Go to file
disconnect3d 6a9c8d36b5 Fix #2490: Inform about outdated deps and updating process 2024-11-02 16:15:40 +01:00
.devcontainer Use ruff as the default Python formatter in devcontainer.json (#2148) 2024-05-04 21:30:29 -07:00
.github add python3.10, add debian12, drop python3.8, drop ubuntu20.04, drop debian11 (#2421) 2024-09-05 13:55:16 +02:00
caps Improve TUI handling and documentation (#2446) 2024-09-23 01:57:44 +02:00
docs add kallsyms + klookup (#2462) 2024-10-09 12:13:44 +02:00
nix pkg.nix: fix proper filename extension (#2471) 2024-10-11 16:48:40 +02:00
profiling Make shebangs and other bash usage portable (#2179) 2024-05-22 13:24:59 +02:00
pwndbg Add missing `bp.remove()` to `break_next_branch` 2024-10-29 23:19:22 +01:00
scripts add scripts/release.sh for building release binaries (#2399) 2024-08-29 18:19:41 +02:00
tests Fix memory.poke and make memory.peek return bytearray (#2483) 2024-10-27 20:07:22 +01:00
.dockerignore Bringt back Archlinux CI. Fixes #1772, closes #1783 (#1800) 2023-07-16 21:51:41 +02:00
.envrc Add nix development shell (#2166) 2024-06-25 01:42:34 +02:00
.gitignore Add nix development shell (#2166) 2024-06-25 01:42:34 +02:00
.readthedocs.yaml Add .readthedocs.yaml to enable rtd builds (#2456) 2024-09-27 02:49:50 +02:00
CREDITS.md docs: Add note about giving credit to ported tools (#2154) 2024-05-13 15:40:12 +02:00
DEVELOPING.md Fix terminal width to 80 columns in tests (#2444) 2024-09-19 18:02:58 +02:00
Dockerfile Fix and re-enable unit tests (#2182) 2024-05-29 00:33:37 -07:00
Dockerfile.arch Fix and re-enable unit tests (#2182) 2024-05-29 00:33:37 -07:00
Dockerfile.lldb Add initialization under LLDB (#2253) 2024-06-24 11:37:15 -07:00
FEATURES.md Improve TUI handling and documentation (#2446) 2024-09-23 01:57:44 +02:00
LICENSE.md Update LICENSE.md (#1963) 2023-12-20 01:41:21 +01:00
README.md Add message for older python version (#2470) 2024-10-11 16:48:57 +02:00
binja_script.py use user tags instead of auto tags for breakpoints (#2354) 2024-08-14 00:43:05 +02:00
docker-compose.yml add python3.10, add debian12, drop python3.8, drop ubuntu20.04, drop debian11 (#2421) 2024-09-05 13:55:16 +02:00
flake.lock bump: capstone=5.0.3 & unicorn=2.1.1 (#2451) 2024-10-10 13:28:46 +02:00
flake.nix Update Nix files for LLDB Pwndbg (#2410) 2024-09-03 17:27:59 +02:00
gdbinit.py Fix #2490: Inform about outdated deps and updating process 2024-11-02 16:15:40 +01:00
ida_script.py Update code to Python >= 3.8 (#1840) 2023-07-26 02:08:39 +02:00
lint.sh add python3.10, add debian12, drop python3.8, drop ubuntu20.04, drop debian11 (#2421) 2024-09-05 13:55:16 +02:00
lldbinit.py Port Pwndbg to LLDB (#2382) 2024-09-01 02:12:56 +02:00
mkdocs.yml Minor docs/website cleanup (#2159) 2024-05-09 13:48:42 -07:00
poetry.lock bump: capstone=5.0.3 & unicorn=2.1.1 (#2451) 2024-10-10 13:28:46 +02:00
poetry.toml Install dev dependencies with poetry (#2065) 2024-03-11 17:42:16 +01:00
pwndbg-lldb.py Update Nix files for LLDB Pwndbg (#2410) 2024-09-03 17:27:59 +02:00
pyproject.toml bump: capstone=5.0.3 & unicorn=2.1.1 (#2451) 2024-10-10 13:28:46 +02:00
qemu-tests.sh Qemu user test structure (#2275) 2024-08-17 01:49:45 +02:00
setup-dev.sh add python3.10, add debian12, drop python3.8, drop ubuntu20.04, drop debian11 (#2421) 2024-09-05 13:55:16 +02:00
setup.sh Add message for older python version (#2470) 2024-10-11 16:48:57 +02:00
tests.sh Qemu user test structure (#2275) 2024-08-17 01:49:45 +02:00
unit-tests.sh Qemu user test structure (#2275) 2024-08-17 01:49:45 +02:00

README.md

repository-open-graph

pwndbg

license Unit tests codecov.io Discord

pwndbg (/paʊnˈdiˌbʌɡ/) is a GDB plug-in that makes debugging with GDB suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers.

