

192

Trail of Bits

@trailofbits

7 years

Reverse engineer 200 binaries with the mechanical efficiency of symbolic execution

0

94

186

Trail of Bits

@trailofbits

7 months

We’re launching a new service: invariant development. We’ll identify, implement, and test security-critical invariants to prevent bugs & secure your codebase over the long term. Plus, we’ll upskill your team to write their own invariants!

Introducing invariant development as a service

Understanding and rigorously testing system invariants are essential aspects of developing robust smart contracts. Invariants are facts about the protocol that should remain true no matter what hap…

blog.trailofbits.com

6

40

186

Trail of Bits

@trailofbits

2 years

We found critical flaws in common TSS libraries, a cryptographic protocol for distributed key generation and signing. We’ve released to help secure the rapidly advancing field of ZKPs, TSS, and similar schemes.

Introduction

www.zkdocs.com

6

59

185

Trail of Bits

@trailofbits

5 years

wen eta is now

8

62

179

Trail of Bits

@trailofbits

3 months

Warning: @lfgexchange is falsely claiming to have worked with us on an audit. The report on their page is fake. If you want to verify the authenticity of a @trailofbits report, find it on our publications repo, the authoritative source straight from us.

16

42

181

Trail of Bits

@trailofbits

1 year

A new release of Slither is available, which now uses OpenAI's Codex to auto-generate solidity documentation and leverages GPT-3 to find vulnerabilities.

Release v0.9.2 · crytic/slither

0.9.2 - 2023-01-11 This release integrates codex into Slither via two features: slither-documentation, a tool to auto-generate natspec for every function. See the usage on solmate. the codex detec...

github.com

1

34

176

Trail of Bits

@trailofbits

1 year

During research that led to our discovery of a vuln in SQLite, we found something we call "divergent representations." Once we started looking for them, we found them everywhere

Look out! Divergent representations are everywhere!

By Andreas Kellas Trail of Bits recently published a blog post about a signed integer overflow in certain versions of SQLite that can enable arbitrary code execution and result in a denial of servi…

blog.trailofbits.com

3

41

168

Trail of Bits

@trailofbits

5 years

Understanding Docker container escapes

Trail of Bits recently completed a security assessment of Kubernetes, including its interaction with Docker. Felix Wilhelm’s recent tweet of a Proof of Concept (PoC) “container escape” sparked our …

blog.trailofbits.com

0

72

173

Trail of Bits

@trailofbits

2 years

There's a dark side to compiler optimizations that can inadvertently cause information leaks or remove code critical to security. Read about the research being done to mitigate this risk and reduce the exposure to code-reuse attacks in software.

4

55

164

Trail of Bits

@trailofbits

7 years

DEF CON CTF needed an extra _bit_ of work this year. Here's how we handled the cLEMENCy architecture:

An extra bit of analysis for Clemency

This year’s DEF CON CTF used a unique hardware architecture, cLEMENCy, and only released a specification and reference tooling for it 24 hours before the final event began. cLEMENCy was purposefull…

blog.trailofbits.com

1

111

162

Trail of Bits

@trailofbits

7 years

Devirtualizing C++ with Binary Ninja

0

105

157

Trail of Bits

@trailofbits

6 years

Protecting Software Against Exploitation with DARPA’s CFAR

1

81

158

Trail of Bits

@trailofbits

6 years

We published a technical summary of the "AMD Flaws" so they can be of use to the security community without the distraction of the surrounding disclosure issues.

4

131

156

Trail of Bits

@trailofbits

6 months

The @raft_fi issue is complex and we're actively investigating it. We've offered to help their team however we can. Here's some of what we know so far:

2

23

157

Trail of Bits

@trailofbits

3 months

Fuzz smarter, not harder, with our newest Testing Handbook chapter that will take your fuzzing skills from 0 to 60.

1

34

154

Trail of Bits

@trailofbits

1 year

Today's release of our Echidna smart contract fuzzer is more than 20x faster, thanks to multicore support and optimized coverage collection.

4

33

148

Trail of Bits

@trailofbits

4 years

Let’s build a high-performance fuzzer with GPUs!

by Ryan Eberhardt, Stanford University TL;DR: Can we use GPUs to get 10x performance/dollar when fuzzing embedded software in the cloud? Based on our preliminary work, we think the answer is yes! F…

blog.trailofbits.com

3

63

151

Trail of Bits

@trailofbits

2 years

Amarna, our new static analyzer for the Cairo programming language and StarkNet contracts, is here! Try it out and let us know what you think

Amarna: Static analysis for Cairo programs

By Filipe Casal We are open-sourcing Amarna, our new static analyzer and linter for the Cairo programming language. Cairo is a programming language powering several trading exchanges with millions …

blog.trailofbits.com

5

52

145

Trail of Bits

@trailofbits

9 months

The #RektTest is a simple way for blockchain teams to assess their security posture. Created by top security experts, it includes 12 key questions. Can you pass the Rekt Test?

