angr

What it is

A Python framework that lifts binaries into an intermediate representation and explores paths with concrete and symbolic execution. Researchers use it to find reachability conditions, solve for inputs, and automate parts of reverse engineering.

What it helps with

- Exploring program paths with symbolic execution
- Solving for inputs that reach a target state
- Automating parts of vulnerability research
- Scripting analysis next to other Python RE tools

Who it's for

Reverse engineers, malware analysts, and vulnerability researchers.

Worth knowing

It is a Python library rather than a single GUI app. Analysis quality depends on how you model the target and its environment.

Does it replace a disassembler?
No, it complements tools such as Ghidra or Cutter rather than replacing interactive disassembly.

How does it fit with pwntools?
In our view angr helps reason about paths and inputs, while pwntools helps build and talk to exploits once you know what to send.