It has a boatload of features, see FEATURES.md and CHEATSHEET (feel free to print it!).

Why?

Vanilla GDB is terrible to use for reverse engineering and exploit development. Typing x/g30x $esp is not fun, and does not confer much information. The year is 2024 and GDB still lacks a real hexdump command! GDB's syntax is arcane and difficult to approach. Windbg users are completely lost when they occasionally need to bump into GDB.

What?

Pwndbg is a Python module which is loaded directly into GDB, and provides a suite of utilities and crutches to hack around all of the cruft that is GDB and smooth out the rough edges.

Many other projects from the past (e.g., gdbinit, PEDA) and present (e.g. GEF) exist to fill some these gaps. Each provides an excellent experience and great features -- but they're difficult to extend (some are unmaintained, and all are a single 100KB, 200KB, or 363KB file (respectively)).

Pwndbg exists not only to replace all of its predecessors, but also to have a clean implementation that runs quickly and is resilient against all the weird corner cases that come up. It also comes batteries-included, so all of its features are available if you run setup.sh.

How?

For a portable version with no external dependencies, scroll down for the Portable Installation section.

Installation from source is straightforward:

git clone https://github.com/pwndbg/pwndbg
cd pwndbg
./setup.sh

Or install via the Nix package manager (you can use Nix on any distribution):

nix shell github:pwndbg/pwndbg
pwndbg ./your-binary

Pwndbg is supported on Ubuntu 22.04, and 24.04 with GDB 12.1 and later. We do not test on any older versions of Ubuntu, so pwndbg may not work on these versions.

We may accept pull requests fixing issues in older versions on a case by case basis, please discuss this with us on Discord first. You can also always checkout an older version of pwndbg from around the time the Ubuntu version you're interested in was still supported by Canonical, or you can attempt to build a newer version of GDB from source.

Other Linux distributions are also supported via setup.sh, including:

  • Debian-based OSes (via apt-get)
  • Fedora and Red Hat (via dnf)
  • Clear (via swiped)
  • OpenSUSE LEAP (via zypper)
  • Arch and Manjaro (via community AUR packages)
  • Void (via xbps)
  • Gentoo (via emerge)

If you use any Linux distribution other than Ubuntu, we recommend using the latest available GDB built from source. You can build it as:

cd <gdb-sources-dir>
mkdir build && cd build
sudo apt install libgmp-dev libmpfr-dev libreadline-dev texinfo  # required by build
../configure --disable-nls --disable-werror --with-system-readline --with-python=`which python3` --with-system-gdbinit=/etc/gdb/gdbinit --enable-targets=all
make -j7

Portable Installation:

The portable version includes all necessary dependencies and should work without the need to install additional packages.

Download the Portable Version:

Download the portable version from the Pwndbg releases page by selecting the desired version. Choose the appropriate version for your system architecture (x86_64 or aarch64).

Installation on RPM-based Systems (CentOS/Alma/Rocky/RHEL):

dnf install ./pwndbg-2023.07.17.x86_64.rpm
# pwndbg

Installation on DEB-based Systems (Debian/Ubuntu/Kali):

apt install ./pwndbg_2023.07.17_amd64.deb
# pwndbg

Installation on Alpine:

apk add --allow-untrusted ./pwndbg_2023.07.17_x86_64.apk
# pwndbg

Installation on Arch Linux:

pacman -U ./pwndbg-2023.07.17-1-x86_64.pkg.tar.zst
# pwndbg

Generic Linux Installation:

tar -v -xf ./pwndbg_2023.07.17_amd64.tar.gz
# ./pwndbg/bin/pwndbg

What can I do with that?

For further info about features/functionalities, see FEATURES.

Who?

Pwndbg is an open-source project, maintained by many contributors!

Pwndbg was originally created by Zach Riggle, who is no longer with us. We want to thank Zach for all of his contributions to Pwndbg and the wider security community.

Want to help with development? Read CONTRIBUTING or join our Discord server!

How to develop?

To run tests locally you can do this in docker image, after cloning repo run simply

docker-compose run main ./tests.sh

Disclaimer - this won't work on apple silicon macs.

Contact

If you have any questions not worthy of a bug report, feel free to ping anybody on Discord and ask away.