Can you pass the Rekt test?

One of the biggest challenges for blockchain developers is objectively assessing their security posture and measuring how it progresses. To address this issue, a working group of Web3 security expe…

blog.trailofbits.com

6

36

149

Trail of Bits

@trailofbits

1 year

Why should you care about the security of VSCode extensions? How does compromising a local machine, stealing all local files from that machine, or even swiping your SSH keys sound?

Escaping misconfigured VSCode extensions

By Vasco Franco TL;DR: This two-part blog series will cover how I found and disclosed three vulnerabilities in VSCode extensions and one vulnerability in VSCode itself (a security mitigation bypass…

blog.trailofbits.com

1

47

147

Trail of Bits

@trailofbits

9 months

Is your centralized exchange, bridge, or L2 client using block delays to determine transaction finality? If so, it may be vulnerable to re-orgs, double-spend attacks, and stolen funds. Our new guide to blockchain finality helps you avoid these attacks.

The Engineer’s Guide to Blockchain Finality

By Benjamin Samuels Many security-critical off-chain applications use a simple block delay to determine finality: the point at which a transaction becomes immutable in a blockchain’s ledger (and is…

blog.trailofbits.com

4

29

141

Trail of Bits

@trailofbits

2 years

Trail of Bits has launched a podcast! The first five-episode season is now available on all major podcast outlets.

Announcing the new Trail of Bits podcast

Trail of Bits has launched a podcast. The first five-episode season is now available for download. The podcast and its RSS feed are available at trailofbits.audio, and you may subscribe on all majo…

blog.trailofbits.com

3

28

139

Trail of Bits

@trailofbits

2 months

Today we're releasing Attacknet, a new tool in the blockchain security arsenal. Built in collaboration with the @Ethereum Foundation, it uses Chaos Engineering to test the most challenging network conditions imaginable for fault tolerance

2

32

133

Trail of Bits

@trailofbits

5 years

Data from @Hacker0x01 and @facebook proves that bug bounties only benefit a small elite group. Is this model meeting researchers' interests? Read our review of "New Solutions for Cybersecurity" by @mitpress .

On Bounties and Boffins

Trying to make a living as a programmer participating in bug bounties is the same as convincing yourself that you’re good enough at Texas Hold ‘Em to quit your job. There’s data to back this up in …

blog.trailofbits.com

5

83

130

Trail of Bits

@trailofbits

4 years

We have a working proof-of-concept exploit for ‘Whose Curve is it Anyway?’ — NSA’s bug in Microsoft’s Crypto API. Read on for our explainer:

2

63

133

Trail of Bits

@trailofbits

10 months

Upgrading smart contracts can introduce new bugs, risking millions of dollars. We've developed Diffusc, a differential fuzzer that compares two smart contracts to uncover unexpected differences in behavior before an upgrade is deployed.

Differential fuzz testing upgradeable smart contracts with Diffusc

On March 28, 2023, SafeMoon, a self-styled “community-focused DeFi token” on Binance Smart Chain, lost the equivalent of $8.9 million in Binance Coin BNB to an exploit in a liquidity pool. The expl…

blog.trailofbits.com

4

39

129

Trail of Bits

@trailofbits

1 year

Codex (and GPT-4) can’t beat humans on smart contract audits

By Artem Dinaburg, Chief Technology Officer; Josselin Feist, Principal Engineer; and Riccardo Schirone, Security Engineer Is artificial intelligence (AI) capable of powering software security audit…

blog.trailofbits.com

4

43

128

Trail of Bits

@trailofbits

6 months

Earlier this week, @UncipheredLLC disclosed that BitcoinJS, the most widely used JavaScript library for bitcoin wallets, relied on weak randomness until 2014. This issue puts millions of wallets at risk. Here’s what we know:

Joseph Menn

@josephmenn

6 months

Experts discover flaw leaving $1 billion in bitcoin and other cryptocurrencies exposed for stealing from early software wallets. Free link to my story in the The Post: #bitcoin #doge #infosec

1

6

32

6

28

126

Trail of Bits

@trailofbits

4 years

Reinventing Vulnerability Disclosure using Zero-knowledge Proofs

We, along with our partner Matthew Green at Johns Hopkins University, are using zero-knowledge (ZK) proofs to establish a trusted landscape in which tech companies and vulnerability researchers can…

blog.trailofbits.com

4

51

121

Trail of Bits

@trailofbits

4 years

Our Full Report on the Voatz Mobile Voting Platform

Voatz allows voters to cast their ballots from any geographic location on supported mobile devices. Its mobile voting platform is under increasing public scrutiny for security vulnerabilities that …

blog.trailofbits.com

1

58

122

Trail of Bits

@trailofbits

1 year

We’ve built many high-impact tools that we use for security reviews. But mastering them can take time. So we're bringing the mastery to you: we're going to be livestreaming tool workshops on our Twitch and YouTube channels!

