FSecureLABS / Z3_and_angr_binary_analysis_workshop
Code and exercises for a workshop on z3 and angr
Stars: ✭ 154
Programming Languages
python
139335 projects - #7 most used programming language
Projects that are alternatives of or similar to Z3 and angr binary analysis workshop
Kam1n0 Community
The Kam1n0 Assembly Analysis Platform
Stars: ✭ 467 (+203.25%)
Mutual labels: binary-analysis, reverse-engineering
Macbook issues
《macOS软件安全与逆向分析》勘误
Stars: ✭ 11 (-92.86%)
Mutual labels: binary-analysis, reverse-engineering
Goblin
An impish, cross-platform binary parsing crate, written in Rust
Stars: ✭ 591 (+283.77%)
Mutual labels: binary-analysis, reverse-engineering
Triton
Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64, ARM32 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.
Stars: ✭ 1,934 (+1155.84%)
Mutual labels: binary-analysis, reverse-engineering
Bap
Binary Analysis Platform
Stars: ✭ 1,385 (+799.35%)
Mutual labels: binary-analysis, reverse-engineering
Pev
The PE file analysis toolkit
Stars: ✭ 422 (+174.03%)
Mutual labels: binary-analysis, reverse-engineering
Decomp
Components of a decompilation pipeline.
Stars: ✭ 343 (+122.73%)
Mutual labels: binary-analysis, reverse-engineering
Barf Project
BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework
Stars: ✭ 1,280 (+731.17%)
Mutual labels: binary-analysis, reverse-engineering
Redasm
The OpenSource Disassembler
Stars: ✭ 1,042 (+576.62%)
Mutual labels: binary-analysis, reverse-engineering
Security Notes
📓 Some security related notes
Stars: ✭ 422 (+174.03%)
Mutual labels: binary-analysis, reverse-engineering
Pref
Portable Reverse Engineering Framework
Stars: ✭ 127 (-17.53%)
Mutual labels: binary-analysis, reverse-engineering
Binaryninja Api
Public API, examples, documentation and issues for Binary Ninja
Stars: ✭ 437 (+183.77%)
Mutual labels: binary-analysis, reverse-engineering
Cwe checker
cwe_checker finds vulnerable patterns in binary executables
Stars: ✭ 372 (+141.56%)
Mutual labels: binary-analysis, reverse-engineering
Andromeda
Andromeda - Interactive Reverse Engineering Tool for Android Applications
Stars: ✭ 627 (+307.14%)
Mutual labels: binary-analysis, reverse-engineering
Ddisasm
A fast and accurate disassembler
Stars: ✭ 325 (+111.04%)
Mutual labels: binary-analysis, reverse-engineering
Avatar2
Python core of avatar²
Stars: ✭ 334 (+116.88%)
Mutual labels: binary-analysis, reverse-engineering
Pharos
Automated static analysis tools for binary programs
Stars: ✭ 955 (+520.13%)
Mutual labels: binary-analysis, reverse-engineering
Kiewtai
A port of Kaitai to the Hiew hex editor
Stars: ✭ 108 (-29.87%)
Mutual labels: binary-analysis, reverse-engineering
Intro to Binary Analysis with Z3 and angr
Originally delivered by Sam Brown at Steelcon and hack.lu 2018, this was a three hour workshop introducing attendees to using Z3 and angr for binary analysis. The workshop provided an introduction to SMT solvers, the Z3 SMT solver and its python library and the angr binary analysis framework.
Through out the workshop exercises were provided which aimed to demonstrate potential applications of the technology to assist security researchers in carrying out reverse engineering and vulnerability research.
The slides provide a rough guide for the content and what order to try the exercises in.
Examples and Exercises
Z3
| Name | Type | Description |
|---|---|---|
| N Queens | Example | 'How can N queens be placed on an NxN chessboard so that no two of them attack each other?' Uses Z3 to generate solutions for an N * N chessboard |
| Hackvent 15 | Example | Solution and walk through for solving a Hackvent 15 CTF challenge with Z3 |
| Sudoku | Exercise | Try to solve Sudoku using Z3 |
| RNG | Exercise | Optional exercises - using Z3 to find non-cryptographically secure random number generators seed value |
| x86 | 50/50 | Half examples, half DIY - implement simiplified versions of x86 instructions using Z3 |
| Opaque Predicates | Exercise | Use the instructions implemented previously to identify Opaque Predicates in small sequences of assembly instructions |
| Equivalence Checking | Example | Use the instructions implemented previously to identify equivalent sequences of instructions |
angr
| Name | Type | Description |
|---|---|---|
| opaque_predicates | Example | Using angr to identify opaque predicates with much less work :) |
| IOCTLs | Example | Identify Windows driver IOCTL codes using angr |
| Hello World | 50/50 | Exercise and walkthrough on using angr to generate valid arguments for a simple 'License Key Validator' |
| Bomb Lab | Exercise | DIY exercise using angr to solve a 'Bomb lab' |
Setup
All code is in Python3 and you should only need to install the angr binary analysis framework.
mkvirtualenv --python=$(which python3) angr && python -m pip install angr
workon angr
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].