Top 15 symbolic-execution Open-Source Projects

• mythril

  12 3,706 8.2 Python

  Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Hedera, Quorum, Vechain, Rootstock, Tron and other EVM-compatible blockchains.

  

Project mention: Fuzzing Around: Better Smart Contract Testing through the Power of Random Inputs | dev.to | 2023-04-25

Fuzzing has been around for a while in traditional full-stack development, but a new class of tools is here that can apply fuzzing to smart contract testing in web3. Some of the fuzzing tools include the open source Echidna and MythX.

• manticore

  5 3,631 3.8 Python

  Symbolic execution tool

  

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• miasm

  1 3,323 6.6 Python

  Reverse engineering framework in Python

  

• Triton

  4 3,299 7.8 C++

  Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code. (by JonathanSalwan)

• klee

  4 2,453 8.8 C++

  KLEE Symbolic Execution Engine

  

Project mention: GrayC: Greybox Fuzzing of Compilers and Analysers for C [pdf] | news.ycombinator.com | 2023-06-11

• bap

  3 1,970 4.5 OCaml

  Binary Analysis Platform

  

• awesome-symbolic-execution

  1 1,247 4.0

  A curated list of awesome symbolic execution resources including essential research papers, lectures, videos, and tools.

Project mention: Starting MIT - 6.858 Cybersecurity - anyone wanna do it together? | /r/cybersecurity | 2023-05-28

At fist glance the only tricky part might be symbolic execution. Here's a page that will have you covered and help establish a proper context: https://github.com/ksluckow/awesome-symbolic-execution

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• VMProtect-devirtualization

  3 1,049 0.0 Roff

  Playing with the VMProtect software protection. Automatic deobfuscation of pure functions using symbolic execution and LLVM.

• CrossHair

  8 944 9.2 Python

  An analysis tool for Python that blurs the line between testing and type systems.

• deepstate

  3 807 6.0 Python

  A unit test-like interface for fuzzing and symbolic execution

  

• alive2

  4 671 9.3 C++

  Automatic verification of LLVM optimizations

  

Project mention: Basic SAT model of x86 instructions using Z3, autogenerated from Intel docs | news.ycombinator.com | 2023-05-15

You can use it to (mostly) validate small snippets are the same. See Alive2 for the application of Z3/formalization of programs as SMT for that [1]. As far as I'm aware there are some problems scaling up to arbitrarily sized programs due to a lack of formalization in higher level languages in addition to computational constraints. With a lot of time and effort it can be done though [2].

1. https://github.com/AliveToolkit/alive2

2. https://sel4.systems/

• MATE

  1 165 0.0 Python

  MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code using Code Property Graphs. (by GaloisInc)

  

• Symbolica

  4 59 0.0 C#

  Symbolica's open-source symbolic execution engine.

  

• SEMA-ToolChain

  1 40 4.0 Batchfile

  ToolChain using Symbolic Execution for Malware Analysis.

  

Project mention: Show HN: SEMA – Symbolic Execution for Malware Analysis/Detection Using Angr | news.ycombinator.com | 2024-03-05

• Gymbo

  2 34 8.8 C++

  gradient-based symbolic execution engine implemented from scratch

Project mention: [P] Let's Debug Your Neural Network: Gradient-based Symbolic Execution for NN | /r/MachineLearning | 2023-12-04

I have developed Gymbo, a proof of concept for a Gradient-based Symbolic Execution Engine implemented from scratch.

• SaaSHub

  www.saashub.com sponsored

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

symbolic-execution related posts

• [P] Let's Debug Your Neural Network: Gradient-based Symbolic Execution for NN
  1 project | /r/MachineLearning | 4 Dec 2023
• GrayC: Greybox Fuzzing of Compilers and Analysers for C [pdf]
  1 project | news.ycombinator.com | 11 Jun 2023
• Triton – a dynamic binary analysis library
  1 project | news.ycombinator.com | 7 Dec 2022
• FuzzTest: a C++ testing framework for writing and executing fuzz tests, property-based tests executed using coverage-guided fuzzing under the hood
  5 projects | /r/cpp | 3 Dec 2022
• Try CrossHair while working other Python projects
  2 projects | /r/hacktoberfest | 14 Oct 2022
• Installing Triton in fresh linux VM step-by-step guide (hairpull-free edition)
  2 projects | /r/RELounge | 12 Oct 2022
• Go Noob question: How can I output LLVM IR, instrument it and also looking for a symbolic execution engine
  3 projects | /r/golang | 29 Jul 2022
• A note from our sponsor - WorkOS
  workos.com | 19 Apr 2024

  The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com