Did a presentation today on #symbolicexecution and demo'd some of the fine work by #angr as well as some interesting results from the #vsharp team. Not totally sure how the talk went with the audience; but, I'm trying to decide if I want to make some changes & maybe I put in for the Cactus Con CFP which is currently open.

I think idea be interested in showing some reversing analyses like deobfuscating some obfuscated malware maybe? I'm not sure if my skill with some of these tools is quite there yet though.

Still waiting for the call for paper for Tests and Proofs (TAP) conference? Wait no longer: we are thrilled to announce that TAP is now a track at FM 2026: https://conf.researchr.org/track/fm-2026/fm-2026-tap#Call-for-Papers

#FormalMethods #SoftwareTesting #Verification #Proof #SymbolicExecution #FM2026 #TAP2026

After reading angr docs for the better part of the day, I was able to solve OverTheWire's Leviathan levels 1->2 and 6->7. Not 3->4 so far, but that's left for tomorrow. It's definitely an exciting journey!

Wanna join in? Read up at https://docs.angr.io/en/latest/ and drop me a line!

#ctf #cybersecurity #overthewire #leviathan #angr #symbolicexecution

Symbolic Execution is powerful technique that explores all possible execution paths without actual inputs. An interesting display of this technique is below:

https://doar-e.github.io/blog/2014/10/11/taiming-a-wild-nanomite-protected-mips-binary-with-symbolic-execution-no-such-crackme/

#malware #reverseengineering #cybersecurity #infosec #symbolicexecution

Where are we on using #klee with #Rust for #symbolicexecution? (https://www.unwoundstack.com/blog/klee-and-rust.html)

💪 #ARM yourself with knowledge about #SymbolicExecution! Get hands-on experience with Jeremy Blackthorne's #training "Symbolic Execution with #angr on Real-World Targets", and learn how to perform symbolic and concolic execution with angr!

🎟️ https://ringzer0.training/trainings/symbolic-execution-with-angr.html

Also, #SymbolicExecution of even small #binaries is very slow and would only, probably, help for comparing binaries for the same (or compatible) architecture. And in order to compare binaries for the same architectures you have a myriad of different, not terribly slow, ways for doing #BinDiffing.

#BinaryDiffing

Dear everyone in the academia (and maybe elsewhere) doing #bindiffing research: #SymbolicExecution does not work for comparing different architectures, unless you are using as input for your symbolic execution tool *decompiled code*.

If you are using assembly or using an IR (Intermediate Representation) based on assembler (like Ghidra' p-code, IDA's microcode, LLVM's IR, etc), it will inevitably produce different outputs.

Your best IR for #diffing is pseudo-code, the #decompiler's output.

💪 #ARM yourself with knowledge about #SymbolicExecution! Get hands-on experience with Jeremy Blackthorne's #training "Symbolic Execution with #angr on Real-World Targets", and learn how to perform symbolic and concolic execution with angr!

🎟️ https://ringzer0.training/trainings/symbolic-execution-with-angr.html

💪 #ARM yourself with knowledge about #SymbolicExecution! Get hands-on experience with Jeremy Blackthorne's #training "Symbolic Execution with #angr on Real-World Targets". Get your ticket now!

🎟️ https://ringzer0.training/trainings/symbolic-execution-with-angr.html

💪 #ARM yourself with knowledge about #SymbolicExecution! Get hands-on experience with Jeremy Blackthorne's #training "Symbolic Execution with #angr on Real-World Targets". Get your ticket now!

🎟️ https://ringzer0.training/trainings/symbolic-execution-with-angr.html

📢 Don’t forget to sign up for one of our advanced hands-on #infosec trainings! The final week of #RETURN23XPLOIT is only a few days away. Our trainings offer hands-on instruction from top industry experts. Learn all about #Ventura #Exploitation, #SymbolicExecution, #ReverseEngineering, #Cryptography & more. Don't miss out - register now!

https://ringzer0.training/

#cybersecurity #training

Level up your #cybersecurity skills with #RETURN23XPLOIT! Our trainings offer hands-on instruction from top industry experts. In week 2, learn #Ventura #Exploitation, #SymbolicExecution, #ReverseEngineering, #Cryptography & more. Don't miss out!

https://ringzer0.training/

#infosec #training

How I gave ManticoreUI a makeover

https://blog.trailofbits.com/2022/12/15/manitcoreui-symbolic-execution-gui/

#SymbolicExecution #Manticore

How I gave ManticoreUI a makeover - By Calvin Fong
During my internship at Trail of Bits, I explored the effectiveness... https://blog.trailofbits.com/2022/12/15/manitcoreui-symbolic-execution-gui/ #symbolicexecution #manticore

Manticore GUIs made easy - By Wong Kok Rui, National University of Singapore
Trail of Bits maintains Manticor... https://blog.trailofbits.com/2022/12/13/manticore-gui-plugin-binary-ninja-ghidra/ #symbolicexecution #binaryninja #manticore #ghidra

Manticore GUIs made easy

https://blog.trailofbits.com/2022/12/13/manticore-gui-plugin-binary-ninja-ghidra/

#symbolicexecution #BinaryNinja #Manticore #Ghidra

Maat: Symbolic execution made easy - By Boyan Milanov
We have released Maat, a cross-architecture, multi-purpose, and u... https://blog.trailofbits.com/2022/02/23/maat-symbolic-execution-made-easy/ #symbolicexecution #uncategorized

MUI: Visualizing symbolic execution with Manticore and Binary Ninja - By Alan Chang, University of Oxford
During my summer internship, I had the wonderf... https://blog.trailofbits.com/2021/11/17/mui-visualizing-symbolic-execution-with-manticore-and-binary-ninja/ #internshipprojects #symbolicexecution #binaryninja #manticore

Contract verification made easier - Smart contract authors can now express security properties in the same language they use to write ... more: https://blog.trailofbits.com/2020/07/12/new-manticore-verifier-for-smart-contracts/ #symbolicexecution #blockchain #manticore