PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

QBDI vs TritonDSE against a VM: who will be the fastest?

blog.quarkslab.com | research | #ctf | #reverse-engineering | #binary-analysis | #symbolic-execution | #dynamic-instrumentation | #qbdi | #triton
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab solves a custom-VM CTF challenge twice — with symbolic execution engine TritonDSE and instrumentation framework QBDI — and compares which approach gets to the solution fastest.
Published
Collected

Related coverage

research · blog.quarkslab.com
Introducing TritonDSE: A framework for dynamic symbolic execution in Python
Introducing TritonDSE, a Python library atop Triton for customizable dynamic symbolic execution: high-level program exploration primitives, hooks, and the base of PASTIS's white-box fuzzer.
research · blog.quarkslab.com
Triton under the hood
Inside Triton, the Pin-based concolic framework from SSTIC 2015: taint engine, symbolic execution, SMT2 translation, Z3 solving and Python bindings for reverse engineering and vulnerability research.
research · blog.quarkslab.com
PASTIS For The Win!
PASTIS, a Quarkslab framework combining grey-box and white-box fuzzing, won a Google-sponsored SBFT bug-discovery competition and is released as open source under Apache 2.0.
research · blog.quarkslab.com
Triton v0.8 and ARMv7: A Guideline for Adding New Architectures
A follow-up to the Triton v0.8 release explaining how ARMv7 support was added to the symbolic execution framework and outlining a guideline for integrating new architectures.
research · blog.quarkslab.com
Triton v0.8 is Released!
Triton v0.8 is released under Apache 2.0, bringing bug fixes and features: implicit concretization, new path predicate APIs, ARMv7 support and more, highlighted from a large changelog.
research · blog.quarkslab.com
QBDI 0.7.0
QBDI 0.7.0 adds x86 support; the post walks through a Tencent packer use case where QBDI and LIEF instrument the decoding routine to recover a protected .text section on Android.
Back