Triton is a dynamic binary analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64, ARM32 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings. Based on these components, you are able to build program analysis tools, automate reverse engineering and perform software verification.

As Triton is still a young project, please, don't blame us if it is not yet reliable. Open issues or pull requests are always better than troll =).

Full documentation is available on our doxygen page.

   

Quick start

• Description
• Installation
• Examples
• Python Bindings
• Presentations and Publications

News

A blog is available and you can follow us on twitter @qb_triton or via our RSS feed.

Support

• IRC: #qb_triton@freenode
• Mail: triton at quarkslab com

Authors

• Jonathan Salwan - Lead dev, Quarkslab
• Christian Heitman - Core dev, Quarkslab
• Pierrick Brunet - Core dev, Quarkslab
• Romain Thomas - Core dev, Quarkslab
• Florent Saudel - Core dev, Bordeaux University

Cite Triton

@proceedings{SSTIC2015-Saudel-Salwan,
  author    = {Florent Saudel and Jonathan Salwan},
  title     = {Triton: A Dynamic Symbolic Execution Framework},
  booktitle = {Symposium sur la s{\'{e}}curit{\'{e}} des technologies de l'information
               et des communications, SSTIC, France, Rennes, June 3-5 2015},
  publisher = {SSTIC},
  pages     = {31--54},
  year      = {2015},
}