We’re streamers now

Over the years, we’ve built many high-impact tools that we use for security reviews. You might know some of them, like Slither, Echidna, Amarna, Tealer, and test-fuzz. All of our tools are open sou…

blog.trailofbits.com

12

30

120

Trail of Bits

@trailofbits

9 months

Clang isn't a toolsmith's compiler. PASTA tries to fix this by providing safe-to-use C++ and Python wrappers to the Clang AST. PASTA also answers questions that Clang can't, like how parsed tokens relate back to macro expansions and files. Learn more:

The future of Clang-based tooling

By Peter Goodman Clang is a marvelous compiler; it’s a compiler’s compiler! But it isn’t a toolsmith’s compiler. As a toolsmith, my ideal compiler would be an open book, allowing me to get to…

blog.trailofbits.com

1

37

116

Trail of Bits

@trailofbits

2 years

It pays to be Circomspect

6

31

116

Trail of Bits

@trailofbits

2 years

Manticore now has a GUI that works with Binary Ninja! Our intern, @tcode2k16 , explains how his summer project made symbolic execution easier to use and more intuitive.

MUI: Visualizing symbolic execution with Manticore and Binary Ninja

By Alan Chang, University of Oxford During my summer internship, I had the wonderful opportunity to work on the Manticore User Interface (MUI). The MUI project aims to combine the strength of both …

blog.trailofbits.com

1

31

116

Trail of Bits

@trailofbits

2 years

Magnifier is a UI that helps reverse engineers explore decompiled programs interactively without all the manual note-taking. Read about this excellent work from our intern, @tcode2k16 !

Magnifier: An Experiment with Interactive Decompilation

By Alan Chang Today, we are releasing Magnifier, an experimental reverse engineering user interface I developed during my internship. Magnifier asks, “What if, as an alternative to taking handwritt…

blog.trailofbits.com

1

26

111

Trail of Bits

@trailofbits

2 months

Fuzzing is preferred over formal verification because proving the absence of bugs is usually unattainable, and fuzzing identifies the same bugs with less effort.

Why fuzzing over formal verification?

By Tarun Bansal, Gustavo Grieco, and Josselin Feist We recently introduced our new offering, invariant development as a service. A recurring question that we are asked is, “Why fuzzing instead of f…

blog.trailofbits.com

3

14

113

Trail of Bits

@trailofbits

6 years

Trail of Bits donates $100,000 to support young researchers through @SummerC0n

3

32

112

Trail of Bits

@trailofbits

3 years

Our stellar winter intern @ezhes_ built our newest open-source tool named Honeybee. It speeds up the Intel Processor Trace and uses it for fast coverage-guided fuzzing.

Un-bee-lievable Performance: Fast Coverage-guided Fuzzing with Honeybee and Intel Processor Trace

By Allison Husain, UC Berkeley Today, we are releasing an experimental coverage-guided fuzzer called Honeybee that records program control flow using Intel Processor Trace (IPT) technology. Previou…

blog.trailofbits.com

2

34

111

Trail of Bits

@trailofbits

1 year

We are now accepting applicants for our summer internship program! We will be hiring approximately 10-15 interns across our research, engineering, and assurance practices

Trail of Bits

boards.greenhouse.io

6

25

102

Trail of Bits

@trailofbits

5 years

Reverse Taint Analysis Using Binary Ninja

0

64

106

Trail of Bits

@trailofbits

6 years

An accessible overview of Meltdown and Spectre, Part 2

1

59

103

Trail of Bits

@trailofbits

10 months

Today we're releasing Caracal, our new static analysis tool for Starknet smart contracts. It has 10 detectors that detect reentrancies and other vulnerabilities, two printers, and more!

