diff --git a/lab7/sol.py b/lab7/sol.py old mode 100644 new mode 100755 index e69de29b..31d11a1a --- a/lab7/sol.py +++ b/lab7/sol.py @@ -0,0 +1,25 @@ +import angr,sys + +def success_condition(state): + return b"Login successful" in state.posix.dumps(sys.stdout.fileno()) + +def fail_condition(state): + return b"Login failed" in state.posix.dumps(sys.stdout.fileno()) + +def main(): + proj = angr.Project('./login') + + init_state = proj.factory.entry_state() + + simulation = proj.factory.simgr(init_state) + + simulation.explore(find = success_condition, avoid = fail_condition) + + solution = simulation.found[0] + + print(solution.posix.dumps(sys.stdin.fileno())) + + +if __name__ == '__main__': + main() +