lyc
/
pwndbg
mirror of https://github.com/pwndbg/pwndbg.git
1
0
Fork 0
Code Releases Activity
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
100 Commits
9 Branches
26 Tags
284 MiB
 
 
 
 
 
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '8f36054413'
${ noResults }
Go to file
Zach Riggle 8f36054413
Update functions 		11 years ago
caps Add screenshots, better readme 11 years ago
pwndbg Update functions 11 years ago
.gitignore lots of WIP stuff 11 years ago
LICENSE.md license 11 years ago
README.md Fix Python2 issues 11 years ago
gdbinit.py Sort imports 11 years ago
ida_script.py Merge remote-tracking branch 'origin/master' 11 years ago

README.md

pwndbg

A PEDA replacement. In the spirit of our good friend windbg, pwndbg is pronounced pwnd-bag.

  • Speed
  • Resiliency
  • Clean code

Best supported on Ubuntu 14.04 with default gdb or gdb-multiarch (e.g. with Python3).

Installation

  1. Clone the repo: git clone https://github.com/zachriggle/pwndbg
  2. Add to ~/.gdbinit: source ~/pwndbg/gdbinit.py

Prerequisites

As of recent versions, you need Capstone 4.0.

  1. Clone the repo: git clone https://github.com/aquynh/capstone
  2. Select the next branch: git checkout -t origin/next
  3. Build and install libcapstone: sudo make.sh install
  4. Build and install Python bindings: cd bindings/python && python setup.py install

Features

Does most things that PEDA does. Doesn't do things that PEDA does that pwntools or binjitsu (my fork of pwntools) do better.

Also has a basic windbg compat layer for e.g. dd, eb, da, dps. Now you can even eb eip 90!

Screenshots

Here's a screenshot of pwndbg working on an aarch64 binary running under qemu-user.

a

Here's a screenshot of PEDA. That it's aarch64 doesn't matter -- it chokes in the same way for everything qemu-user.

c

And here's a screenshot of GDB's built-in commands failing horribly. Note that while, yes, it gives output -- the addresses it does give are all wrong, and are just file offsets.

c