Skip to content

Fun with Symboliks

Atlas

Atlas showcases Symboliks, an intermediate representation and symbolic execution library designed to simplify reverse engineering and automated exploit derivation.

Summary

Architecture and Background

Asking the hard questions... and getting answer!

Vulnerability Analysis

Oh binary, where art thine vulns? Symbolic analysis has been a "thing" for 20 years, and yet it's still left largely to the obscure and the academic researchers (and NASA).

Exploitation and Demonstrations

several years ago, Invisigoth incorporated the Symboliks subsystem into the Vivisect binary analysis framework. due to that inclusion, the very nature of binary analysis has been broken down, rethought, and arisen out of the ashes.

Remediation and Defensive Strategies

this talk will give an introduction into Symboliks, Graph Theory, and the path forward for reverse engineering and vulnerability research, all from an interactive Python session or scripts. A four time winner of DEF CON capture the flag and retired captain of the team "1@stplace", over the past decade atlas has proved expertise in programmatic reverse-engineering, automated vulnerability discovery and exploitation, and braking into or out of nearly every type of computer system/subsystem. areas of specialty include exmpedded/IoT exploitation, power systems and industrial control systems exploitation, automotive exploitation, and client/server/application exploitation.

Related talks

Main Stage·52 min

  • DEF CON
  • Malware
  • Date: Aug 2016
  • Location: Las Vegas

Chris Eagle · Sk3wlDbg

Chris Eagle and Sk3wlDbg demonstrate integrating architecture-independent CPU emulation into IDA Pro to unpack obfuscated malware and trace execution.

ida-procpu-emulationreverse-engineering+2

Main Stage·46 min

  • DEF CON
  • Malware
  • Date: Aug 2015
  • Location: Las Vegas

Yan Shoshitaishvili · Fish Wang

Yan Shoshitaishvili and Fish Wang introduce angr, the open-source binary analysis platform combining symbolic execution and static analysis for automated vulnerability research.

angrsymbolic-executionbinary-analysis+2