# 第五章 高级篇

- [5.1 模糊测试](5.1_fuzzing.md)
  - [5.1.1 AFL fuzzer](5.1.1_afl_fuzzer.md)
  - [5.1.2 libFuzzer](5.1.2_libfuzzer.md)
- [5.2 动态二进制插桩](5.2_dyn_binary_instrumentation.md)
  - [5.2.1 Pin](5.2.1_pin.md)
  - [5.2.2 DynamoRio](5.2.2_dynamorio.md)
  - [5.2.3 Valgrind](5.2.3_valgrind.md)
- [5.3 符号执行](5.3_symbolic_execution.md)
  - [5.3.1 angr](5.3.1_angr.md)
  - [5.3.2 Triton](5.3.2_triton.md)
  - [5.3.3 KLEE](5.3.3_klee.md)
  - [5.3.4 S²E](5.3.4_s2e.md)
- [5.4 数据流分析](5.4_dataflow_analysis.md)
- [5.5 污点分析](5.5_taint_analysis.md)
  - [5.5.1 动态污点分析](doc/5.5.1_dyn_taint_analysis.md)
- [5.6 LLVM](5.6_llvm.md)
 - [5.6.1 Clang](doc/5.6.1_clang.md)
- [5.7 Capstone/Keystone](5.7_cap-keystone.md)
- [5.8 SAT/SMT](5.8_sat-smt.md)
  - [5.8.1 Z3](5.8.1_z3.md)
- 5.9
- [5.10 反编译技术](5.10_decompiling.md)
  - [5.10.1 RetDec](5.10.1_retdec.md)
- 5.11
- [5.12 Unicorn 模拟器](5.12_unicorn.md)