You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
Go to file
k4lizen cbda6f5eb3
order the contributing documentation properly (#3013)
7 months ago
.devcontainer Remove vscode personalization from devcontainer (#2602) 1 year ago
.github Debugger agnostic documentation generation (#2981) 7 months ago
caps Improve TUI handling and documentation (#2446) 1 year ago
docs order the contributing documentation properly (#3013) 7 months ago
nix Fix .gdbinit for portable pwndbg (#2947) 7 months ago
profiling cleanup: fix command names '_' with '-' (#2878) 8 months ago
pwndbg Fix regression with `lldb` after changes in Value.__len__ (#3018) 7 months ago
scripts Show differences in debuggers in the documentation (#2996) 7 months ago
tests Fix regression with `lldb` after changes in Value.__len__ (#3018) 7 months ago
.dockerignore Bringt back Archlinux CI. Fixes #1772, closes #1783 (#1800) 2 years ago
.envrc Add nix development shell (#2166) 1 year ago
.gitignore Debugger agnostic documentation generation (#2981) 7 months ago
CREDITS.md docs: Add note about giving credit to ported tools (#2154) 2 years ago
Dockerfile Fixes #2924: docker legacy warning (#2934) 7 months ago
Dockerfile.arch Fixes #2924: docker legacy warning (#2934) 7 months ago
Dockerfile.lldb Fixes #2924: docker legacy warning (#2934) 7 months ago
FEATURES.md Update FEATURES.md (#2681) 11 months ago
LICENSE.md Update LICENSE.md, fix license year (#2660) 11 months ago
README.md update readme (#3010) 7 months ago
binja_script.py Configure IDA/Binary Ninja integration server endpoint through environment (#2746) 10 months ago
docker-compose.yml Simplify local testing inside Docker environment (#2777) 9 months ago
flake.lock Bump flake.lock + cleanup nfpm.yml (#2817) 8 months ago
flake.nix use nixfmt-tree instead of calling the nixfmt-rfc-style directly (#2928) 8 months ago
gdbinit.py Cleanup sys.exit, os._exit, flush stdout, fix tests (#2931) 7 months ago
ida_script.py IDA: Support lookup of stack variables using `$ida("name")` (#2926) 8 months ago
lint.sh Debugger agnostic documentation generation (#2981) 7 months ago
lldbinit.py gdbinit, lldbinit: detect and prevent double-loading of pwndbg (#2912) 8 months ago
mkdocs.yml Order the documentation navigation (#2993) 7 months ago
pwndbg-lldb.py Add programatic controls to the LLDB Pwndbg CLI (#2785) 9 months ago
pyproject.toml Fix regression with `ipi` command (in portable build) (#3017) 7 months ago
qemu-tests.sh Qemu user test structure (#2275) 1 year ago
setup-dev.sh Improve contributing documentation (#2989) 7 months ago
setup.sh Remove poetry and add uv packet manager (#2726) 10 months ago
tests.sh clean up ./tests.sh print (#2984) 7 months ago
unit-tests.sh Qemu user test structure (#2275) 1 year ago
uv.lock Fix regression with `ipi` command (in portable build) (#3017) 7 months ago

README.md

repository-open-graph

pwndbg

license Tests codecov.io Discord

pwndbg (/paʊnˈdiˌbʌɡ/) is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers.

It has a boatload of features, see FEATURES.md and CHEATSHEET (feel free to print it!). If you have any questions you may read the documentation or asks us in our Discord server.

Why?

Vanilla GDB and LLDB are terrible to use for reverse engineering and exploit development. Typing x/30gx $rsp or navigating cumbersome LLDB commands is not fun and often provides minimal information. The year is 2025, and core debuggers still lack many user-friendly features such as a robust hexdump command. Windbg users are completely lost when they occasionally need to bump into GDB or LLDB.

Pwndbg is a Python module which is loaded directly into GDB or LLDB. It provides a suite of utilities and enhancements that fill the gaps left by these debuggers, smoothing out rough edges and making them more user-friendly.

Installation

See installation instructions.

What about ...?

Many other projects from the past (e.g., gdbinit, PEDA) and present (e.g. GEF) exist to fill some of these gaps. Each provides an excellent experience and great features -- but they're difficult to extend (some are unmaintained, and all are a single 100KB, 200KB, or 363KB file (respectively)).

Pwndbg exists not only to replace all of its predecessors, but also to have a clean implementation that runs quickly and is resilient against all the weird corner cases that come up.

When to Use GDB or LLDB?

Pwndbg supports both GDB and LLDB, and each debugger has its own strengths. Here's a quick guide to help you decide which one to use:

Use Case Supported Debugger
Debugging Linux binaries or ELF files GDB, LLDB
Debugging Mach-O binaries on macOS LLDB
Linux kernel debugging (qemu-system) GDB, LLDB
Linux user-space emulation (qemu-user) GDB
Embedded debugging (ARM Cortex M* or RISC-V/32) GDB, LLDB

Pwndbg ensures a consistent experience across both, so switching between them is seamless.

The LLDB implementation in pwndbg is still in early-stage and may contain bugs or limitations.
Known issues are tracked in GitHub Issues.

If you encounter any problems, feel free to report them or discuss on our Discord server.

Compatibility Table

Feature Supported Version Notes
pwndbg-gdb - Python 3.10+
- GDB 12.1+
Battle-tested on Ubuntu 22.04/24.04
pwndbg-lldb - Python 3.12+
- LLDB 19+
Experimental/early-stage support
qemu-user QEMU 8.1+ vFile API is needed for vmmap
qemu-system QEMU 6.2+ Supported version since ubuntu 22.04

Contributing

Pull requests are welcome ❤️. Check out the Contributing Guide.

Acknowledgements

Pwndbg was originally created by Zach Riggle, who is no longer with us. We want to thank Zach for all of his contributions to pwndbg and the wider security community.