There are 3 repositories under concolic-execution topic.
An analysis tool for Python that blurs the line between testing and type systems.
QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
History of symbolic execution (as well as SAT/SMT solving, fuzzing, and taint data tracking)
OSS-Sydr-Fuzz - OSS-Fuzz fork for hybrid fuzzing (fuzzer+DSE) open source software.
SEMA is based on angr, a symbolic execution engine used to extract API calls. Especially, we extend ANGR with strategies to create representative signatures based on System Call Dependency graph (SCDG). Those SCDGs can be exploited in machine learning modules to do classification/detection.
The exploit generator CRAX++ is CRAX with a plugin system, s2e 2.0 upgrade, dynamic ROP, code selection, and I/O states (HITCON 2022)
Build your emulation environment as needed
CPR: A new automated program repair technique based on concolic execution which works on patch abstraction with the sub-optimal goal of refining the patch to less over-fit the initial test cases.
A concolic testing engine for RISC-V embedded software with support for SystemC peripherals
A prototype of Concolic Testing engine for SystemVerilog, developed as part of PFN summer internship 2018.
Sydr benchmark applications
SymFusion: Hybrid Instrumentation for Concolic Execution
Holistic Concolic Execution for Dynamic Web Applications via Symbolic Interpreter Analysis (IEEE S&P 2024)
Formal model of program execution, symbolic execution, and taint tracking
A concolic interpreter backend for Fugue.
Solution to the CMU Binary Bomblab using concolic execution (Angr framework by Shellphish).
Test input generation using separation logic
ECE 653 - testing, Quality Assurance, and Maintenance.This repo holds all material, notes and assignments related to the mentioned course.
Scheme-based Input Specification language for Concolic Testing
Whitebox autograder for Python functions.
NNrepair, a constraint-based technique for repairing neural network classifiers. The technique aims to fix the logic of the network at an intermediate layer or at the last layer. NNrepair first uses fault localization to find potentially faulty network parameters (such as the weights) and then performs repair using constraint solving to apply small
A mini symbolic execution engine for simple JavaScript programs
Z3 backend for Fugue's concolic interpreter.
"Concolic testing: An overview of the used techniques and its limits" - Report for the Seminar "Program Analysis and Transformation" in HS2019 about the topic concolic testing
Scripts and binaries used for the angr presentation at quebecsec. Presentation available at: https://www.youtube.com/watch?v=1hwEessoskc
Synoptic: Concolic execution for network protocol inference
SymWP, a concolic analysis framework designed specifically for WordPress plugin security. SymWP integrates an off-the-shelf symbolic execution engine and targets the PHP interpreter, allowing it to analyze plugin behavior at a semantic level with minimal human intervention.