Symbolic execution TL;DR: Treat inputs as symbols; SMT solves for a concrete value reaching a target state. angr / Triton / Manticore. Stub — to be filled in. What it is TODO Preconditions / where it applies TODO Technique TODO Detection and defence TODO References https://angr.io/