angr 9.2.119__tar.gz → 9.2.120__tar.gz

angr-9.2.120/PKG-INFO

@@ -0,0 +1,119 @@
+Metadata-Version: 2.1
+Name: angr
+Version: 9.2.120
+Summary: A multi-architecture binary analysis toolkit, with the ability to perform dynamic symbolic execution and various static analyses on binaries
+Home-page: https://github.com/angr/angr
+License: BSD-2-Clause
+Classifier: License :: OSI Approved :: BSD License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: CppHeaderParser
+Requires-Dist: GitPython
+Requires-Dist: ailment==9.2.120
+Requires-Dist: archinfo==9.2.120
+Requires-Dist: cachetools
+Requires-Dist: capstone==5.0.3
+Requires-Dist: cffi>=1.14.0
+Requires-Dist: claripy==9.2.120
+Requires-Dist: cle==9.2.120
+Requires-Dist: itanium-demangler
+Requires-Dist: mulpyplexer
+Requires-Dist: nampa
+Requires-Dist: networkx!=2.8.1,>=2.0
+Requires-Dist: protobuf>=3.19.0
+Requires-Dist: psutil
+Requires-Dist: pycparser>=2.18
+Requires-Dist: pyformlang
+Requires-Dist: pyvex==9.2.120
+Requires-Dist: rich>=13.1.0
+Requires-Dist: sortedcontainers
+Requires-Dist: sympy
+Requires-Dist: unicorn==2.0.1.post1
+Requires-Dist: unique-log-filter
+Requires-Dist: colorama; platform_system == "Windows"
+Provides-Extra: angrdb
+Requires-Dist: sqlalchemy; extra == "angrdb"
+Provides-Extra: docs
+Requires-Dist: furo; extra == "docs"
+Requires-Dist: myst-parser; extra == "docs"
+Requires-Dist: sphinx; extra == "docs"
+Requires-Dist: sphinx-autodoc-typehints; extra == "docs"
+Provides-Extra: pcode
+Requires-Dist: pypcode~=3.0; extra == "pcode"
+Provides-Extra: telemetry
+Requires-Dist: opentelemetry-api; extra == "telemetry"
+Provides-Extra: testing
+Requires-Dist: keystone-engine; extra == "testing"
+Requires-Dist: pypcode~=3.0; extra == "testing"
+Requires-Dist: pytest; extra == "testing"
+Requires-Dist: pytest-split; extra == "testing"
+Requires-Dist: pytest-xdist; extra == "testing"
+Requires-Dist: sqlalchemy; extra == "testing"
+
+# angr
+
+[![Latest Release](https://img.shields.io/pypi/v/angr.svg)](https://pypi.python.org/pypi/angr/)
+[![Python Version](https://img.shields.io/pypi/pyversions/angr)](https://pypi.python.org/pypi/angr/)
+[![PyPI Statistics](https://img.shields.io/pypi/dm/angr.svg)](https://pypistats.org/packages/angr)
+[![License](https://img.shields.io/github/license/angr/angr.svg)](https://github.com/angr/angr/blob/master/LICENSE)
+
+angr is a platform-agnostic binary analysis framework.
+It is brought to you by [the Computer Security Lab at UC Santa Barbara](https://seclab.cs.ucsb.edu), [SEFCOM at Arizona State University](https://sefcom.asu.edu), their associated CTF team, [Shellphish](https://shellphish.net), the open source community, and **[@rhelmot](https://github.com/rhelmot)**.
+
+## Project Links
+Homepage: https://angr.io
+
+Project repository: https://github.com/angr/angr
+
+Documentation: https://docs.angr.io
+
+API Documentation: https://api.angr.io/en/latest/
+
+## What is angr?
+
+angr is a suite of Python 3 libraries that let you load a binary and do a lot of cool things to it:
+
+- Disassembly and intermediate-representation lifting
+- Program instrumentation
+- Symbolic execution
+- Control-flow analysis
+- Data-dependency analysis
+- Value-set analysis (VSA)
+- Decompilation
+
+The most common angr operation is loading a binary: `p = angr.Project('/bin/bash')` If you do this in an enhanced REPL like IPython, you can use tab-autocomplete to browse the [top-level-accessible methods](https://docs.angr.io/docs/toplevel) and their docstrings.
