Triton is a dynamic binary analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a Taint engine, AST representations of the x86 and the x86-64 instructions set semantics, SMT simplification passes, an SMT Solver Interface and, the last but not least, Python bindings.

Based on these components, you are able to build program analysis tools, automate reverse engineering and perform software verification. As Triton is still a young project, please, don't blame us if it is not yet reliable. Open issues or pull requests are always better than troll =).

A full documentation is available on our doxygen page.

   

Quick start

• Description
• Installation
• Examples
• Presentations and Publications

Internal documentation

• Dynamic Symbolic Execution
• Symbolic Execution Optimizations
• AST Representations of Semantics
• SMT Semantics Supported
• SMT Solver Interface
• SMT Simplification Passes
• Spread Taint
• Tracer Independent
• Python Bindings

News

A blog is available and you can follow us on twitter @qb_triton or via our RSS feed.

Support

• IRC: #qb_triton@freenode
• Mail: triton at quarkslab com

Authors

• Jonathan Salwan - Lead dev, Quarkslab
• Pierrick Brunet - Core dev, Quarkslab
• Florent Saudel - Core dev, Bordeaux University
• Romain Thomas - Core dev, Quarkslab

Cite Triton

@inproceedings{SSTIC2015-Saudel-Salwan,
  author    = {Florent Saudel and Jonathan Salwan},
  title     = {Triton: A Dynamic Symbolic Execution Framework},
  booktitle = {Symposium sur la s{\'{e}}curit{\'{e}} des technologies de l'information
               et des communications, SSTIC, France, Rennes, June 3-5 2015},
  publisher = {SSTIC},
  pages     = {31--54},
  year      = {2015},
}