Triton is a Pin-based dynamic symbolic execution (DSE) execution framework. Although Triton is a DSE framework, it also provides internal components like a taint engine, a dynamic symbolic execution engine, a snapshot engine, translation of x64 instructions into the SMT2-LIB representation, a Z3 interface to solve constraints and, the last but not least, Python bindings.

Based on these components, you are able to build program analysis tools, automate reverse engineering or perform software verification.

The wiki describes Triton and its components under the hood. As Triton is a young project, please, don't blame us if it is not yet reliable. Open issues or pull requests are always better than troll =).

Quick start

• Installation
• Examples
• Tools

Internal documentation

• Symbolic Engine
• Taint Engine
• Snapshot Engine
• SMT2-LIB Representation
• Solver Engine - Z3
• SMT Semantics Supported
• Python Bindings

Blog post

• Code coverage using dynamic symbolic execution
• Triton under the hood - First approach with the framework

Extra information

• Publications
• About us