From 91f9c862783174efd51255468b9ca1f05f4a31e6 Mon Sep 17 00:00:00 2001 From: gren26 <141534378+gren26@users.noreply.github.com> Date: Thu, 13 Jun 2024 02:12:34 +0800 Subject: [PATCH] OK --- lab7/sol.py | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/lab7/sol.py b/lab7/sol.py index e69de29b..a921985a 100644 --- a/lab7/sol.py +++ b/lab7/sol.py @@ -0,0 +1,15 @@ +import angr +import sys + +proj = angr.Project('./login') +init_state = proj.factory.entry_state() +simulation = proj.factory.simgr(init_state) +def success_condition(state): + return b"Login successful" in state.posix.dumps(sys.stdout.fileno()) + +def fail_condition(state): + return b"Login failed" in state.posix.dumps(sys.stdout.fileno()) + +simulation.explore(find=success_condition, avoid=fail_condition) +found = simulation.found[0] +print(found.posix.dumps(0))