Skip to content
This repository has been archived by the owner on Oct 29, 2023. It is now read-only.

dariosharp/SZpy

Repository files navigation

Introduction

SZpy is based on z3 with Symbolic Execution inspired by Diary of a reverse-engineer. The aim of this tool is to improve the PoC present in Breaking Kryptonite's Obfuscation: A Static Analysis Approach Relying on Symbolic Execution. There's a simple difference between ZSpy and the PoC: SZpy is not based on IDA.

When is SZpy useful?

Whenever a function is compiled with static llvm and you're too lazy to analyze it manually.

How to get SZpy

You need python2.7 and if you want to use the associated disassembler you need to install capstone python version. Then you can clone SZpy:

$ git clone https://github.com/dariosharp/SZpy.git

Architectures

Now are only supported i386 and x86-64 but will be available in the near future more architectures.

Execution tutorial

View EXECUTE.md.

Contributors

Myself dariosharp, if you are interested in the project please contact me on twitter or GitHub.

About

Z3 Symbolic Execution python

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages