{
  "added_at": "2026-11-02",
  "additional_evidence_urls": [
    "https://github.com/trailofbits/manticore/blob/cdf6c4b49603cc1d70a09cabe74e0f786df1e13f/README.md#L225-L236",
    "https://github.com/trailofbits/manticore/blob/cdf6c4b49603cc1d70a09cabe74e0f786df1e13f/setup.py",
    "https://github.com/trailofbits/manticore/blob/cdf6c4b49603cc1d70a09cabe74e0f786df1e13f/.github/workflows/ci.yml",
    "https://github.com/trailofbits/manticore/tree/cdf6c4b49603cc1d70a09cabe74e0f786df1e13f/tests/native/binaries",
    "https://github.com/trailofbits/manticore/blob/cdf6c4b49603cc1d70a09cabe74e0f786df1e13f/server/README.md",
    "https://github.com/trailofbits/manticore/blob/cdf6c4b49603cc1d70a09cabe74e0f786df1e13f/LICENSE",
    "https://github.com/trailofbits/manticore/releases/tag/0.3.7",
    "https://pypi.org/project/manticore/0.3.7/",
    "https://arxiv.org/abs/1907.03890"
  ],
  "category": "binary-libraries",
  "description_en": "Trail of Bits' now-archived symbolic execution tool for Linux ELF binaries on x86, x86-64, AArch64 and ARMv7, Ethereum smart contracts as EVM bytecode, and WebAssembly modules. It runs a program on symbolic inputs to explore the states it can reach, generates concrete inputs that lead to a chosen state and detects crashes and other failures, solving constraints with an external Yices, Z3 or CVC4 solver. The manticore CLI writes generated test cases to an mcore_ workspace, while the Python API adds instruction hooks, event callbacks and custom initial states; manticore-verifier checks contract properties written in the contract's own language.",
  "description_zh": "Trail of Bits 开发、现已归档的符号执行工具，可分析 x86、x86-64、AArch64 和 ARMv7 上的 Linux ELF 二进制、以 EVM 字节码表示的以太坊智能合约以及 WebAssembly 模块。它以符号输入运行程序，探索可到达的各个状态，生成能到达指定状态的具体输入，并检测崩溃等错误情形，约束由外部的 Yices、Z3 或 CVC4 求解器求解。manticore 命令行工具把生成的测试用例写入 mcore_ 工作目录，Python API 则支持指令钩子、事件回调和自定义初始状态；manticore-verifier 用于检查以合约自身语言编写的属性。",
  "entry_url": "https://awesomerea.org/resources/manticore/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/manticore/",
  "evidence_url": "https://github.com/trailofbits/manticore/blob/cdf6c4b49603cc1d70a09cabe74e0f786df1e13f/README.md",
  "group": "tools",
  "id": "manticore",
  "json_url": "https://awesomerea.org/resources/manticore/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/manticore/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/manticore/index.md",
  "name": "Manticore",
  "name_zh": "Manticore 符号执行工具",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Archived and unmaintained: the README states that the project is no longer internally developed and maintained, and GitHub marks the repository archived. The reviewed master commit, from 2026-06-24, only changes that status; the last change under manticore/ dates from 2022-08-07. The latest release is 0.3.7 on GitHub and PyPI (2022-02-17), and PyPI's nightly 0.3.8.dev builds end on 2024-02-27.",
    "Requires Python 3.7 or later. pip install manticore covers EVM and WASM, manticore[native] adds the pinned capstone 5.0.0rc2 and unicorn 2.x needed for native binaries, and a trailofbits/manticore Docker image is offered. The README names the latest Ubuntu LTS on GitHub Actions as the supported platform, gives macOS experimental EVM and WASM support but no native-binary support, and recommends a larger stack limit; CI at the reviewed commit still runs Python 3.7 on ubuntu-20.04.",
    "Inputs are the user's own ELF binaries, Solidity or Vyper sources or EVM bytecode, or WASM modules. Contract analysis needs solc on PATH and compiles through crytic-compile; the README says EVM Istanbul semantics are not fully implemented, so some opcodes may be unsupported. Whole-program CLI runs are prone to state explosion, which the README suggests limiting by tailoring the initial state through the API.",
    "CI runs ethereum, native, WASM, examples and other test suites after downloading Yices 2.6.2 and solc 0.4.24. tests/native/binaries and examples/linux/binaries hold small prebuilt Linux test programs for amd64 and ARMv7, some with their C sources; larger examples, including CTF problems, live in the separate manticore-examples repository, and server/ holds an unpublished gRPC wrapper for the Manticore UI.",
    "AGPL-3.0; the README says Trail of Bits can be contacted for an exception to its terms. The ASE 2019 paper (arXiv 1907.03890) describes the tool."
  ],
  "requirements_zh": [
    "已归档且不再维护：README 声明项目已不再由内部开发和维护，GitHub 也将仓库标为已归档。所审阅的 master 提交日期为 2026-06-24，只改动了这一状态；manticore/ 目录下的最后一次改动在 2022-08-07。最新版本为 GitHub 与 PyPI 上的 0.3.7（2022-02-17），PyPI 上的每日 0.3.8.dev 构建止于 2024-02-27。",
    "需要 Python 3.7 或更高版本。pip install manticore 涵盖 EVM 与 WASM 分析，manticore[native] 还会安装分析原生二进制所需、版本固定的 capstone 5.0.0rc2 和 unicorn 2.x；另提供 trailofbits/manticore Docker 镜像。README 将 GitHub Actions 提供的最新 Ubuntu LTS 列为正式支持平台，macOS 上对 EVM 与 WASM 仅为实验性支持，且不支持原生二进制，并建议调大栈空间限制；所审提交的 CI 仍在 ubuntu-20.04 上使用 Python 3.7。",
    "输入为使用者自己的 ELF 二进制、Solidity 或 Vyper 源码或 EVM 字节码，或 WASM 模块。合约分析需要 PATH 中有 solc，并通过 crytic-compile 编译；README 称 EVM Istanbul 语义尚未完整实现，部分操作码可能不受支持。用命令行分析整个程序容易出现状态爆炸，README 建议通过 API 定制初始状态来加以限制。",
    "CI 在下载 Yices 2.6.2 和 solc 0.4.24 后运行 ethereum、native、WASM、examples 等测试套件。tests/native/binaries 与 examples/linux/binaries 中存放面向 amd64 和 ARMv7 的小型预编译 Linux 测试程序，部分附有 C 源码；包括 CTF 题目在内的更大示例位于独立的 manticore-examples 仓库，server/ 目录则是为 Manticore UI 提供的、未发布的 gRPC 封装。",
    "采用 AGPL-3.0 许可；README 称可联系 Trail of Bits 申请例外授权。ASE 2019 论文（arXiv 1907.03890）介绍了该工具。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/trailofbits/manticore",
  "verification": "source-reviewed",
  "verified_at": "2026-10-20"
}
