PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Manticore: Symbolic execution for humans

blog.trailofbits.com | blog | #open-source | #binary-analysis | #instrumentation | #trail-of-bits | #taint-analysis | #symbolic-execution | #manticore
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Manticore helps us quickly take advantage of symbolic execution, taint analysis, and instrumentation to analyze binaries.
Published
Collected

Related coverage

blog · blog.trailofbits.com
1Password's AI patching benchmark is misleading
Trail of Bits says 1Password's FLAWED benchmark misstates AI patch quality, mixing wrong-fix prompts and no-test trials into a 26% clean-fix headline, and ships two agent skills for better fixes.
blog · blog.trailofbits.com
Symbolic Path Merging in Manticore
A winternship project explores state merging in Manticore: merging similar symbolic states at one program location cut explored paths by 33% in a test, easing symbolic execution's path explosion.
blog · blog.trailofbits.com
Trail of Bits @ Devcon IV Recap
Recap of Trail of Bits' Devcon IV contributions: talks on finding smart contract bugs with Manticore and symbolic execution, blockchain autopsies, and security training.
blog · blog.trailofbits.com
Fault Analysis on RSA Signing
A Trail of Bits intern modeled RSA-CRT fault attacks at the machine level, using Manticore to flip bits and show how a faulty partial signature lets attackers factor n and recover private keys.
blog · blog.trailofbits.com
Videos from Ethereum-focused Empire Hacking
Videos from the December 2017 Empire Hacking meetup—150+ attendees—cover smart contract security history, Ethereum CTF techniques, and symbolic execution of EVM bytecode with Manticore.
vulnerability · blog.trailofbits.com
Vulnerability Modeling with Binary Ninja
Trail of Bits shows automated vulnerability discovery on stripped binaries, using Binary Ninja's MLIL and SSA forms with a theorem prover to model and rediscover the Heartbleed bug in OpenSSL.
Back