Merge pull request #603 from patty5531998/lab7

[LAB7] 311552005
SQLab · Jun 27, 2024 · f0b4a80 · f0b4a80
2 parents 89cf768 + 6200877
commit f0b4a80
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/lab7/sol.py b/lab7/sol.py
@@ -0,0 +1,17 @@
+import angr, sys
+
+def success_condition(state):
+    return b"Login successful" in state.posix.dumps(sys.stdout.fileno())
+
+def fail_condition(state):
+    return b"Login failed" in state.posix.dumps(sys.stdout.fileno())
+
+proj = angr.Project("./login")
+
+init_state = proj.factory.entry_state()
+simulation = proj.factory.simgr(init_state)
+simulation.explore(find=success_condition, avoid=fail_condition)
+
+
+solution = simulation.found[0]
+print(solution.posix.dumps(sys.stdin.fileno()))