dAngr - A Debugger for Angr

dAngr offers a streamlined approach to leverage angr's powerful symbolic execution capabilities within a user-friendly command-line interface (CLI) environment, eliminating the necessity for extensive programming knowledge usually required to use angr. Providing powerful capabilities for analyzing and debugging binaries.

Features

• Perform symbolic execution on binaries for debugging purposes.
• Command-line interface for easy interaction.
• Easy way to call a function with chosen arguments without the hassle of memory management and argument parsing.
• Platform independent execution

Installation

To use dAngr, follow these steps:

0. Preferable create a virtual environment, for instance using venv.

1. Install the required dependencies by running the following command:

pip install .

Note: on MacOS you may need to run the following for now:

pip install --pre --no-binary capstone capstone==5.0.0.post1

2. Run dAngr:

dAngr

Docker

For simplicity dAngr is also available using a Dockerfile.

Build Dockerfile to create an clean environment for dAngr.

docker build -t dangr .

Run the Docker image and get the dAngr command prompt.

docker run -it dangr

If you wish to run the dAngr Docker on your own binaries, you may need use shared volumes.

docker run -it dAngr -v <loal-binary-dir>:/home/ubuntu/dAngr/<binaryfile>

Help

1. In the debugger prompt, you can find help as follows:

(dAngr)> help

Documentation

Further documentation on the commands that may be used can be found here.

Example Usage

A basic example, demonstrating the capabilities of dAngr, can be found here

A more practical example, a simplified version of the vulnerability found in the Eufy ecosystem, can be found here

Advanced Symobic Use Case

Without specifying any concrete inputs, dAngr will execute the target binary using symbolic inputs.

Contributing

Contributions to dAngr are welcome! If you find any bugs or have suggestions for new features, please open an issue or submit a pull request on GitHub.

Research

Check out our other research here

Contact

Have questions or feedback? Don't hesitate to reach out to us! open an issue on our repository or feel free to contact one of the authors.

License

This project is licensed under the MIT License - see the LICENSE file for details.

Notes:

When installing pygraphviz, you may need to first install graphviz with dev extensions: apt-get install graphviz graphviz-dev