Automated Vulnerability Detection in Go: Concolic Execution for Multi-Threaded Binaries

Comments, chapters, ... Slides Transcript Search
Loading Click here to add:
Subscribe to notifications

When subscribed to notifications, an email will be sent to you for all added annotations.

Your user account has no email address.

Information on this media

15 views

Go powers critical infrastructure, but analyzing compiled Go binaries for security issues remains difficult in practice. In this talk, we present Zorya, an open-source concolic analysis framework designed to detect vulnerabilities directly at the binary level, including bugs that do not immediately crash the program. We will show how Zorya combines runtime state recovery, symbolic reasoning, and constraint solving with the Z3 SMT solver to analyze real-world Go targets. Attendees will learn where traditional approaches fall short, how Zorya helps uncover exploit-relevant paths, and how this can improve real security audit workflows.

Creation date: June 30, 2026
Speakers: Karolina Gorna (Security Researcher, Ledger)
License: CC BY-SA v4
Links:

Other media in the channel "2026"