Cyber Risks · Trail of Bits Blog

Manticore: Symbolic execution for humans

Summary: Trail of Bits open-sourced Manticore, a tool for dynamic binary analysis that uses symbolic execution, taint analysis, and instrumentation, with parts of it underpinning the company's symbolic execution capabilities in the Cyber Grand Challenge. The release includes a command-line tool that generates program test cases producing unique outcomes such as normal exits or crashes, plus a Python API for custom analyses, and an earlier version was used for symbolic execution vulnerability hunting in the Cyber Grand Challenge and is being used to build a custom program analyzer for DARPA LADS.

Key Takeaway: The same symbolic execution engine that hunted vulnerabilities in DARPA's Cyber Grand Challenge is now free for anyone to run against binaries, which lowers the barrier for both defenders and attackers doing automated bug discovery.

Read the original at Trail of Bits Blog ↗