GitHub - crytic/caracal: Static Analyzer for Starknet smart contracts

Static Analyzer for Starknet smart contracts. Contribute to crytic/caracal development by creating an account on GitHub.

github.com

2

27

102

Trail of Bits

@trailofbits

5 years

Rewriting Functions in Compiled Binaries

0

49

102

Trail of Bits

@trailofbits

7 years

Breaking Down Binary Ninja’s Low Level IL

0

68

103

Trail of Bits

@trailofbits

10 months

With Echidna 2.1.0 and later, you can retrieve on-chain data to fuzz deployed contracts and test how new code integrates with existing contracts. You can also use it to recreate real-world hacks!

Fuzzing on-chain contracts with Echidna

By Guillermo Larregay and Elvis Skozdopolj With the release of version 2.1.0 of Echidna, our fuzzing tool for Ethereum smart contracts, we’ve introduced new features for direct retrieval of on-chai…

blog.trailofbits.com

2

28

102

Trail of Bits

@trailofbits

7 years

Let’s talk about CFI: Microsoft Edition

2

82

101

Trail of Bits

@trailofbits

6 years

Today, we are releasing a maintained repository of @osquery extensions. Our first extension uses the @duo_labs EFIgy API to determine if the EFI firmware on your Mac fleet is up to date.

Announcing the Trail of Bits osquery extension repository

Today, we are releasing access to our maintained repository of osquery extensions. Our first extension takes advantage of the Duo Labs EFIgy API to determine if the EFI firmware on your Mac fleet i…

blog.trailofbits.com

2

58

101

Trail of Bits

@trailofbits

6 years

Heavy lifting with McSema 2.0

0

67

101

Trail of Bits

@trailofbits

7 years

Manticore will soon integrate Symbolic Execution into Binary Ninja! Follow along on the BinjaIL branch here:

1

53

100

Trail of Bits

@trailofbits

7 months

Slither now supports Vyper and includes 5 new detectors, thanks to @vyperlang and @dguido 😉 Foundry UX is also much improved: tests and scripts are now excluded, and Slither can run on single files.

Release 0.10.0 · crytic/slither

0.10.0 - 2023-10-18 This release adds support for Vyper 0.3.7 (thanks to the funding from VyperLang)! Currently, Vyper frameworks such as Ape are not supported. To run slither on Vyper codebases, t...

github.com

3

22

95

Trail of Bits

@trailofbits

2 years

Intern Francesco Bertolaccini developed rellic-headergen, a utility that creates C declarations from debug information in LLVM bitcode produced by Clang from C, C++, or Objective-C. Now you can easily “C” your data structures!

0

12

96

Trail of Bits

@trailofbits

1 year

Trail of Bits is announcing a new practice focused on machine learning and artificial intelligence! We’re bringing together safety and security to create a new risk assessment and assurance program

We need a new way to measure AI security

Tl;dr: Trail of Bits has launched a practice focused on machine learning and artificial intelligence, bringing together safety and security methodologies to create a new risk assessment and assuran…

blog.trailofbits.com

3

23

97

Trail of Bits

@trailofbits

4 years

Verifying Windows binaries, without Windows

TL;DR: We’ve open-sourced a new library, μthenticode, for verifying Authenticode signatures on Windows PE binaries without a Windows machine. We’ve also integrated it into recent builds of Wincheck…

blog.trailofbits.com

3

48

98

Trail of Bits

@trailofbits

2 years

Hello, world! We now have a team solely dedicated to Windows.

We do Windows now

At Trail of Bits, we pride ourselves on building tools that everyone can use to help improve the security ecosystem. Given how ingrained Microsoft is with a large portion of our work — binary analy…

blog.trailofbits.com

0

8

96

Trail of Bits

@trailofbits

7 years

Hands on the Ethernaut CTF: Follow along with @Montyly as he solves 6 Ethereum security challenges.

Hands on the Ethernaut CTF

Last week Zeppelin released their Ethereum CTF, Ethernaut. This CTF is a good introduction to discover how to interact with a blockchain and learn the basics of the smart contract vulnerabilities. …

blog.trailofbits.com

0

60

97

Trail of Bits

@trailofbits

7 years

Tracking a stolen code-signing certificate with osquery

0

67

94

Trail of Bits

@trailofbits

2 months

Triaging static analysis results is now easier with our VSCode extension SARIF explorer.

2

26

96

Trail of Bits

@trailofbits

1 year

The naive approach to searching for patterns in source code is to use regular expressions, but that has limitations. Our intern prototyped an internal tool that does searching on Clang ASTs to avoid these limitations

3

16

96

Trail of Bits

@trailofbits

2 years

What does your code use, and is it vulnerable? It-depends! Our new tool, It-Depends, can automatically build a dependency graph and software bill of materials (SBOM) for arbitrary code, even C and C++, and alert you to any upstream vulnerabilities.

