Triton is a dynamic binary analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a Taint Engine, AST representations of the x86 and the x86-64 instructions set semantics, SMT simplification passes, a SMT Solver Interface and, the last but not least, Python bindings.
Based on these components, you are able to build program analysis tools, automate reverse engineering and perform software verification. As Triton is still a young project, please, don't blame us if it is not yet reliable. Open issues or pull requests are always better than troll =).
A full documentation is available on our doxygen page.
- Dynamic Symbolic Execution
- Symbolic Execution Optimizations
- AST Representations of Semantics
- SMT Semantics Supported
- SMT Solver Interface
- SMT Simplification Passes
- Spread Taint
- Replay Trace via Snapshot
- Tracer Independent
- Python Bindings
A blog is available and you can follow us on twitter @qb_triton or via our RSS feed.
- IRC: #qb_triton@freenode
- Mail: triton at quarkslab com
- Jonathan Salwan - Lead dev, Quarkslab
- Florent Saudel - Core dev, Bordeaux University
- Romain Thomas - Core dev, Quarkslab
@inproceedings{SSTIC2015-Saudel-Salwan,
author = {Florent Saudel and Jonathan Salwan},
title = {Triton: A Dynamic Symbolic Execution Framework},
booktitle = {Symposium sur la s{\'{e}}curit{\'{e}} des technologies de l'information
et des communications, SSTIC, France, Rennes, June 3-5 2015},
publisher = {SSTIC},
pages = {31--54},
year = {2015},
}