angr
A multi-architecture binary analysis toolkit, with the ability to perform dynamic symbolic execution and various static analyses on binaries
Decision gist · record as of 2026-08-14
Yes, if you do binary security research, CTF challenges, or reverse engineering. The framework is actively maintained, well-documented, and widely used in the security community. Install friction is moderate due to compiled dependencies, but pre-built wheels mitigate this on common platforms. No known vulnerabilities. Requires Python 3.12+, so check your environment first.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Python 3.12 or later; binary analysis operations are computationally intensive and may require significant memory and CPU time.
- Medium install friction with 25 runtime dependencies including compiled components (cffi, capstone, pyvex).
- Active maintenance—last commit 2026-08-14, released 9 days ago.
License · maintenance · safety
BSD-2-Clause (permissive) — BSD-2-Clause (permissive) allows commercial and private use with minimal restrictions; attribution and license notice required in distributions.
last release 2026-08-05 (9 days) · last repo commit 2026-08-14 · 9,009 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 1,112,993 downloads/mo, #4,352 on PyPI
Alternatives
Verify before relying
pip install angr
import angr
project = angr.Project('/path/to/binary', auto_load_libs=False)
state = project.factory.entry_state()
simgr = project.factory.simgr(state)- Performance characteristics and memory footprint for large binaries or long symbolic execution runs
- Supported binary formats beyond common ELF/PE (e.g., Mach-O, raw firmware)
- Extent of decompilation capabilities and accuracy compared to dedicated decompilers
What it is and what it does
angr is a Python framework for analyzing compiled binaries without source code. It combines multiple analysis techniques—symbolic execution (exploring program paths with symbolic values), static analysis (control flow and data dependency tracking), and intermediate-representation lifting (translating machine code to a platform-independent form)—to understand binary behavior. The framework is commonly used in security research, CTF competitions, and vulnerability discovery.
The package wraps complex binary analysis operations into a Python API, letting you load a binary, hook functions, explore execution paths, and extract information like flag values or program properties. It depends on specialized libraries for disassembly (capstone), constraint solving (claripy), and intermediate representation (pyvex), plus data structures and utilities (networkx, sympy, lmdb). Installation requires Python 3.12+ and brings in 25 runtime dependencies; pre-built wheels reduce compilation friction on common platforms.
Use it for
- Solve CTF (Capture The Flag) challenges by symbolically executing a binary to find flag values or bypass checks
- Discover vulnerabilities by analyzing control flow and data dependencies in compiled code without source
- Instrument and hook binary functions to intercept or modify behavior during dynamic analysis
- Lift and analyze firmware or embedded binaries across architectures (ARM, x86, MIPS, etc.)
- Perform value-set analysis to understand which values a variable can hold at any program point
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes, if you do binary security research, CTF challenges, or reverse engineering.
The framework is actively maintained, well-documented, and widely used in the security community. Install friction is moderate due to compiled dependencies, but pre-built wheels mitigate this on common platforms. No known vulnerabilities. Requires Python 3.12+, so check your environment first.
Install
angr on PyPI
Before you install
Medium install friction with 25 runtime dependencies including compiled components (cffi, capstone, pyvex). Active maintenance—last commit 2026-08-14, released 9 days ago. Requires Python 3.12+. Pre-built wheels available for major platforms (macOS arm64, Linux x86_64/aarch64, Windows).
Requires Python 3.12 or later; binary analysis operations are computationally intensive and may require significant memory and CPU time.
License in practice
BSD-2-Clause (permissive) allows commercial and private use with minimal restrictions; attribution and license notice required in distributions.
Quickstart
pip install angr
import angr
project = angr.Project('/path/to/binary', auto_load_libs=False)
state = project.factory.entry_state()
simgr = project.factory.simgr(state)Verify before relying
- Performance characteristics and memory footprint for large binaries or long symbolic execution runs
- Supported binary formats beyond common ELF/PE (e.g., Mach-O, raw firmware)
- Extent of decompilation capabilities and accuracy compared to dedicated decompilers
Package facts
| License | BSD-2-Clause permissive |
| Python support | Supports the current Python release >=3.12 |
| Install friction | Medium. Platform-specific wheel |
| Runtime dependencies | 25 packagescxxheaderparserGitPythonangr-dataarchinfocachetoolscapstonecfficlaripyclelmdbmsgspecmulpyplexernetworkxprotobufpsutilpycparserplatformdirspydemumblepypcodepyvexrichsortedcontainerssympytyping-extensionscolorama |
| Maintenance | Actively maintained 9 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 1,112,993 / month, #4,352 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Programming Language :: Python :: 3Programming Language :: Python :: 3 :: OnlyProgramming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.14 |
Evidence: angr-9.3.2-cp312-abi3-macosx_11_0_arm64.whl; angr-9.3.2-cp312-abi3-manylinux_2_28_aarch64.whl; angr-9.3.2-cp312-abi3-manylinux_2_28_x86_64.whl; angr-9.3.2-cp312-abi3-musllinux_1_2_aarch64.whl; angr-9.3.2-cp312-abi3-musllinux_1_2_x86_64.whl; angr-9.3.2-cp312-abi3-win_amd64.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “control flow analysis”
- angrangr is a binary analysis framework that performs symbolic execution,…
- smdaSMDA is a recursive disassembler library that recovers control flow…
- ethereum-dasmDisassembles Ethereum EVM bytecode into assembly instructions and…
Give your agent the search over MCP, or paste the wish link into any chat.
More Security packages
Provides Python bindings to the FreeDesktop.org Secret Service API for securely storing and retrieving passwords and secrets through GNOME Keyring, KWallet, or KeePassXC.
MSAL for Python handles OAuth2 and OpenID Connect authentication with Microsoft identity services, managing token acquisition, caching, and refresh for applications integrating with Microsoft Entra ID, Microsoft Accounts, and Azure AD B2C.
joserfc implements JOSE standards (JWS, JWE, JWK, JWT, and related RFCs) for signing, encrypting, and managing JSON-based cryptographic tokens in Python.
Authlib provides a complete implementation of OAuth 1.0, OAuth 2.0, and OpenID Connect 1.0 for building both authentication clients and servers, with built-in support for JWS, JWK, JWA, and JWT standards.
Provides low-level CFFI bindings to the official Argon2 password hashing algorithm for use by libraries and applications that need direct access to Argon2 without higher-level abstractions.
ADAL for Python authenticates applications with Azure Active Directory to obtain tokens for accessing Azure AD-protected resources.
Install only if maintaining existing code that already depends on it, and plan a migration.
See also ailment · angr-data · archinfo · pwntools · viv-utils · ethereum-dasm · vivisect · barectf · smda · capstone