diff --git a/dev/commands/kernel/klookup/index.html b/dev/commands/kernel/klookup/index.html index 06ad4e05c..5a1400198 100644 --- a/dev/commands/kernel/klookup/index.html +++ b/dev/commands/kernel/klookup/index.html @@ -1,2 +1,2 @@ - Klookup - Documentation
Skip to content

klookup¤

usage: klookup [-h] symbol
-

Lookup kernel symbols

Positional arguments¤

Positional Argument Help
symbol Address or symbol name to lookup

Optional arguments¤

Short Long Help
-h --help show this help message and exit
\ No newline at end of file + Klookup - Documentation
Skip to content

klookup¤

usage: klookup [-h] [-a] [symbol]
+

Lookup kernel symbols

Alias: kallsyms

Positional arguments¤

Positional Argument Help
symbol Address or symbol name to lookup

Optional arguments¤

Short Long Help
-h --help show this help message and exit
-a --apply applies all the symbols that satisfy the filter
\ No newline at end of file diff --git a/dev/feed_json_updated.json b/dev/feed_json_updated.json index 804cd36f7..9e4f75da1 100644 --- a/dev/feed_json_updated.json +++ b/dev/feed_json_updated.json @@ -1 +1 @@ -{"version": "https://jsonfeed.org/version/1", "title": "pwndbg Blog", "home_page_url": "https://pwndbg.re/pwndbg/latest/", "feed_url": "https://pwndbg.re/pwndbg/latest/feed_json_updated.json", "description": "pwndbg (/pa\u028an\u02c8di\u02ccb\u028c\u0261/) is a GDB plug-in that makes debugging with GDB suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers.", "icon": "https://pwndbg.re/pwndbg/assets/favicon.ico", "authors": [], "language": "en", "items": [{"id": "https://pwndbg.re/pwndbg/latest/blog/2022/08/21/pwndbg-coding-sprints-report/", "url": "https://pwndbg.re/pwndbg/latest/blog/2022/08/21/pwndbg-coding-sprints-report/", "title": "Pwndbg coding sprints report", "content_html": "Report of the two coding sprints with Pwndbg\n", "image": null, "date_modified": "2025-10-06T21:26:35+00:00", "authors": [{"name": "Disconnect3d"}], "tags": []}]} \ No newline at end of file +{"version": "https://jsonfeed.org/version/1", "title": "pwndbg Blog", "home_page_url": "https://pwndbg.re/pwndbg/latest/", "feed_url": "https://pwndbg.re/pwndbg/latest/feed_json_updated.json", "description": "pwndbg (/pa\u028an\u02c8di\u02ccb\u028c\u0261/) is a GDB plug-in that makes debugging with GDB suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers.", "icon": "https://pwndbg.re/pwndbg/assets/favicon.ico", "authors": [], "language": "en", "items": [{"id": "https://pwndbg.re/pwndbg/latest/blog/2022/08/21/pwndbg-coding-sprints-report/", "url": "https://pwndbg.re/pwndbg/latest/blog/2022/08/21/pwndbg-coding-sprints-report/", "title": "Pwndbg coding sprints report", "content_html": "Report of the two coding sprints with Pwndbg\n", "image": null, "date_modified": "2025-10-06T21:33:22+00:00", "authors": [{"name": "Disconnect3d"}], "tags": []}]} \ No newline at end of file diff --git a/dev/feed_rss_created.xml b/dev/feed_rss_created.xml index 9f8ca8621..329081ae9 100644 --- a/dev/feed_rss_created.xml +++ b/dev/feed_rss_created.xml @@ -1 +1 @@ - pwndbg Blogpwndbg (/paʊnˈdiˌbʌɡ/) is a GDB plug-in that makes debugging with GDB suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers.https://pwndbg.re/pwndbg/latest/https://github.com/pwndbg/pwndbg/en Mon, 06 Oct 2025 21:31:24 -0000 Mon, 06 Oct 2025 21:31:24 -0000 1440 MkDocs RSS plugin - v1.17.3 https://pwndbg.re/pwndbg/assets/favicon.ico pwndbg Bloghttps://pwndbg.re/pwndbg/latest/ Pwndbg coding sprints report Disconnect3d Report of the two coding sprints with Pwndbghttps://pwndbg.re/pwndbg/latest/blog/2022/08/21/pwndbg-coding-sprints-report/ Sun, 21 Aug 2022 00:00:00 +0000pwndbg Bloghttps://pwndbg.re/pwndbg/latest/blog/2022/08/21/pwndbg-coding-sprints-report/ \ No newline at end of