+
+The short version of "how to install angr" is `mkvirtualenv --python=$(which python3) angr && python -m pip install angr`.
+
+## Example
+
+angr does a lot of binary analysis stuff.
+To get you started, here's a simple example of using symbolic execution to get a flag in a CTF challenge.
+
+```python
+import angr
+
+project = angr.Project("angr-doc/examples/defcamp_r100/r100", auto_load_libs=False)
+
+@project.hook(0x400844)
+def print_flag(state):
+    print("FLAG SHOULD BE:", state.posix.dumps(0))
+    project.terminate_execution()
+
+project.execute()
+```
+
+# Quick Start
+
+- [Install Instructions](https://docs.angr.io/introductory-errata/install)
+- Documentation as [HTML](https://docs.angr.io/) and sources in the angr [Github repository](https://github.com/angr/angr/tree/master/docs)
+- Dive right in: [top-level-accessible methods](https://docs.angr.io/core-concepts/toplevel)
+- [Examples using angr to solve CTF challenges](https://docs.angr.io/examples).
+- [API Reference](https://angr.io/api-doc/)
+- [awesome-angr repo](https://github.com/degrigis/awesome-angr)

angr-9.2.120/angr/__init__.py

@@ -0,0 +1,363 @@
+# pylint: disable=wildcard-import
+# pylint: disable=wrong-import-position
+from __future__ import annotations
+
+__version__ = "9.2.120"
+
+if bytes is str:
+    raise Exception(
+        """
+
+=-=-=-=-=-=-=-=-=-=-=-=-=  WELCOME TO THE FUTURE!  =-=-=-=-=-=-=-=-=-=-=-=-=-=
+
+angr has transitioned to python 3. Due to the small size of the team behind it,
+we can't reasonably maintain compatibility between both python 2 and python 3.
+If you want to continue using the most recent version of angr (you definitely
+want that, trust us) you should upgrade to python 3. It's like getting your
+vaccinations. It hurts a little bit initially but in the end it's worth it.
+
+For more information, see here: https://docs.angr.io/appendix/migration
+
+Good luck!
+"""
+    )
+
+from .utils.formatting import setup_terminal
+
+setup_terminal()
+del setup_terminal
+
+# let's set up some bootstrap logging
+import logging
+
+logging.getLogger("angr").addHandler(logging.NullHandler())
+from .misc.loggers import Loggers
+
+loggers = Loggers()
+del Loggers
+del logging
+
+# this must happen first, prior to initializing analyses
+from .sim_procedure import SimProcedure
+from .procedures import SIM_PROCEDURES, SimProcedures, SIM_LIBRARIES, SIM_TYPE_COLLECTIONS
+
+from . import sim_options
+
+options = sim_options  # alias
+
+# enums
+from .state_plugins.inspect import BP_BEFORE, BP_AFTER, BP_BOTH, BP_IPDB, BP_IPYTHON
+
+# other stuff
+from .state_plugins.inspect import BP
+from .state_plugins import SimStatePlugin
+
+from .project import Project, load_shellcode
+from .errors import (
+    AngrError,
+    AngrRuntimeError,
+    AngrValueError,
+    AngrLifterError,
+    AngrExitError,
+    AngrPathError,
+    AngrVaultError,
+    PathUnreachableError,
+    SimulationManagerError,
+    AngrInvalidArgumentError,
+    AngrSurveyorError,
+    AngrAnalysisError,
+    AngrBladeError,
+    AngrBladeSimProcError,
+    AngrAnnotatedCFGError,
+    AngrBackwardSlicingError,
+    AngrCallableError,
+    AngrCallableMultistateError,
+    AngrSyscallError,
+    AngrSimOSError,
+    AngrAssemblyError,
+    AngrTypeError,
+    AngrMissingTypeError,
+    AngrIncongruencyError,
+    AngrForwardAnalysisError,
+    AngrSkipJobNotice,
