christhecoolhut / angry_gadget Goto Github PK

~> angrygadget libc.so.6
Symbol was allocated without a known size; emulation may fail if it is used non-opaquely: __libc_enable_secure
Symbol was allocated without a known size; emulation may fail if it is used non-opaquely: _dl_argv
For more information about "Symbol was allocated without a known size",see https://docs.angr.io/extending-angr/environment#simdata
Building CFG, this will take a moment
100% ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Elapsed Time: 0:04:54 Time: 0:00:00  
Iterating over XREFs looking for gadget
Trying 0x4c711f:   8%|##########                                                                                                               | 1/12 [00:18<03:26, 18.80s/it]Traceback (most recent call last):                                                                                                                     | 0/12 [00:00<?, ?it/s]
  File "~/.local/bin/angry_gadget.py", line 163, in <module>
    main()
  File "~/.local/bin/angry_gadget.py", line 114, in main
    simgr.step()
  File "~/.local/lib/python3.12/site-packages/angr/misc/hookset.py", line 96, in __call__
    result = current_hook(self.func.__self__, *args, **kwargs)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/exploration_techniques/suggestions.py", line 43, in step
    simgr.step(stash=stash, **kwargs)
  File "~/.local/lib/python3.12/site-packages/angr/misc/hookset.py", line 101, in __call__
    return self.func(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/sim_manager.py", line 471, in step
    successors = self.step_state(state, successor_func=successor_func, error_list=error_list, **run_args)
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/sim_manager.py", line 512, in step_state
    successors = self.successors(state, successor_func=successor_func, **run_args)
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/sim_manager.py", line 562, in successors
    return self._project.factory.successors(state, **run_args)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/factory.py", line 82, in successors
    return self.default_engine.process(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/engines/vex/light/slicing.py", line 20, in process
    return super().process(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/engines/engine.py", line 162, in process
    self.process_successors(self.successors, **kwargs)
  File "~/.local/lib/python3.12/site-packages/angr/engines/failure.py", line 24, in process_successors
    return super().process_successors(successors, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/engines/syscall.py", line 26, in process_successors
    return super().process_successors(successors, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/engines/hook.py", line 67, in process_successors
    return self.process_procedure(state, successors, procedure, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/engines/procedure.py", line 39, in process_procedure
    inst = procedure.execute(state, successors, ret_to=ret_to, arguments=arguments)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/sim_procedure.py", line 278, in execute
    r = getattr(inst, inst.run_func)(*sim_args, **inst.kwargs)
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/procedures/stubs/UserHook.py", line 9, in run
    result = user_func(self.state)
             ^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/bin/angry_gadget.py", line 146, in check_execve
    rsi_val = state.memory.load(state.regs.rsi)
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/storage/memory_mixins/unwrapper_mixin.py", line 15, in load
    return super().load(
           ^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/storage/memory_mixins/name_resolution_mixin.py", line 67, in load
    return super().load(addr, size=size, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/storage/memory_mixins/bvv_conversion_mixin.py", line 30, in load
    return super().load(addr, size=size, fallback=fallback_bv, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/storage/memory_mixins/clouseau_mixin.py", line 66, in load
    return super().load(addr, size=size, condition=condition, endness=endness, inspect=inspect, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/storage/memory_mixins/actions_mixin.py", line 11, in load
    r = super().load(addr, size=size, condition=condition, fallback=fallback, action=action, **kwargs)
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/storage/memory_mixins/underconstrained_mixin.py", line 24, in load
    return super().load(addr, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/storage/memory_mixins/size_resolution_mixin.py", line 90, in load
    return super().load(addr, size=size, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "~/.local/lib/python3.12/site-packages/angr/storage/memory_mixins/size_resolution_mixin.py", line 20, in load
    raise TypeError("Must provide size to load")
TypeError: Must provide size to load
Trying 0x4c711f:   8%|##########                                                                                                               | 1/12 [00:22<04:10, 22.76s/it]
  0%|                                                                                                                                                  | 0/12 [00:03<?, ?it/s]
~>