Summary Introductory Errata Installing How to Contribute What to Contribute Frequently Asked Questions Core Concepts Top Level Interfaces Loading a Binary Solver Engine Program State Simulation Managers Execution Engines Analyses Remarks Built-in Analyses CFG Backward Slicing Function Identifier Advanced Topics Gotchas The Whole Pipeline The Mixin Pattern Optimizing Symbolic Execution The Emulated Filesystem Intermediate Representation Working with Data and Conventions Claripy Symbolic Memory Addressing Java Symbolic Execution Symbion Extending angr Programming SimProcedures Writing State Plugins Extending the Environment Model TODO: Writing Exploration Techniques Writing Analyses TODO: Adding Support for New Architectures Examples Appendix List of Claripy Operations List of State Options Changelog Migrating to angr 8 Migrating to angr 7