angrgdb

angrgdb 在 GDB 中使用 angr。根据当前调试器状态创建 angr 状态。 安装 root@kitploit: pip install angrgdb echo "python import angrgdb.commands" /.gdbinit 使用 angrgdb 在 GDB 中实现了 angrdbg API。 你可以在脚本中这样使用： root@kitploit: from angrgdb import gdb.execute"b 0x004005f9" gdb.execute"r aaaaaaaa" sm = StateManager sm.simsm"rax", 1...

angr

angr angr 是一个与平台无关的二进制分析框架。 它由 加州大学圣巴巴拉分校的计算机安全实验室、亚利桑那州立大学的 SEFCOM、它们的 CTF 团队 Shellphish、开源社区以及 @rhelmot 共同提供。 项目链接 主页：https://angr.io 项目仓库：https://github.com/angr/angr 文档：https://docs.angr.io API 文档：https://docs.angr.io/en/latest/api.html 什么是 angr？ angr 是一套 Python 3 库，让你可以加载二进制文件并对其进行许多酷炫操作：...

fuzzable

Fuzzable Framework for Automating Fuzzable Target Discovery with Static Analysis Introduction Vulnerability researchers conducting security assessments on software will often harness the capabilities of coverage-guided fuzzing through powerful tools like AFL++ and libFuzzer. This is important as ...

BootStomp

BootStomp BootStomp 是一个引导加载程序漏洞查找工具。它针对两类不同的漏洞进行检测：内存损坏和状态存储漏洞。更多信息请参考 BootStomp 论文：https://seclab.cs.ucsb.edu/academic/publishing/bootstomp-security-bootloaders-mobile-devices-2017 要运行 BootStomp 的分析，请阅读以下说明。请注意，BootStomp 适用于为 ARM 架构（32 位和 64 位）编译的引导加载程序，并且结果可能因 angr 和 Z3 的版本而略有不同。这是因为 angr...

heaphopper

heaphopper HeapHopper 是一个用于堆实现的有界模型检测框架。 概述 设置 root@kitploit: sudo apt update && sudo apt install build-essential python3-dev virtualenvwrapper git clone https://github.com/angr/heaphopper.git && cd ./heaphopper mkvirtualenv -ppython3 heaphopper pip install -e . 所需软件包 root@kitploit: build-essenti...

Constraint-Guided Multi-Agent Decompilation for Executable Binary Recovery

Decompilation -- recovering source code from compiled binaries -- is essential for security analysis, malware reverse engineering, and legacy software maintenance. However, existing decompilers produce code that often fails to compile or execute correctly, limiting their practical utility. We...

Software-Security-Learning

It is an offensive tool for binary analysis. The repository Software-Security-Learning contains a collection of resources for learning software security, including tools and tutorials for binary analysis. The tools listed include Pharos, Angr, Vuzzer, PEDA, and pwntools, which are used for static...

Zeratool

This repository, Zeratool, is an automatic exploit generation tool for exploitable CTF Capture The Flag problems. It uses the angr concolic analysis engine to analyze binaries and identify vulnerabilities, and then weaponizes these vulnerabilities for remote code execution through pwntools. The...

angr (>=8.18.10.5, <=9.3.2), angr-management (>=9.0.4378, <=9.3.2) +32 more potentially affected by unknown CVE via pyvex (>=8.18.10.5, <=9.3.2)

pyvex PYPI version =8.18.10.5, =8.18.10.5, =9.0.4378, =1.0.0rc2, =1.0.7, =1.0.4, =9.0.4378, =9.0.5610, =1.0.0, =0.2.0, =0.0.1, =9.0.4378, =1.0.3, =0.0.1, =0.1.0, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:OSV-2025-500...

Data Flows in You: Benchmarking and Improving Static Data-Flow Analysis on Binary Executables

Data-flow analysis is a critical component of security research. Theoretically, accurate data-flow analysis in binary executables is an undecidable problem, due to complexities of binary code. Practically, many binary analysis engines offer some data-flow analysis capability, but we lack...

Zeratool

This is an offensive tool for CTF Capture The Flag problems. It is designed to automatically generate exploits and remotely capture flags for exploitable CTF problems. The tool, called Zeratool, uses the angr binary analysis framework to concolically analyze binaries by hooking printf and looking...

Software-Security-Learning

It is an offensive tool for binary exploitation. The primary CVE ID is not explicitly mentioned, but the repository contains information on various software security topics, including binary exploitation. The target product/service or framework is not specified, but the repository includes tools...

Zeratool

This repository, Zeratool, is an automatic exploit generation tool for exploitable CTF Capture The Flag problems. It uses the angr concolic analysis framework to analyze binaries and identify vulnerabilities. The tool can generate exploits for buffer overflow and format string vulnerabilities, an...

autoPwn - Automate Repetitive Tasks For Fuzzing

Warning Completely re-writing this right now. Focus will be on interactive Linux apps that only take input from stdin for starters. Attempting to use Shellphish's Driller and Fuzzer functionality. autoPwn in it's current state will do this in limited form. Simply run autoPwn ./binary then select...

BootStomp - A Bootloader Vulnerability Finder

BootStomp is a boot-loader bug finder. It looks for two different class of bugs: memory corruption and state storage vulnerabilities. For more info please refer to the BootStomp paper at https://seclab.cs.ucsb.edu/academic/publishing/bootstomp-security-bootloaders-mobile-devices-2017 To run...

angr:python-based binary analysis framework-vulnerability warning-the black bar safety net

Foreword Take a look at this Integrated Framework in binary code analysis of the CTF, to solve what the problem it, here is the git are listed in the solution to the CTF game: ! ! Wherein, HackCon 2016 - angry-reverser takes 31 min, SecurityFest 2016 – it takes 20s, Defcamp CTF Qualification...