Sam Brown sam-b

## find_opaque_predicates.py
"""

Detects opaque predicates in single basic blocks, see: http://zubcic.re/blog/experimenting-with-z3-proving-opaque-predicates and https://github.com/JonathanSalwan/Triton/blob/master/src/examples/python/proving_opaque_predicates.py

Sample output:

(angr)sam@angr-dev:~/code/opaque_predicates$ python test.py
WARNING | 2016-08-20 21:13:33,412 | angr.path_group | No completion state defined for path group; stepping until all paths deadend
0x0:	xor	eax, eax
0x2:	jo	9

## hitb.md

      
              1 file
            
          
              0 forks
            
          
                0 comments
              
            
              0 stars
            
          
                sam-b
                / hitb.md
            
            
              Created
              May 29, 2016 11:44
            
              
                brief hackinthebox slide notes/highlights
              
          
    https://conference.hitb.org/hitbsecconf2016ams/materials/D1T1%20-%20Jacob%20Torrey%20-%20Using%20the%20Observer%20Effect%20and%20Cyber%20Fengshui.pdf

  
## generate_strings
import itertools
import string

length = 4
strings = map(''.join, itertools.product(string.uppercase + string.lowercase,repeat=(length-2)))
numbers = [1,2,3,4,5,6,7,8,9,0]
lolwat = []
fuckit = []
for s in strings:
	for i in xrange(len(s) + 1):

## parser
work_count = 0      # track one notion of "time taken"

def addtoset(theset,index,elt):
  if not (elt in theset[index]):
    theset[index] = [elt] + theset[index]
    return True
  return False

def parse(tokens,grammar):
  global work_count
	"""

	Detects opaque predicates in single basic blocks, see: http://zubcic.re/blog/experimenting-with-z3-proving-opaque-predicates and https://github.com/JonathanSalwan/Triton/blob/master/src/examples/python/proving_opaque_predicates.py

	Sample output:

	(angr)sam@angr-dev:~/code/opaque_predicates$ python test.py
	WARNING \| 2016-08-20 21:13:33,412 \| angr.path_group \| No completion state defined for path group; stepping until all paths deadend
	0x0: xor eax, eax
	0x2: jo 9
	import itertools
	import string

	length = 4
	strings = map(''.join, itertools.product(string.uppercase + string.lowercase,repeat=(length-2)))
	numbers = [1,2,3,4,5,6,7,8,9,0]
	lolwat = []
	fuckit = []
	for s in strings:
	for i in xrange(len(s) + 1):
	work_count = 0 # track one notion of "time taken"

	def addtoset(theset,index,elt):
	if not (elt in theset[index]):
	theset[index] = [elt] + theset[index]
	return True
	return False

	def parse(tokens,grammar):
	global work_count