ucsb-seclab-popkorn-artifact/angr_analysis

Analysis Scripts

• angr_full_blown.py

  • Find out if the driver is vulnerable based on whether MmMapIoSpace, ZwmapViewOfSection, ZwOpenProcess are user controllable or not.

• kernel_types.py

  • Registers kernel types into angr to make handling of kernel data structures easier