We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent c0beebe commit 5b078d1Copy full SHA for 5b078d1
lab7/sol.py
@@ -0,0 +1,13 @@
1
+import angr, sys
2
+proj = angr.project('./login')
3
+init_state = Proj.factory.entry_state()
4
+simulation = proj.factory.simgr(init_state)
5
+
6
+def success_condition(state):
7
+ return b"Login successful" in state.posix.dumpss(sys.stdout.fileno())
8
+def fail_condition(state):
9
+ return b"Login failed" in state.posix.dumps(sys.stdout.fileno)
10
+simulation.explore(find=success_condition, avoid=fail_condition)
11
+solution = simulation.found[0]
12
+print(solution.posix.dumps(sys.stdin.fileno()))
13
+#b'HETOBRCUVWOBFEBB'
0 commit comments