+    AngrDelayJobNotice,
+    AngrJobMergingFailureNotice,
+    AngrJobWideningFailureNotice,
+    AngrCFGError,
+    AngrVFGError,
+    AngrVFGRestartAnalysisNotice,
+    AngrDataGraphError,
+    AngrDDGError,
+    AngrLoopAnalysisError,
+    AngrExplorationTechniqueError,
+    AngrExplorerError,
+    AngrDirectorError,
+    AngrTracerError,
+    AngrDBError,
+    AngrCorruptDBError,
+    AngrIncompatibleDBError,
+    TracerEnvironmentError,
+    SimError,
+    SimStateError,
+    SimMergeError,
+    SimMemoryError,
+    SimMemoryMissingError,
+    SimAbstractMemoryError,
+    SimRegionMapError,
+    SimMemoryLimitError,
+    SimMemoryAddressError,
+    SimFastMemoryError,
+    SimEventError,
+    SimPosixError,
+    SimFilesystemError,
+    SimSymbolicFilesystemError,
+    SimFileError,
+    SimHeapError,
+    SimUnsupportedError,
+    SimSolverError,
+    SimSolverModeError,
+    SimSolverOptionError,
+    SimValueError,
+    SimUnsatError,
+    SimOperationError,
+    UnsupportedIROpError,
+    SimExpressionError,
+    UnsupportedIRExprError,
+    SimCCallError,
+    UnsupportedCCallError,
+    SimUninitializedAccessError,
+    SimStatementError,
+    UnsupportedIRStmtError,
+    UnsupportedDirtyError,
+    SimMissingTempError,
+    SimEngineError,
+    SimIRSBError,
+    SimTranslationError,
+    SimProcedureError,
+    SimProcedureArgumentError,
+    SimShadowStackError,
+    SimFastPathError,
+    SimIRSBNoDecodeError,
+    AngrUnsupportedSyscallError,
+    UnsupportedSyscallError,
+    SimReliftException,
+    SimSlicerError,
+    SimActionError,
+    SimCCError,
+    SimUCManagerError,
+    SimUCManagerAllocationError,
+    SimUnicornUnsupport,
+    SimUnicornError,
+    SimUnicornSymbolic,
+    SimEmptyCallStackError,
+    SimStateOptionsError,
+    SimException,
+    SimSegfaultException,
+    SimSegfaultError,
+    SimZeroDivisionException,
+    AngrNoPluginError,
+    SimConcreteMemoryError,
+    SimConcreteRegisterError,
+    SimConcreteBreakpointError,
+    AngrDecompilationError,
+    UnsupportedNodeTypeError,
+)
+from .blade import Blade
+from .simos import SimOS
+from .block import Block
+from .sim_manager import SimulationManager
+from .analyses import Analysis, register_analysis
+from . import analyses
+from . import knowledge_plugins
+from . import exploration_techniques
+from .exploration_techniques import ExplorationTechnique
+from . import sim_type as types
+from .state_hierarchy import StateHierarchy
+
+from .sim_state import SimState
+from . import engines
+from .calling_conventions import default_cc, DEFAULT_CC, SYSCALL_CC, PointerWrapper, SimCC
+from .storage.file import (
+    SimFileBase,
+    SimFile,
+    SimPackets,
+    SimFileStream,
+    SimPacketsStream,
+    SimFileDescriptor,
+    SimFileDescriptorDuplex,
+)
+from .state_plugins.filesystem import SimMount, SimHostFilesystem
+from .state_plugins.heap import SimHeapBrk, SimHeapPTMalloc, PTChunk
+from . import concretization_strategies
+from .distributed import Server
+from .knowledge_base import KnowledgeBase
+from .procedures.definitions import load_external_definitions
+
+# for compatibility reasons
+from . import sim_manager as manager
+
+# now that we have everything loaded, re-grab the list of loggers
+loggers.load_all_loggers()
+
+load_external_definitions()
+
+__all__ = (
+    "SimProcedure",
+    "SIM_PROCEDURES",
+    "SIM_LIBRARIES",
