Symbolic Execution Tools

This is a practical playbook for symbolic execution in CTF reversing challenges and binary analysis. It covers angr, Z3, and Unicorn Engine with actual code patterns for common scenarios like recovering serial keys, bypassing authentication checks, and automated unpacking. The angr cookbook includes hook templates for libc functions and strategies for managing path explosion, which base models typically get wrong with broken state initialization. You get decision tables for choosing between pure constraint solving with Z3, full path exploration with angr, or fast emulation with Unicorn. Most useful when you're staring at a binary that would take hours to reverse manually but has solvable constraints you can throw symbolic execution at.

Install to Claude Code

npx -y skills add yaklang/hack-skills --skill symbolic-execution-tools --agent claude-code