Skip to content

Instantly share code, notes, and snippets.

@NicolaiSoeborg

NicolaiSoeborg/angr-solve.py

Created August 7, 2023 10:22
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save NicolaiSoeborg/9c1b3f8616b9328e54488a7e9cf0ae56 to your computer and use it in GitHub Desktop.
Save NicolaiSoeborg/9c1b3f8616b9328e54488a7e9cf0ae56 to your computer and use it in GitHub Desktop.
Download ZIP
Angr boilerplate
Raw
angr-solve.py
import angr
proj = angr.Project("./chal", auto_load_libs=False)
state = proj.factory.entry_state()
simgr = proj.factory.simulation_manager(state)
simgr.explore(find=lambda s: b"Correct!" in s.posix.dumps(1))
# Out[6]: <SimulationManager with 2 active, 34 deadended, 1 found>
print(simgr.found[0].posix.dumps(0))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment