PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Mistreating Triton

blog.quarkslab.com | research | #obfuscation | #program-analysis | #symbolic-execution | #triton | #quarkslab | #concolic-execution
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Experiments that mistreat the Triton concolic-execution framework with forged C programs: unsupported vector instructions, orchestrated forks and inflated path counts to challenge its CFG recovery.
Published
Collected

Related coverage

research · blog.quarkslab.com
Triton v0.8 and ARMv7: A Guideline for Adding New Architectures
A follow-up to the Triton v0.8 release explaining how ARMv7 support was added to the symbolic execution framework and outlining a guideline for integrating new architectures.
research · blog.quarkslab.com
Triton v0.8 is Released!
Triton v0.8 is released under Apache 2.0, bringing bug fixes and features: implicit concretization, new path predicate APIs, ARMv7 support and more, highlighted from a large changelog.
research · blog.quarkslab.com
Symbolic Deobfuscation: From Virtualized Code Back to the Original (DIMVA 2018)
A micro-post on joint research with CEA and VERIMAG (DIMVA 2018): symbolically deobfuscating virtualized hash functions by tainting VM inputs and concretizing unrelated instructions.
research · blog.quarkslab.com
Triton under the hood
Inside Triton, the Pin-based concolic framework from SSTIC 2015: taint engine, symbolic execution, SMT2 translation, Z3 solving and Python bindings for reverse engineering and vulnerability research.
research · blog.quarkslab.com
Defeating AI-Assisted Reverse Engineering (or at Least Trying To)
This coverage gives security teams current context for monitoring, validation, and remediation.
research · blog.quarkslab.com
QBDI vs TritonDSE against a VM: who will be the fastest?
Quarkslab solves a custom-VM CTF challenge twice — with symbolic execution engine TritonDSE and instrumentation framework QBDI — and compares which approach gets to the solution fastest.
Back