文章27
标签0
分类4

angr-04_angr_symbolic_stack

angr-03_angr_symbolic_registers

需要输入三个参数

angr-02_angr_find_condition

angr不仅可以通过地址,还可以通过打印的信息

angr -01_angr_avoid

import angr

p = angr.Project("./01_angr_avoid")

init_state = p.factory.entry_state()

sm = p.factory.simulation_manager(init_state)

sm.explore(find = 0x080485e5 , avoid = 0x080485a8)

found_state = sm.found[0]

found_state.posix.dumps(0)

found_state.posix.dumps(1)

angr-00_angr_find

直接贴上脚本:

import angr

p = angr.Project("./00_angr_find")

init_state = p.factory.entry_state()

sm = p.factory.simulation_manager(init_state)

sm.explore(find = 0x0804864e)

found_state = sm.found[0]

found_state.posix.dumps(0)

found_state.posix.dumps(1)
">