1c06c52b47
* fix: make mprotect command truly multi-arch Added register saving based on reg_sets defined for each processor architecture, additionally shellcraft is used to generate the arch-specific shellcode. Unfortunately this command is not currently tested on platforms other than x86_64. * Update pwndbg/commands/mprotect.py Co-authored-by: Disconnect3d <dominik.b.czarnota@gmail.com> * mprotect: Add parsing, alignment to the addr argument This change makes sure that the addr argument is parsed as an gdb expression (so you can use registers for example) and aligns it to the nearest page boundary. * mprotect: Clean up register saving, print the result Cleaned up saving of registers and added printing of the results, as per disconnect's sugesstions. * Simplify the test for mprotect Simplify the code and remove the useless binary * Update tests/test_mprotect.py Co-authored-by: Disconnect3d <dominik.b.czarnota@gmail.com> |
||
|---|---|---|
| .devcontainer | ||
| .github | ||
| caps | ||
| docs | ||
| gdb-pt-dump@f25898adc6 | ||
| profiling | ||
| pwndbg | ||
| tests | ||
| .coveragerc | ||
| .gitignore | ||
| .gitmodules | ||
| .pylintrc | ||
| DEVELOPING.md | ||
| Dockerfile | ||
| FEATURES.md | ||
| LICENSE.md | ||
| README.md | ||
| dev-requirements.txt | ||
| docker-compose.yml | ||
| gdbinit.py | ||
| ida_script.py | ||
| lint.sh | ||
| mkdocs.yml | ||
| pyproject.toml | ||
| pytests_collect.py | ||
| pytests_launcher.py | ||
| requirements.txt | ||
| setup-test-tools.sh | ||
| setup.cfg | ||
| setup.sh | ||
| tests.sh | ||
README.md
pwndbg
pwndbg (/poʊndbæg/) is a GDB plug-in that makes debugging with GDB suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers.
It has a boatload of features, see FEATURES.md.
Why?
Vanilla GDB is terrible to use for reverse engineering and exploit development. Typing x/g30x $esp is not fun, and does not confer much information. The year is 2022 and GDB still lacks a real hexdump command! GDB's syntax is arcane and difficult to approach. Windbg users are completely lost when they occasionally need to bump into GDB.
What?
Pwndbg is a Python module which is loaded directly into GDB, and provides a suite of utilities and crutches to hack around all of the cruft that is GDB and smooth out the rough edges.
Many other projects from the past (e.g., gdbinit, PEDA) and present (e.g. GEF) exist to fill some these gaps. Each provides an excellent experience and great features -- but they're difficult to extend (some are unmaintained, and all are a single 100KB, 200KB, or 363KB file (respectively)).
Pwndbg exists not only to replace all of its predecessors, but also to have a clean implementation that runs quickly and is resilient against all the weird corner cases that come up. It also comes batteries-included, so all of its features are available if you run setup.sh.
How?
Installation is straightforward. Pwndbg is best supported on Ubuntu 18.04 with GDB 7.11, and Ubuntu 20.04 with GDB 8.1.
git clone https://github.com/pwndbg/pwndbg
cd pwndbg
./setup.sh
Other Linux distributions are also supported via setup.sh, including:
- Debian-based OSes (via apt-get)
- Fedora and Red Hat (via dnf)
- Clear (via swiped)
- OpenSUSE LEAP (via zypper)
- Arch and Manjaro (via community AUR packages)
- Void (via xbps)
- Gentoo (via emerge)
If you use any Linux distribution other than Ubuntu, we recommend using the latest available GDB built from source. You can build it as:
cd <gdb-sources-dir>
mkdir build
cd build
../configure --disable-nls --disable-werror --with-system-readline --with-python=`which python3` --with-system-gdbinit=/etc/gdb/gdbinit --enable-targets=all
make -j7
What can I do with that?
For further info about features/functionalities, see FEATURES.
Who?
Pwndbg is an open-source project, written and maintained by many contributors!
Want to help with development? Read CONTRIBUTING or join our Discord server!
How to develop?
To run tests locally you can do this in docker image, after cloning repo run simply
docker-compose run main ./tests.sh
Disclaimer - this won't work on apple silicon macs.
Contact
If you have any questions not worthy of a bug report, feel free to ping anybody on Discord and ask away.