angr/angr

Features

• Symbolic Execution Engines - Uses a symbolic execution engine to explore program paths and determine conditions required to reach specific states.
• Binary Analysis Frameworks - Provides a comprehensive environment for disassembling, decompiling, and analyzing compiled software binaries.
• Static Analysis Tools - Provides a framework for examining compiled binaries without execution to determine program structure and behavior.
• Decompilers - Translates compiled binary machine code back into higher-level representations for reverse engineering.
• Reverse Engineering Tools - Analyzes the internal logic and structure of compiled applications to understand behavior without source code.
• Cross-Architecture Binary Analysis - Enables analysis of binaries across different CPU architectures by lifting code to an intermediate representation.
• Intermediate Representation Lifting - Translates machine code from various architectures into a common intermediate representation to enable unified analysis.
• Static Binary Analysis - Performs static analysis on compiled binaries to determine intended behavior and internal structure without execution.
• Processor Emulators - Simulates target processors and memory environments to execute guest code without host hardware dependency.
• Binary Lifting - Translates machine code from various architectures into a common intermediate representation for unified analysis.
• Constraint Satisfaction Solvers - Integrates constraint satisfaction solvers to determine the reachability of specific program execution paths.
• Control Flow Analysis Tools - Provides utilities to reconstruct logical execution paths and branching structures from binary code.
• Control-Flow Graph Generation - Automates the generation of control-flow graphs by mapping jumps and branches between basic blocks in binaries.
• Value Set Analysis - Estimates the possible range of values for registers and memory locations at various program points.
• Binary Instrumentation - Injects custom hooks into binaries to monitor internal states and modify behavior during analysis.
• Code Sandboxing Environments - Executes guest code within secure isolated environments to prevent unauthorized manipulation of the host system during analysis.
• Vulnerability Research - Identifies security flaws in binaries by tracing data dependencies and exploring execution paths.
• Taint Analysis Engines - Implements taint analysis engines to track the propagation of symbolic inputs through program data flows.
• Data Dependency Analysis - Identifies data dependencies to determine how specific inputs influence program outputs and internal behaviors.
• Binary Analysis - Framework for binary analysis and symbolic execution.
• Binary Analysis Frameworks - Platform-agnostic binary analysis framework.
• Binary Analysis - Framework for binary analysis and symbolic execution.
• Reverse Engineering - Platform-agnostic binary analysis framework.
• Reverse Engineering Tools - Framework for binary analysis, symbolic execution, and vulnerability research.
• Security and Vulnerability Scanning - Binary analysis framework supporting symbolic execution.

Star history