# [网鼎杯 2020 青龙组] singal
# 思路 1:angr
import angr | |
path='./signal.exe' | |
project=angr.Project(path) | |
state=project.factory.entry_state() | |
simgr=project.factory.simgr(state) | |
simgr.explore(find=0x4017A5,avoid=0x4016E6) | |
flag=simgr.found[0].posix.dumps(0)[:15] | |
print(flag) | |
#flag{757515121f3d478} |