dAngr offers a streamlined approach to leverage angr's powerful symbolic execution capabilities within a user-friendly command-line interface (CLI) environment, eliminating the necessity for extensive programming knowledge usually required to use angr. Providing powerful capabilities for analyzing and debugging binaries.
- Perform symbolic execution on binaries for debugging purposes.
- Command-line interface for easy interaction.
- Easy way to call a function with chosen arguments without the hassle of memory management and argument parsing.
- Platform independent execution
To use dAngr, follow these steps:
-
Preferable create a virtual environment, for instance using venv.
-
Install the required dependencies by running the following command:
pip install .Note: on MacOS you may need to run the following for now:
pip install --pre --no-binary capstone capstone==5.0.0.post1- Run dAngr:
dAngrFor simplicity dAngr is also available using a Dockerfile.
Build Dockerfile to create an clean environment for dAngr.
docker build -t dangr .Run the Docker image and get the dAngr command prompt.
docker run -it dangrIf you wish to run the dAngr Docker on your own binaries, you may need use shared volumes.
docker run -it dAngr -v <loal-binary-dir>:/home/ubuntu/dAngr/<binaryfile>- In the debugger prompt, you can find help as follows:
(dAngr)> helpFurther documentation on the commands that may be used can be found here.
A basic example, demonstrating the capabilities of dAngr, can be found here
A more practical example, a simplified version of the vulnerability found in the Eufy ecosystem, can be found here
Without specifying any concrete inputs, dAngr will execute the target binary using symbolic inputs.
Contributions to dAngr are welcome! If you find any bugs or have suggestions for new features, please open an issue or submit a pull request on GitHub.
This research has been conducted at the Embedded Testing Team from the DistriNet Research Group at KU Leuven, campus Ghent.
Check out our other research here
Have questions or feedback? Don't hesitate to reach out to us! open an issue on our repository or feel free to contact one of the authors.
This project is licensed under the MIT License - see the LICENSE file for details.
When installing pygraphviz, you may need to first install graphviz with dev extensions: apt-get install graphviz graphviz-dev