file + pwndbg Blogpwndbg (/paʊnˈdiˌbʌɡ/) is a GDB plug-in that makes debugging with GDB suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers.https://pwndbg.re/pwndbg/latest/https://github.com/pwndbg/pwndbg/en Mon, 06 Oct 2025 21:41:24 -0000 Mon, 06 Oct 2025 21:41:24 -0000 1440 MkDocs RSS plugin - v1.17.3 https://pwndbg.re/pwndbg/assets/favicon.ico pwndbg Bloghttps://pwndbg.re/pwndbg/latest/ Pwndbg coding sprints report Disconnect3d Report of the two coding sprints with Pwndbghttps://pwndbg.re/pwndbg/latest/blog/2022/08/21/pwndbg-coding-sprints-report/ Sun, 21 Aug 2022 00:00:00 +0000pwndbg Bloghttps://pwndbg.re/pwndbg/latest/blog/2022/08/21/pwndbg-coding-sprints-report/ \ No newline at end of file diff --git a/dev/feed_rss_updated.xml b/dev/feed_rss_updated.xml index 54722ad82..a447bc245 100644 --- a/dev/feed_rss_updated.xml +++ b/dev/feed_rss_updated.xml @@ -1 +1 @@ - pwndbg Blogpwndbg (/paʊnˈdiˌbʌɡ/) is a GDB plug-in that makes debugging with GDB suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers.https://pwndbg.re/pwndbg/latest/https://github.com/pwndbg/pwndbg/en Mon, 06 Oct 2025 21:31:24 -0000 Mon, 06 Oct 2025 21:31:24 -0000 1440 MkDocs RSS plugin - v1.17.3 https://pwndbg.re/pwndbg/assets/favicon.ico pwndbg Bloghttps://pwndbg.re/pwndbg/latest/ Pwndbg coding sprints report Disconnect3d Report of the two coding sprints with Pwndbghttps://pwndbg.re/pwndbg/latest/blog/2022/08/21/pwndbg-coding-sprints-report/ Mon, 06 Oct 2025 21:26:35 +0000pwndbg Bloghttps://pwndbg.re/pwndbg/latest/blog/2022/08/21/pwndbg-coding-sprints-report/ \ No newline at end of file + pwndbg Blogpwndbg (/paʊnˈdiˌbʌɡ/) is a GDB plug-in that makes debugging with GDB suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers.https://pwndbg.re/pwndbg/latest/https://github.com/pwndbg/pwndbg/en Mon, 06 Oct 2025 21:41:24 -0000 Mon, 06 Oct 2025 21:41:24 -0000 1440 MkDocs RSS plugin - v1.17.3 https://pwndbg.re/pwndbg/assets/favicon.ico pwndbg Bloghttps://pwndbg.re/pwndbg/latest/ Pwndbg coding sprints report Disconnect3d Report of the two coding sprints with Pwndbghttps://pwndbg.re/pwndbg/latest/blog/2022/08/21/pwndbg-coding-sprints-report/ Mon, 06 Oct 2025 21:33:22 +0000pwndbg Bloghttps://pwndbg.re/pwndbg/latest/blog/2022/08/21/pwndbg-coding-sprints-report/ \ No newline at end of file diff --git a/dev/objects.inv b/dev/objects.inv index b936a0075..be7966a7e 100644 Binary files a/dev/objects.inv and b/dev/objects.inv differ diff --git a/dev/reference/pwndbg/aglib/disasm/arch/index.html b/dev/reference/pwndbg/aglib/disasm/arch/index.html index 28774fdf0..cc12778d9 100644 --- a/dev/reference/pwndbg/aglib/disasm/arch/index.html +++ b/dev/reference/pwndbg/aglib/disasm/arch/index.html @@ -24,9 +24,9 @@ module-attribute (pwndbg.aglib.disasm.arch.DO_NOT_EMULATE)" href=#pwndbg.aglib.disasm.arch.DO_NOT_EMULATE>DO_NOT_EMULATE –

DEBUG_ENHANCEMENT module-attribute ¤

DEBUG_ENHANCEMENT = False
-

groups module-attribute ¤

groups = {v: _8for (k, v) in (items()) if startswith('CS_GRP_')}
-

ops module-attribute ¤

ops = {v: _lfor (k, v) in (items()) if startswith('CS_OP_')}
-

access module-attribute ¤

access = {v: _Yfor (k, v) in (items()) if startswith('CS_AC_')}
+

groups module-attribute ¤

groups = {v: _Vfor (k, v) in (items()) if startswith('CS_GRP_')}
+

ops module-attribute ¤

ops = {v: _Wfor (k, v) in (items()) if startswith('CS_OP_')}
+

access module-attribute ¤

access = {v: _Cfor (k, v) in (items()) if startswith('CS_AC_')}

DO_NOT_EMULATE module-attribute ¤

DO_NOT_EMULATE = {CS_GRP_INT, CS_GRP_INVALID, CS_GRP_IRET}

DisassemblyAssistant ¤

DisassemblyAssistant(architecture: X86_MATH_INSTRUCTIONS – 
 
   
 
 
  groups  module-attribute  ¤
 
groups = {v: _Nfor (k, v) in (items()) if startswith('X86_GRP_')}
-
 
 
 
 
 
  ops  module-attribute  ¤
 
ops = {v: _Ffor (k, v) in (items()) if startswith('X86_OP_')}
-
 
 
 
 
 
  regs  module-attribute  ¤
 
regs = {v: _4for (k, v) in (items()) if startswith('X86_REG_')}
-
 
 
 
 
 
  access  module-attribute  ¤
 
access = {v: _yfor (k, v) in (items()) if startswith('CS_AC_')}
+
 
 
 
 
 
  ops  module-attribute  ¤
 
ops = {v: _Ofor (k, v) in (items()) if startswith('X86_OP_')}
+
 
 
 
 
 
  regs  module-attribute  ¤
 
regs = {v: _Efor (k, v) in (items()) if startswith('X86_REG_')}
+
 
 
 
 
 
  access  module-attribute  ¤
 
access = {v: _Ofor (k, v) in (items()) if startswith('CS_AC_')}
 
 
 
 
 
 
  X86_MATH_INSTRUCTIONS  module-attribute  ¤
 
X86_MATH_INSTRUCTIONS = {
     X86_INS_ADD: "+",
     X86_INS_SUB: "-",
diff --git a/dev/reference/pwndbg/aglib/kernel/kallsyms/index.html b/dev/reference/pwndbg/aglib/kernel/kallsyms/index.html
index 5dde60ef3..3d3527969 100644
--- a/dev/reference/pwndbg/aglib/kernel/kallsyms/index.html
+++ b/dev/reference/pwndbg/aglib/kernel/kallsyms/index.html
@@ -4,7 +4,7 @@
 
   
       instance-attribute
-   (pwndbg.aglib.kernel.kallsyms.Kallsyms.kallsyms)" href=#pwndbg.aglib.kernel.kallsyms.Kallsyms.kallsyms>kallsyms (dict[str, tuple[int, str]]) – 
 
  
  •  kallsyms (list[tuple[str, str, int]]) – 
     
     
    •  
  •  kernel_addresses – 
     
     
    •   
     
     
      kallsyms  instance-attribute  ¤
     
    kallsyms: dict[str, tuple[int, str]] = {}
+   (pwndbg.aglib.kernel.kallsyms.Kallsyms.kernel_addresses)" href=#pwndbg.aglib.kernel.kallsyms.Kallsyms.kernel_addresses>kernel_addresses – 
     
       
     
     
      kallsyms  instance-attribute  ¤
     
    kallsyms: list[tuple[str, str, int]] = []
 
     
     
     
     
     
      kbase  instance-attribute  ¤
     
    kbase = kbase()
 
     
     
     
     
     
      r_base  instance-attribute  ¤
     
    r_base = vaddr
 
     
     
     
     
     
      kernel_ro_mem  instance-attribute  ¤
     
    kernel_ro_mem = read(vaddr, memsz)
@@ -107,5 +107,5 @@
 
     
     
     
     
     
      get_token_table ¤
     
    get_token_table()
 
     
     
     
     
     
      find_names_uncompressed ¤
     
    find_names_uncompressed()
 
     
     
     
     
     
      find_markers_uncompressed ¤
     
    find_markers_uncompressed()
-
     
     
    This function searches for the kallsyms_markers structure in the kernel memory Original Source: https://github.com/marin-m/vmlinux-to-elf/blob/master/vmlinux_to_elf/kallsyms_finder.py
     
     
     
     
     
     
     
      get ¤
     
    get() -> dict[str, tuple[int, str]]
+
     
     
    This function searches for the kallsyms_markers structure in the kernel memory Original Source: https://github.com/marin-m/vmlinux-to-elf/blob/master/vmlinux_to_elf/kallsyms_finder.py
     
     
     
     
     
     
     
      get ¤
     
    get() -> tuple[tuple[str, str, int], ...]
    \ No newline at end of file diff --git a/dev/reference/pwndbg/commands/cymbol/index.html b/dev/reference/pwndbg/commands/cymbol/index.html index 2cbb62542..c1877368c 100644 --- a/dev/reference/pwndbg/commands/cymbol/index.html +++ b/dev/reference/pwndbg/commands/cymbol/index.html @@ -1,4 +1,4 @@ - cymbol - Documentation
    Skip to content

    cymbol ¤

    Add, load, show, edit, or delete symbols for custom structures.

    For the generation of the symbols g++/gcc is being used under the hood.

    In case of remote debugging a binary which is not native to your architecture it is advised to configure the 'gcc-config-path' config parameter to your own cross-platform gnu gcc compiled toolchain for your target architecture.

    You are advised to configure the 'cymbol-editor' config parameter to the path of your favorite text editor. Otherwise cymbol expands $EDITOR and $VISUAL environment variables to find the path to the default text editor.

    Functions:

    Attributes:

    parser module-attribute ¤

    parser = ArgumentParser(description='Lookup kernel symbols')
-

    klookup ¤

    klookup(symbol: str) -> None
+

    klookup ¤

    klookup(symbol: str, apply: bool) -> None
    \ No newline at end of file diff --git a/dev/reference/pwndbg/dbg/gdb/index.html b/dev/reference/pwndbg/dbg/gdb/index.html index 37c922291..4d0e56a45 100644 --- a/dev/reference/pwndbg/dbg/gdb/index.html +++ b/dev/reference/pwndbg/dbg/gdb/index.html @@ -299,7 +299,7 @@

    dispatch_execution_controller ¤

    dispatch_execution_controller(
     procedure: Callable[[ExecutionController], Coroutine[Any, Any, None]],
 )
-

    add_symbol_file ¤

    add_symbol_file(path, base)
+

    add_symbol_file ¤

    add_symbol_file(path, base=None)

    GDBExecutionController ¤

    Bases: ExecutionController

    Methods:

    • Returns whether this process makes use of dynamically linked libraries.

      "dynamically linked"¤

      What exactly it means to be "dynamically linked" here is a little ill-defined. Ideally, this function should return true if the process uses the default dynamic linker for the system, as that would better reflect whether the process uses dynamic linking.

      Currently, though, Pwndbg expects it to behave the same as a check for the string "No shared libraries loaded at this time." in the output of the info dll GDB command, which checks for the presence of other modules in the address space of the process, rather than whether or not the dynamic linker is used.

      We should probably sort this out in the future.

    dispatch_execution_controller ¤

    dispatch_execution_controller(
     procedure: Callable[[ExecutionController], Coroutine[Any, Any, None]],
 )
-

    Queues up the given execution controller-based coroutine for execution, sometime between the calling of this function and the

    add_symbol_file ¤

    add_symbol_file(path, base)
+

    Queues up the given execution controller-based coroutine for execution, sometime between the calling of this function and the

    add_symbol_file ¤

    add_symbol_file(path, base=None)

    Adds a symbol file at base

    TypeCode ¤

    Bases: Enum

    Broad categories of types.

    Attributes:

    dispatch_execution_controller ¤

    dispatch_execution_controller(
     procedure: Callable[[ExecutionController], Coroutine[Any, Any, None]],
 )
-

    add_symbol_file ¤

    add_symbol_file(path, base)
+

    add_symbol_file ¤

    add_symbol_file(path, base=None)

    Adds a symbol file at base

    LLDBCommand ¤

    LLDBCommand(handler_name: str, command_name: str)

    Bases: CommandHandle

    Methods:

    • remove –

      Removes this command from the command palette of the debugger.

    Attributes:

    P module-attribute ¤

    P = ParamSpec('P')

    T module-attribute ¤

    T = TypeVar('T')
-

    PROMPT module-attribute ¤

    PROMPT = ANSI('\x1b[34mpwndbg-lldb> ')
+

    PROMPT module-attribute ¤

    PROMPT = ANSI('\x1b[34mpwndbg-lldb>\x1b[0m ')

    HISTORY_FILE module-attribute ¤

    HISTORY_FILE = expanduser('~/.pwndbg_history')

    FZF_RUN_CMD module-attribute ¤

    FZF_RUN_CMD = (
     "fzf",
diff --git a/dev/reference/pwndbg/lib/elftypes/index.html b/dev/reference/pwndbg/lib/elftypes/index.html
index 7e0bce3d8..253901c09 100644
--- a/dev/reference/pwndbg/lib/elftypes/index.html
+++ b/dev/reference/pwndbg/lib/elftypes/index.html
@@ -135,7 +135,7 @@
     47: "AT_L3_CACHEGEOMETRY",
     51: "AT_MINSIGSTKSZ",
 }
-

    AT_CONSTANT_NAMES module-attribute ¤

    AT_CONSTANT_NAMES = {v: _3for (k, v) in (items())}
+

    AT_CONSTANT_NAMES module-attribute ¤

    AT_CONSTANT_NAMES = {v: _afor (k, v) in (items())}

    constants ¤

    Attributes: