PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Use our suite of Ethereum security tools

blog.trailofbits.com | tool | #web3 | #smart-contracts | #fuzzing | #reverse-engineering | #security-tools | #static-analysis | #ethereum | #slither | #echidna | #manticore
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits open-sources its Ethereum security toolkit—Not So Smart Contracts, Slither, Echidna, Manticore, Ethersplay—covering static analysis, fuzzing, symbolic execution, and reversing.
Published
Collected

Related coverage

blog · hackenproof.com
How to use Slither for auditing smart contracts
A hands-on guide to Slither, the Python-based Solidity static analysis framework: installing via pip or Docker, pointing it at a contract, project or mainnet address, and reading its findings.
blog · hackenproof.com
How to use MythX for smart contract auditing
A hands-on guide to MythX, an automated EVM smart contract scanner combining static analysis, dynamic analysis and symbolic execution, from CLI setup and API keys to deep-scan reports.
tool · hackenproof.com
How to install and use Foundry toolkit for smart contract auditing
A step-by-step guide to Foundry, the Rust-based Ethereum toolkit: install via foundryup, scaffold a project with forge init, then test and deploy a contract on a local anvil node.
tool · github.com
ipatool (DrWhax Fork): App Store CLI with Native FairPlay Decryption Pipeline & MCP Integration
Significantly streamlines iOS security auditing and reverse engineering by providing an all-in-one CLI and MCP workflow to retrieve App Store packages and decrypt FairPlay binaries for static analysis.
tool · github.com
gpu-unlock-ada: Linux Kernel Module Unlocking Tensor Core Limits on RTX 40-Series GPUs
Demonstrates how reverse-engineering GPU firmware handoff sequences and hardware registers can bypass artificial consumer hardware compute limits without flashing custom VBIOS, significantly accelerating local AI workloads.
tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
Back