Intro to angr management


Intro to angr.

This module introduces angr-management, the graphical front-end for angr. You will open small compiled binaries in the GUI and answer questions about them by reading what angr-management shows you: the function list, the strings view, the decompiler output, stack variables, and cross-references.

No scripting is required in this module. The goal is to get comfortable with the interface before moving on to angr's Python APIs in the later modules.

Submitting an answer

Answers in this module are plain values (an address, a string, a type name, a function name). Pass the value directly to the check script:

/challenge/check <answer>

For example:

/challenge/check 0x401234

If the answer matches the reference solution, check prints the flag.



Challenges

Level 0: Find a Function Address

Open the provided binary in angr-management. Use the Functions panel on the left side to browse the list of discovered functions.

Your task is to find the address of the function authenticate and submit its hex address.

Submission

Run the check script with your answer:

/challenge/check <hex_address>

For example, if the address is 0x401234:

/challenge/check 0x401234

Level 1: Strings View

Open the provided binary in angr-management. Navigate to the Strings view (View menu -> Strings, or use the toolbar).

Browse the strings embedded in the binary. Your task is to find the string that starts with flag{ and submit the full string.

Submission

Run the check script with your answer:

/challenge/check "flag{...}"

Level 2: Variable Type at a Stack Location

Open the provided binary in angr-management. Navigate to the function process_config and open the Decompilation view.

Examine the stack layout of the function. Your task is to determine the type of the variable at stack offset rbp-0xa8.

Look at the decompiled output or the stack variable list to identify the type at that offset.

Submission

Run the check script with the type name:

/challenge/check "<type>"

For example:

/challenge/check "char"

Level 3: Decompilation & Cross-References

Open the provided binary in angr-management. Decompile the main function and look for the string "SECRET_CONFIG_KEY_ALPHA".

This string is referenced in main and in exactly one other function. Use the cross-references feature (right-click the string -> Find XRefs) to identify which other function references it.

Submit the name of that function.

Submission

Run the check script with the function name:

/challenge/check <function_name>

30-Day Scoreboard:

This scoreboard reflects solves for challenges in this module after the module launched in this dojo.

7-Day | 30-Day | All-Time

Hackers Crews
Rank Hacker Badges Score