Douglas Gastonguay

Summary: Trail of Bits published a May 15, 2017 post by Douglas Gastonguay describing how he used Manticore, the firm's binary analysis tool with an API for symbolic execution, taint analysis, and instrumentation, to solve the Magic capture-the-flag challenge. The post notes that Manticore can identify 'interesting' code locations and deduce inputs that reach them, which can generate inputs for improved test coverage or lead execution to a vulnerability.
Bottom line: The tool's stated ability to deduce inputs that lead execution to a vulnerability means the same symbolic-execution capability used to solve a CTF challenge is aimed at finding reachable flaws in real code.

Read the original at Trail of Bits Blog ↗