Skip to content

Instantly share code, notes, and snippets.

@aaronyoo
Created December 17, 2018 01:57
Show Gist options
  • Save aaronyoo/eff6876b6210e90a1056b9813f42c4c6 to your computer and use it in GitHub Desktop.
Save aaronyoo/eff6876b6210e90a1056b9813f42c4c6 to your computer and use it in GitHub Desktop.
Solution to angerme
import angr
# Load the binary
import angr
proj = angr.Project('angrme')
# Create a simulation manager
simgr = proj.factory.simgr()
# Use the simulation manager to explore until win condition --> :)
simgr.explore(find=lambda s: b":)" in s.posix.dumps(1))
# Get the flag from the state
s = simgr.found[0]
flag = s.posix.dumps(0)
print(flag)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment