denuvo-ref/angr
1
0
Fork 0
mirror of https://github.com/angr/angr synced 2026-08-17 12:23:11 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
angr/SECURITY.md
Audrey Dutcher fb389e235d
Draft security and reporting advisory (#3072) 
* Draft security and reporting advisory

* Second draft
2022-01-09 19:49:40 -07:00

648 B
Raw Permalink Blame History

Security

angr is meant to be able to function as fully secure environment for analyzing code of any kind in its default configuration. As a result, we take sandbox escapes - opportunities for guest code to manipulate the host environment without the analysis author explicitly allowing it - very seriously. If you read all the documentation, you should be able to deploy angr to analyze untrusted code without worrying about it.

If you find a sandbox escape bug of any sort by this definition, please let us know through a private channel. You can contact the core developers through their emails at audrey@rhelmot.io and fishw@asu.edu.