-
Can I use angr to list all functions' names and addresses of ndk built binary? How?
-
Hi, I want to do symbolic execution over trace.
For a simple binary with a call of `system` function, which arguments are tainted somehow by argv.
```
def symbolic_run(binary, argv)
record…
-
The fgets simprocedure fails to represent the empty input (`"\n"`). Most (all?) other values seem to work.
Minimal example:
```C
#include
#include
void success() {
printf("We win!\n");…
-
Hi,
I updated angr package to latest, but now I have a problem:
```
File "/home/glass/PycharmProjects/driller-afl/venv/lib/python3.6/site-packages/fuzzer/fuzzer.py", line 4, in
import angr…
lzina updated
2 years ago
-
---
**Describe the bug.**
Various weird unexpected results of `TypeBackend.convert`
Sane, though arguably that could be `SimTypeBool` instead of `TOP` ?:
`bt.convert(untyped_int_a == unt…
-
i compplied the source code,and hook the symbol strcmp, i can not get founded result even i use the correct arg1 jsk,how can this be worked to do this job, is that i configed some thing wrong?
```
/…
-
Hi,
Please take a look at this binary
[aes.zip](https://github.com/angr/angr/files/1450265/aes.zip)
1, We are having blocks not in their correct function. Examples are blocks from `0x93c9` to `…
-
The virtual machine OS that SyzGen runs on in paper is `MacOS 10.15`, which I have successfully reproduced.
For some reason I have to migrate SyzGen from `MacOS 10.15` to `MacOS 11.5.2`.
While S…
-
Hello,
My binary had several Anti-Debug Techniques and after quite some debugging time i figured out angr does not set program_invocation_name automatically. Since the name was in the Flag calculat…
-
(Let me know if I'm jumping the gun here..)
I'm getting an error trying to create a simulation manager. The steps I have to reproduce:
1. Open a binary
2. Go to the states view, right click, m…