BINSEC/SE: A Dynamic Symbolic Execution Toolkit for Binary-Level Analysis
All You Ever Wanted to Know about Dynamic Taint Analysis and Forward Symbolic Execution (but Might Have Been Afraid to Ask)