PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

MUI: Visualizing symbolic execution with Manticore and Binary Ninja

blog.trailofbits.com | blog | #reverse-engineering | #binary-analysis | #binary-ninja | #symbolic-execution | #manticore | #visualization
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

MUI pairs the Manticore symbolic execution engine with Binary Ninja's interface, making state exploration visual and interactive, with custom hooks to tame state explosion during analysis.
Published
Collected

Related coverage

blog · blog.trailofbits.com
Manticore: Symbolic execution for humans
Manticore helps us quickly take advantage of symbolic execution, taint analysis, and instrumentation to analyze binaries.
vulnerability · blog.trailofbits.com
Vulnerability Modeling with Binary Ninja
Trail of Bits shows automated vulnerability discovery on stripped binaries, using Binary Ninja's MLIL and SSA forms with a theorem prover to model and rediscover the Heartbleed bug in OpenSSL.
vulnerability · blog.trailofbits.com
Magic with Manticore
Solving Magic, a DEF CON CTF qualifier with 200 key-protected binaries, using Manticore symbolic execution plus Binary Ninja hooks to automate key extraction instead of manual reversing.
blog · blog.trailofbits.com
Trail of Bits @ Devcon IV Recap
Recap of Trail of Bits' Devcon IV contributions: talks on finding smart contract bugs with Manticore and symbolic execution, blockchain autopsies, and security training.
blog · blog.trailofbits.com
Fault Analysis on RSA Signing
A Trail of Bits intern modeled RSA-CRT fault attacks at the machine level, using Manticore to flip bits and show how a faulty partial signature lets attackers factor n and recover private keys.
blog · blog.trailofbits.com
Videos from Ethereum-focused Empire Hacking
Videos from the December 2017 Empire Hacking meetup—150+ attendees—cover smart contract security history, Ethereum CTF techniques, and symbolic execution of EVM bytecode with Manticore.
Back