+    "SIM_TYPE_COLLECTIONS",
+    "sim_options",
+    "options",
+    "BP_BEFORE",
+    "BP_AFTER",
+    "BP_BOTH",
+    "BP_IPDB",
+    "BP_IPYTHON",
+    "BP",
+    "SimStatePlugin",
+    "Project",
+    "load_shellcode",
+    "AngrError",
+    "AngrRuntimeError",
+    "AngrValueError",
+    "AngrLifterError",
+    "AngrExitError",
+    "AngrPathError",
+    "AngrVaultError",
+    "PathUnreachableError",
+    "SimulationManagerError",
+    "AngrInvalidArgumentError",
+    "AngrSurveyorError",
+    "AngrAnalysisError",
+    "AngrBladeError",
+    "AngrBladeSimProcError",
+    "AngrAnnotatedCFGError",
+    "AngrBackwardSlicingError",
+    "AngrCallableError",
+    "AngrCallableMultistateError",
+    "AngrSyscallError",
+    "AngrSimOSError",
+    "AngrAssemblyError",
+    "AngrTypeError",
+    "AngrMissingTypeError",
+    "AngrIncongruencyError",
+    "AngrForwardAnalysisError",
+    "AngrSkipJobNotice",
+    "AngrDelayJobNotice",
+    "AngrJobMergingFailureNotice",
+    "AngrJobWideningFailureNotice",
+    "AngrCFGError",
+    "AngrVFGError",
+    "AngrVFGRestartAnalysisNotice",
+    "AngrDataGraphError",
+    "AngrDDGError",
+    "AngrLoopAnalysisError",
+    "AngrExplorationTechniqueError",
+    "AngrExplorerError",
+    "AngrDirectorError",
+    "AngrTracerError",
+    "AngrDBError",
+    "AngrCorruptDBError",
+    "AngrIncompatibleDBError",
+    "TracerEnvironmentError",
+    "SimError",
+    "SimStateError",
+    "SimMergeError",
+    "SimMemoryError",
+    "SimMemoryMissingError",
+    "SimAbstractMemoryError",
+    "SimRegionMapError",
+    "SimMemoryLimitError",
+    "SimMemoryAddressError",
+    "SimFastMemoryError",
+    "SimEventError",
+    "SimPosixError",
+    "SimFilesystemError",
+    "SimSymbolicFilesystemError",
+    "SimFileError",
+    "SimHeapError",
+    "SimUnsupportedError",
+    "SimSolverError",
+    "SimSolverModeError",
+    "SimSolverOptionError",
+    "SimValueError",
+    "SimUnsatError",
+    "SimOperationError",
+    "UnsupportedIROpError",
+    "SimExpressionError",
+    "UnsupportedIRExprError",
+    "SimCCallError",
+    "UnsupportedCCallError",
+    "SimUninitializedAccessError",
+    "SimStatementError",
+    "UnsupportedIRStmtError",
+    "UnsupportedDirtyError",
+    "SimMissingTempError",
+    "SimEngineError",
+    "SimIRSBError",
+    "SimTranslationError",
+    "SimProcedureError",
+    "SimProcedureArgumentError",
+    "SimShadowStackError",
+    "SimFastPathError",
+    "SimIRSBNoDecodeError",
+    "AngrUnsupportedSyscallError",
+    "UnsupportedSyscallError",
+    "SimReliftException",
+    "SimSlicerError",
+    "SimActionError",
+    "SimCCError",
+    "SimUCManagerError",
+    "SimUCManagerAllocationError",
+    "SimUnicornUnsupport",
+    "SimUnicornError",
+    "SimUnicornSymbolic",
+    "SimEmptyCallStackError",
+    "SimStateOptionsError",
+    "SimException",
+    "SimSegfaultException",
+    "SimSegfaultError",
+    "SimZeroDivisionException",
+    "AngrNoPluginError",
+    "SimConcreteMemoryError",
+    "SimConcreteRegisterError",
+    "SimConcreteBreakpointError",
+    "AngrDecompilationError",
+    "UnsupportedNodeTypeError",
+    "Blade",
+    "SimOS",
+    "Block",
+    "SimulationManager",
+    "Analysis",
+    "register_analysis",
+    "analyses",
+    "knowledge_plugins",
+    "exploration_techniques",
+    "ExplorationTechnique",
+    "types",
+    "StateHierarchy",
+    "SimState",
+    "engines",
+    "DEFAULT_CC",
+    "default_cc",
+    "SYSCALL_CC",
+    "PointerWrapper",
+    "SimCC",
+    "SimFileBase",
+    "SimFile",
+    "SimPackets",
+    "SimFileStream",
+    "SimPacketsStream",
+    "SimFileDescriptor",
+    "SimFileDescriptorDuplex",
+    "SimMount",
+    "SimHostFilesystem",
+    "SimHeapBrk",
+    "SimHeapPTMalloc",
+    "PTChunk",
+    "concretization_strategies",
+    "Server",
+    "manager",
+    "SimProcedures",
+    "KnowledgeBase",
+)

angr-9.2.120/angr/__main__.py

@@ -0,0 +1,89 @@
+from __future__ import annotations
+
+import argparse
+import sys
+
+from angr.analyses.decompiler import DECOMPILATION_PRESETS
+from angr.analyses.decompiler.structuring import STRUCTURER_CLASSES, DEFAULT_STRUCTURER
+from angr.analyses.decompiler.utils import decompile_functions
+
+
+class COMMANDS:
+    """
+    The commands that the angr CLI supports.
+    """
+
+    DECOMPILE = "decompile"
+    ALL_COMMANDS = [DECOMPILE]
+
+
+def main(args=sys.argv[1:], out=sys.stdout):
+    parser = argparse.ArgumentParser(description="The angr CLI allows you to decompile and analyze binaries.")
+    parser.add_argument(
+        "command",
+        help="""
+        The analysis type to run on the binary. All analysis is output to stdout.""",
+        choices=COMMANDS.ALL_COMMANDS,
+    )
+    parser.add_argument("binary", help="The path to the binary to analyze.")
+    parser.add_argument(
+        "--functions",
+        help="""
+        The functions to analyze under the current command. Functions can either be expressed as names found in the
+        symbols of the binary or as addresses like: 0x401000.""",
+        nargs="+",
+    )
+    parser.add_argument(
+        "--catch-exceptions",
+        help="""
+        Catch exceptions during analysis. The scope of error handling may depend on the command used for analysis.
+        If multiple functions are specified for analysis, each function will be handled individually.""",
+        action="store_true",
+        default=False,
+    )
+    parser.add_argument(
+        "--base-addr",
+        help="""
+        The base address of the binary. This is useful when the binary is loaded at a different address than the one
+        specified in the ELF header.""",
+        type=lambda x: int(x, 0),
+        default=None,
+    )
+    # decompilation-specific arguments
+    parser.add_argument(
+        "--structurer",
+        help="The structuring algorithm to use for decompilation.",
+        choices=STRUCTURER_CLASSES.keys(),
+        default=DEFAULT_STRUCTURER.NAME,
+    )
+    parser.add_argument(
+        "--no-casts",
+        help="Do not show type casts in the decompiled output.",
+        action="store_true",
+        default=False,
+    )
+    parser.add_argument(
+        "--preset",
+        help="The configuration preset to use for decompilation.",
+        choices=DECOMPILATION_PRESETS,
+        default="default",
+    )
+
+    args = parser.parse_args(args)
+    if args.command == COMMANDS.DECOMPILE:
+        decompilation = decompile_functions(
+            args.binary,
+            functions=args.functions,
+            structurer=args.structurer,
+            catch_errors=args.catch_exceptions,
+            show_casts=not args.no_casts,
+            base_address=args.base_addr,
+            preset=args.preset,
