Build and test code with AddressSanitizer, a tool that detects invalid memory access during execution. Configure checks for C/C++ and unsafe Rust, investigate crash reports, and adjust settings for fuzzing, or testing with generated inputs.
中文简介正在准备中。当前显示英语简介。
- Detect memory errors while fuzzing C/C++
- Test unsafe Rust and calls to external libraries
- Interpret an ASan crash report
trailofbits/skills☆ 76412026年10月16日 更新
Sets up AFL++ to test C/C++ programs with varied generated inputs, a technique called fuzzing. Covers running tests across CPU cores, monitoring progress, reducing input collections, and reproducing crashes for investigation.
中文简介正在准备中。当前显示英语简介。
- Running C/C++ fuzzing across multiple CPU cores
- Exploring further after libFuzzer progress stalls
- Monitoring fuzzing progress and stability
trailofbits/skills☆ 76412026年10月16日 更新
Audits GitHub Actions workflows that run AI coding agents. Traces how attacker-controlled content reaches prompts, checks permissions and sandbox settings, and reports evidence, severity, and fixes for prompt injection and related configuration risks.
中文简介正在准备中。当前显示英语简介。
- Reviewing workflows that run AI coding agents
- Tracing issue and PR content into agent prompts
- Checking sandbox settings and user allowlists
trailofbits/skills☆ 76412026年10月16日 更新
Reviews Algorand smart contracts written in TEAL or PyTeal for 11 vulnerability patterns. Produces a complete coverage table and findings with code references, severity ratings, and suggested fixes, with optional automated checks using Tealer.
中文简介正在准备中。当前显示英语简介。
- Security checks before an Algorand contract audit
- Reviewing TEAL or PyTeal transaction validation
- Verifying fixes for reported vulnerabilities
trailofbits/skills☆ 76412026年10月16日 更新
Set up Atheris to test Python code and C extensions with automatically varied inputs. It guides test harness creation, coverage tracking to explore more code, and AddressSanitizer setup for finding memory errors.
中文简介正在准备中。当前显示英语简介。
- Fuzzing a Python package or parser
- Investigating memory corruption in Python C extensions
- Turning raw bytes into typed test arguments
trailofbits/skills☆ 76412026年10月16日 更新
Connect static analysis results and human audit notes to a Trailmark code graph. Group findings by severity and compare them with input flow, impact, and privilege boundaries to prioritize investigation and understand findings in their code context.
中文简介正在准备中。当前显示英语简介。
- Connecting Semgrep or CodeQL results to code structure
- Combining human audit notes with automated findings
- Prioritizing findings using input flow and impact
trailofbits/skills☆ 76412026年10月16日 更新