What does your code use, and is it vulnerable? It-depends!

You just cloned a fresh source code repository and want to get a quick sense of its dependencies. Our tool, it-depends, can get you there. We are proud to announce the release of it-depends, an ope…

blog.trailofbits.com

1

35

94

Trail of Bits

@trailofbits

6 months

We assessed the YOLOv7 vision model and identified 11 security vulnerabilities that could enable RCE, DoS, and model differentials. We do not recommend using the codebase for mission-critical applications or applications that require high availability.

Assessing the security posture of a widely used vision model: YOLOv7

By Alvin Crighton, Anusha Ghosh, Suha Hussain, Heidy Khlaaf, and Jim Miller TL;DR: We identified 11 security vulnerabilities in YOLOv7, a popular computer vision framework, that could enable attack…

blog.trailofbits.com

3

30

94

Trail of Bits

@trailofbits

5 years

Binary symbolic execution with KLEE-Native

0

38

91

Trail of Bits

@trailofbits

6 years

Effortless security feature detection with Winchecksec

1

57

93

Trail of Bits

@trailofbits

4 years

Accidentally stepping on a DeFi lego: @samczsun helped save ~$400k from a bug in yEarn. 🎉

4

25

86

Trail of Bits

@trailofbits

5 years

McSema now has an open-source Dyninst frontend that compares competitively with IDA Pro. Check out this amazing thesis by Lukáš Korenčik to see how all the parts fit together.

4

41

85

Trail of Bits

@trailofbits

3 months

LibAFL maintainer and CISPA Ph.D. candidate @AddisonCrump_vr presented at our internal Lunch and Learn session.

Underutilized Fuzzing Strategies for Modern Software Testing

Trail of Bits hosted one of LibAFL's maintainers and CISPA PhD candidate, Addison Crump, for our weekly internal Lunch and Learn session. While fuzzing is co...

www.youtube.com

3

31

87

Trail of Bits

@trailofbits

4 years

Real-time file monitoring on Windows with osquery

1

38

87

Trail of Bits

@trailofbits

1 year

Harnessing the eBPF Verifier

0

25

85

Trail of Bits

@trailofbits

5 months

Struggling with fuzzing a huge blockchain protocol? Fuzzing tip #1 : Start with stateless functions. Pure functions and libraries are your best friends in the early stages of fuzzing. Master the basics before getting complex.

0

8

84

Trail of Bits

@trailofbits

8 years

Mozilla paid us to audit zlib with the 400lb hacking robot in our basement. What it found will shock you!

Automated Code Audit’s First Customer

Last month our Cyber Reasoning System (CRS) -developed for DARPA’s Cyber Grand Challenge- audited a much larger amount of code in less time, in greater detail, and at a lower cost than a human coul…

blog.trailofbits.com

4

52

86

Trail of Bits

@trailofbits

2 years

Our report is dense and technical, so we summarized its key findings in a 20-minute podcast in plain language. We believe it's crucial that a wider audience understand the risks of blockchain technology. Listen now:

Trail of Bits

Here's something lots of people like about Bitcoin: Governments can't control it. You can spend your Bitcoin the way you want to, and nobody can stop you. But here's the bad news: That's not true. It...

trailofbits.audio

3

19

82

Trail of Bits

@trailofbits

8 years

The Problem with Dynamic Program Analysis

2

75

84

Trail of Bits

@trailofbits

6 years

How to Spot Good Fuzzing Research

Of the nearly 200 papers on software fuzzing that have been published in the last three years, most of them—even some from high-impact conferences—are academic clamor. Fuzzing research suffers from…

blog.trailofbits.com

0

46

84

Trail of Bits

@trailofbits

8 months

Thanks to a generous grant from @vyperlang , we are working to bring full support for #Vyper to Slither and Echidna. Follow along on the PRs here:

Re-enable using slither for vyper files by ggrieco-tob · Pull Request #1108 · crytic/echidna

This PR requires full slither support for vyper, which is still a WIP, but once that is released, vyper can be fully used.

github.com

Josselin Feist

@Montyly

8 months

But we don't want the echidna to be jealous:

0

2

21

3

16

83

Trail of Bits

@trailofbits

1 year

While Echidna is a great smart contract fuzzer, we are always improving our tools. With Hybrid Echidna, we can find even more bugs

Hybrid fuzzing: Sharpening the spikes of Echidna

By Tom Malcolm, University of Queensland, Australia Smart contract fuzzing is an effective bug-finding technique that is largely used at Trail Of Bits during audits. During my internship at Trail o…

blog.trailofbits.com

1

10

82