Contents Menu Expand Light mode Dark mode Auto light/dark, in light mode Auto light/dark, in dark mode Skip to content
angr documentation
angr documentation
  • Introduction
  • Getting Started
    • Installing angr
    • Reporting Bugs
    • Developing angr
    • Help Wanted
  • Core Concepts
    • Core Concepts
    • Loading a Binary
    • Symbolic Expressions and Constraint Solving
    • Machine State - memory, registers, and so on
    • Simulation Managers
    • Simulation and Instrumentation
    • Analyses
    • Symbolic Execution
    • A final word of advice
  • Build-in Analyses
    • Control-flow Graph Recovery (CFG)
    • Backward Slicing
    • Identifier
    • angr Decompiler
  • Advanced Topics
    • Gotchas when using angr
    • Understanding the Execution Pipeline
    • What’s Up With Mixins, Anyway?
    • Optimization considerations
    • Working with File System, Sockets, and Pipes
    • Intermediate Representation
    • Working with Data and Conventions
    • Solver Engine
    • Symbolic memory addressing
    • Java Support
    • Debug variable resolution
    • Variable visibility
  • Extending angr
    • Hooks and SimProcedures
    • State Plugins
    • Extending the Environment Model
    • Writing Analyses
  • angr examples
  • Frequently Asked Questions
  • Appendix
    • Cheatsheet
    • List of Claripy Operations
    • List of State Options
    • CTF Challenge Examples
    • Changelog
    • Migrating to angr 9.1
    • Migrating to angr 8
    • Migrating to angr 7
  • API Reference
    • angr.ail_callable
    • angr.ailment
    • angr.analyses
    • angr.angrdb
    • angr.annocfg
    • angr.blade
    • angr.block
    • angr.callable
    • angr.calling_conventions
    • angr.code_location
    • angr.codenode
    • angr.concretization_strategies
    • angr.distributed
    • angr.emulator
    • angr.engines
    • angr.errors
    • angr.exploration_techniques
    • angr.factory
    • angr.flirt
    • angr.keyed_region
    • angr.knowledge_base
    • angr.knowledge_plugins
    • angr.llm_client
    • angr.llm_models
    • angr.mcp
    • angr.misc
    • angr.procedures
    • angr.project
    • angr.protos
    • angr.rust
    • angr.rustylib
    • angr.serializable
    • angr.sim_manager
    • angr.sim_options
    • angr.sim_procedure
    • angr.sim_state
    • angr.sim_state_options
    • angr.sim_type
    • angr.sim_variable
    • angr.simos
    • angr.slicer
    • angr.state_hierarchy
    • angr.state_plugins
    • angr.storage
    • angr.tablespecs
    • angr.utils
    • angr.vaults
Back to top
View this page

Getting Started¶

  • Installing angr
  • Reporting Bugs
  • Developing angr
  • Help Wanted
Next
Installing angr
Previous
Introduction
Copyright © 2026, The angr Project contributors
Made with Sphinx and @pradyunsg's Furo