+        )
+        print(decompilation, file=out)
+    else:
+        parser.print_help(file=out)
+
+
+if __name__ == "__main__":
+    main()

angr-9.2.120/angr/analyses/__init__.py

@@ -0,0 +1,104 @@
+# pylint:disable=wrong-import-position
+from __future__ import annotations
+
+from .analysis import Analysis, AnalysesHub
+
+
+def register_analysis(cls, name):
+    AnalysesHub.register_default(name, cls)
+
+
+from .forward_analysis import ForwardAnalysis, visitors
+from .propagator import PropagatorAnalysis
+from .cfg import CFGFast, CFGEmulated, CFG, CFGArchOptions, CFGFastSoot
+from .cdg import CDG
+from .ddg import DDG
+from .vfg import VFG
+from .boyscout import BoyScout
+
+from .backward_slice import BackwardSlice
+from .veritesting import Veritesting
+from .vsa_ddg import VSA_DDG
+from .bindiff import BinDiff
+from .loopfinder import LoopFinder
+from .congruency_check import CongruencyCheck
+from .static_hooker import StaticHooker
+from .reassembler import Reassembler
+from .binary_optimizer import BinaryOptimizer
+from .disassembly import Disassembly
+from .variable_recovery import VariableRecovery, VariableRecoveryFast
+from .identifier import Identifier
+from .callee_cleanup_finder import CalleeCleanupFinder
+from .reaching_definitions import ReachingDefinitionsAnalysis
+from .calling_convention import CallingConventionAnalysis
+from .code_tagging import CodeTagging
+from .stack_pointer_tracker import StackPointerTracker
+from .dominance_frontier import DominanceFrontier
+from .data_dep import DataDependencyGraphAnalysis
+from .decompiler import Decompiler
+from .soot_class_hierarchy import SootClassHierarchy
+from .xrefs import XRefsAnalysis
+from .init_finder import InitializationFinder
+from .complete_calling_conventions import CompleteCallingConventionsAnalysis
+from .typehoon import Typehoon
+from .proximity_graph import ProximityGraphAnalysis
+from .vtable import VtableFinder
+from .find_objects_static import StaticObjectFinder
+from .class_identifier import ClassIdentifier
+from .flirt import FlirtAnalysis
+from .s_propagator import SPropagatorAnalysis
+from .s_reaching_definitions import SReachingDefinitionsAnalysis
+from .s_liveness import SLivenessAnalysis
+
+
+__all__ = (
+    "Analysis",
+    "AnalysesHub",
+    "register_analysis",
+    "ForwardAnalysis",
+    "visitors",
+    "PropagatorAnalysis",
+    "CFGFast",
+    "CFGEmulated",
+    "CFG",
+    "CFGArchOptions",
+    "CFGFastSoot",
+    "CDG",
+    "DDG",
+    "VFG",
+    "BoyScout",
+    "BackwardSlice",
+    "Veritesting",
+    "VSA_DDG",
+    "BinDiff",
+    "LoopFinder",
+    "CongruencyCheck",
+    "StaticHooker",
+    "Reassembler",
+    "BinaryOptimizer",
+    "Disassembly",
+    "VariableRecovery",
+    "VariableRecoveryFast",
+    "Identifier",
+    "CalleeCleanupFinder",
+    "ReachingDefinitionsAnalysis",
+    "CallingConventionAnalysis",
+    "CodeTagging",
+    "StackPointerTracker",
+    "DominanceFrontier",
+    "DataDependencyGraphAnalysis",
+    "Decompiler",
+    "SootClassHierarchy",
+    "XRefsAnalysis",
+    "InitializationFinder",
+    "CompleteCallingConventionsAnalysis",
+    "Typehoon",
+    "ProximityGraphAnalysis",
+    "VtableFinder",
+    "StaticObjectFinder",
+    "ClassIdentifier",
+    "FlirtAnalysis",
+    "SPropagatorAnalysis",
+    "SReachingDefinitionsAnalysis",
+    "SLivenessAnalysis",
+)