Skip to content

Instantly share code, notes, and snippets.

@amatus

amatus/flag.py

Last active June 21, 2016 18:30
Show Gist options
  • Save amatus/c7736eced91b1deb3213f1674fbc9c2b to your computer and use it in GitHub Desktop.
Save amatus/c7736eced91b1deb3213f1674fbc9c2b to your computer and use it in GitHub Desktop.
Download ZIP
Raw
flag.py
import angr
proj = angr.Project('root_fs/bin/flag', load_options={"auto_load_libs": False})
argv1 = angr.claripy.BVS("argv1", 0xE * 8)
initial_state = proj.factory.entry_state(args=["./flag", argv1])
initial_path = proj.factory.path(initial_state)
path_group = proj.factory.path_group(initial_state)
path_group.explore(find=0x10764, avoid=0x10768)
found = path_group.found[0]
print found.state.posix.dumps(1)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment