730 Commits (9105946b8bacc02a6cc7b41bcf52f967adeccf2a)

Author	SHA1	Message	Date
Your Name	9105946b8b	hack-pt-dump	3 years ago
disconnect3d	5943c5e16e	Fix #1020: do not show syscall name/args for non-syscall interrupt instructions on x86/x64	3 years ago
disconnect3d	695011385c	nearpc: don't create list in a .extend([ ... ]) call	3 years ago
Disconnect3d	8cc0ab8b48	Update tips.py	3 years ago
Hubert Bryłkowski	3d90b2916d	tip is picked at random	3 years ago
Hubert Bryłkowski	417215fada	show tip of the day is default	3 years ago
Hubert Bryłkowski	c8f1dbc1de	run tip of the day only on startup	3 years ago
Hubert Bryłkowski	1027ff2055	Added tip of the day	3 years ago
disconnect3d	71219361f5	refactor the _fs_gs_helper code	3 years ago
lebr0nli	afbe6f0c6f	Try fs/gs_base registers before ptrace'ing	3 years ago
Hubert Bryłkowski	f7e107c1d7	fix isort	3 years ago
Bet4	34a5847f04	Add gp register to MIPS	3 years ago
disconnect3d	748f4ce401	fix isort	3 years ago
disconnect3d	d49b29d150	improve setflags command	3 years ago
David	822c463701	fix to argument doc	3 years ago
David	cfc22d4de6	adjusts spacing in imports	3 years ago
David	44bd4151ff	Implements a setflag command for setting or unsetting individual flags in the $eflags register.	3 years ago
Joshua Pereyda	f2fcc95c64	fix splitmind compatibility issues from PR #1012	4 years ago
Vasily Galkin	1604116965	Display symbol name for computed disasm address ... Before this change the computed addresses (typically rip-related) in disasm output were always disaplyed numerically. After this change - if the address inside instruction is not literal but computed and wasn't directly substituted inside instruction it is disaplyed symbolically instead of numerically. Example - note the change for relative-addressed VARX variable Before: 0x441d23 <main+80217> call FileRead <FileRead> 0x441d28 <main+80222> sar eax, 0x16 0x441d2b <main+80225> and eax, 1 0x441d2e <main+80228> mov dword ptr [rbp - 0x154], eax 0x441d34 <main+80234> mov esi, 0x467435 0x441d39 <main+80239> mov edi, VAR_AB <0x681dc8> 0x441d3e <main+80244> call strstr@plt <strstr@plt> 0x441d43 <main+80249> test rax, rax 0x441d46 <main+80252> je main+80289 <main+80289> 0x441d48 <main+80254> mov eax, dword ptr [rip + 0x22e6fe] <0x67044c> 0x441d4e <main+80260> cmp eax, 0x60 0x441d51 <main+80263> setne al 0x441d54 <main+80266> movzx eax, al 0x441d57 <main+80269> mov dword ptr [rbp - 0x150], eax 0x441d5d <main+80275> mov eax, dword ptr [rbp - 0x150] 0x441d63 <main+80281> mov dword ptr [rbp - 0x144], eax 0x441d69 <main+80287> jmp main+80309 <main+80309> 0x441d6b <main+80289> mov dword ptr [rbp - 0x144], 0 0x441d75 <main+80299> mov dword ptr [rbp - 0x150], 1 0x441d7f <main+80309> mov edi, 0x467448 0x441d84 <main+80314> call puts@plt <puts@plt> After: 0x441d23 <main+80217> call FileRead <FileRead> 0x441d28 <main+80222> sar eax, 0x16 0x441d2b <main+80225> and eax, 1 0x441d2e <main+80228> mov dword ptr [rbp - 0x154], eax 0x441d34 <main+80234> mov esi, 0x467435 0x441d39 <main+80239> mov edi, VAR_AB <0x681dc8> 0x441d3e <main+80244> call strstr@plt <strstr@plt> 0x441d43 <main+80249> test rax, rax 0x441d46 <main+80252> je main+80289 <main+80289> 0x441d48 <main+80254> mov eax, dword ptr [rip + 0x22e6fe] <VARX> 0x441d4e <main+80260> cmp eax, 0x60 0x441d51 <main+80263> setne al 0x441d54 <main+80266> movzx eax, al 0x441d57 <main+80269> mov dword ptr [rbp - 0x150], eax 0x441d5d <main+80275> mov eax, dword ptr [rbp - 0x150] 0x441d63 <main+80281> mov dword ptr [rbp - 0x144], eax 0x441d69 <main+80287> jmp main+80309 <main+80309> 0x441d6b <main+80289> mov dword ptr [rbp - 0x144], 0 0x441d75 <main+80299> mov dword ptr [rbp - 0x150], 1 0x441d7f <main+80309> mov edi, 0x467448 0x441d84 <main+80314> call puts@plt <puts@plt> Note - gdb 11.2 `disassembly` for same code: 0x0000000000441d23 <+80217>: call 0x4021a5 <FileRead> 0x0000000000441d28 <+80222>: sar eax,0x16 0x0000000000441d2b <+80225>: and eax,0x1 0x0000000000441d2e <+80228>: mov DWORD PTR [rbp-0x154],eax 0x0000000000441d34 <+80234>: mov esi,0x467435 0x0000000000441d39 <+80239>: mov edi,0x681dc8 0x0000000000441d3e <+80244>: call 0x4012d0 <strstr@plt> 0x0000000000441d43 <+80249>: test rax,rax 0x0000000000441d46 <+80252>: je 0x441d6b <main+80289> 0x0000000000441d48 <+80254>: mov eax,DWORD PTR [rip+0x22e6fe] # 0x67044c <VARX> 0x0000000000441d4e <+80260>: cmp eax,0x60 0x0000000000441d51 <+80263>: setne al 0x0000000000441d54 <+80266>: movzx eax,al 0x0000000000441d57 <+80269>: mov DWORD PTR [rbp-0x150],eax 0x0000000000441d5d <+80275>: mov eax,DWORD PTR [rbp-0x150] 0x0000000000441d63 <+80281>: mov DWORD PTR [rbp-0x144],eax 0x0000000000441d69 <+80287>: jmp 0x441d7f <main+80309> 0x0000000000441d6b <+80289>: mov DWORD PTR [rbp-0x144],0x0 0x0000000000441d75 <+80299>: mov DWORD PTR [rbp-0x150],0x1 0x0000000000441d7f <+80309>: mov edi,0x467448 0x0000000000441d84 <+80314>: call 0x401020 <puts@plt>	4 years ago
dev2ero	e9b9ebe364	add argparse exception for banner	4 years ago
Disconnect3d	9dac5d2371	Update pwndbg/commands/context.py	4 years ago
dev2ero	f2d0fc2a01	bugfix: cast width's type from gdb.Value to int	4 years ago
dev2ero	782429c408	bugfix: For argparse, add nargs='?' parameter for default values	4 years ago
Yuri D'Elia	3e31bbea86	Try with lowercase xpsr register first on ARM Cortex M/gdb 8+ ... Attempt to use xPSR as a fallback only if xpsr fails.	4 years ago
Bet4	c11ac3710b	Show all registers of PowerPC	4 years ago
Bet4	1b3e43d983	Make pwndbg faster	4 years ago
Lonny Wong	a6d4da9d23	ignore non utf-8 characters in the source code	4 years ago
AetherBreeze	136b3b6a80	Add fortified function signatures ... - Add several fortified function signatures	4 years ago
Connor Nelson	eec6f741c7	Use `add-symbol-file` correctly.	4 years ago
lonnywong	cddbcb5ba5	Fix search bug in kernel mode	4 years ago
Tobias Faller	8b0595368d	Fixed multiple alignment issues of compact register view	4 years ago
Samanta Navarro	38c38aacfa	Fix typos ... Typos found with codespell.	4 years ago
Rivit	84e783a6fb	Ignore printing vertical tabs in vis_heap_chunks command	4 years ago
Disconnect3d	d348c74996	Update emulator.py	4 years ago
AnyKeyShik Rarity	9448cf5543	Fix error message on interrupts	4 years ago
Disconnect3d	5c0627d65b	Update pwndbg/glibc.py	4 years ago
cnwangjihe	e0e32dca79	fix ending of chain	4 years ago
cnwangjihe	94eea64307	safe-linking: use __libc_version when debug symbols loaded	4 years ago
cnwangjihe	09f2cb648b	Add safe-linking support	4 years ago
Disconnect3d	1d70e14418	Fix #932,#788: fix command parsing ... When we moved to argparse command parsing we introduced `gdb_sloppy_parse` which wasn't perfect: e.g. for `gdb.parse_and_eval("__libc_start_main")` would return a `gdb.Value()` whose `.type.name` was `long long`. As a result when code that used `gdb_sloppy_parse` then casted the result to `int(gdb_value)` it crashed because for some reason GDB errored. This commit fixes the issues related to it by adding `AddressExpr` and `HexOrAddressExpr` functions. It also adds tests for some of the windbg compatibility commands and fixes some nifty details here and there.	4 years ago
Disconnect3d	eee5dbcbf1	Remove Py2 class object inheritance ... The `class T(object):` can just be `class T:` in Py3, so this commit just removes such inheritance.	4 years ago
Disconnect3d	ef86a5ca3c	Remove shebang and coding lines ... Those lines are redundant in our case: pwndbg is not imported or launched directly. Also, the coding lines were relevant in Py2 but are not really needed in Py3.	4 years ago
Disconnect3d	89b2df582a	Remove incorrect i386 regs: dil/sil/spl/bpl ... Those regs does not seem to work on i386: I can't do `i r dil` in i386 but I can do so in amd64 binaries. Via https://www.tortall.net/projects/yasm/manual/html/arch-x86-registers.html : ``` The 64-bit x86 register set consists of 16 general purpose registers, only 8 of which are available in 16-bit and 32-bit mode. The core eight 16-bit registers are AX, BX, CX, DX, SI, DI, BP, and SP. The least significant 8 bits of the first four of these registers are accessible via the AL, BL, CL, and DL in all execution modes. In 64-bit mode, the least significant 8 bits of the other four of these registers are also accessible; these are named SIL, DIL, SPL, and BPL. The most significant 8 bits of the first four 16-bit registers are also available, although there are some restrictions on when they can be used in 64-bit mode; these are named AH, BH, CH, and DH. ``` and the table present there, it seems SIL, DIL, SPL and BPL are only available in 64-bit mode.	4 years ago
Disconnect3d	9a17798a5d	Speedup emulator by disabling debug formatting when not debugging	4 years ago
Disconnect3d	270fef38e0	Remove redundant disasm.is_call function	4 years ago
Disconnect3d	e239e9c1f6	Hopefully fix recursion error	4 years ago
anthraxx	3583b5704e	fix(tempdir): use safe and unpredictable cachedir location ... The typeinfo module used a static global tempdir location of /tmp/pwndbg that an attacker may control and prepare symlinks of the predictable files that are then written to.	4 years ago
Arusekk	1c633829de	Do not sort auxv, use the implicit order	4 years ago
Disconnect3d	6fd42dd5ab	Add attachp command and tests for it	4 years ago
Disconnect3d	34f9535c5f	Fix isort	4 years ago