pwndbg
MIT馃К Reverse Engineering 路 Python
pwndbg is a GDB plugin that transforms the standard GNU Debugger into a powerful environment for exploit development and reverse engineering. It provides an enhanced context display showing registers, stack, disassembly, and source code simultaneously on every breakpoint. The heap analysis commands (heap, bins, arenas, tcache) make it essential for understanding heap exploitation techniques like use-after-free, double-free, and heap overflow attacks. pwndbg includes over 100 custom commands covering memory search, ROP gadget finding, format string analysis, and automatic symbol resolution. It integrates with pwntools for seamless CTF workflow and supports both GDB and LLDB backends. With over 10,000 GitHub stars, it has become the standard debugging environment for CTF players and exploit developers, largely replacing PEDA and GEF.
Installation
$ pip install pwndbgUse Cases
- Binary exploitation and CTF challenges
- Heap corruption analysis
- Debugging stripped binaries with enhanced context
Tags
Details
- Category
- 馃К Reverse Engineering
- Language
- Python
- Repository
- pwndbg/pwndbg
- License
- MIT
- Platforms
- 馃惂linux馃崕macos
Links
Used in 1 Workflow
Community Reviews
No reviews yet. Be the first to review pwndbg.
Alternatives & Comparisons
More in Reverse Engineering
dnSpy
C#.NET debugger, decompiler, and assembly editor. Inspect and modify .NET and Unity assemblies without source code.
ILSpy
C#Open-source .NET decompiler and assembly browser. Produces clean C# from compiled binaries with cross-platform support.
x64dbg
C++Open-source x64/x32 debugger for Windows. Full-featured binary debugger with plugin ecosystem for malware analysis and reverse engineering.
Detect It Easy
C++/QtBinary packer and compiler detection. Identifies compilers, linkers, packers, and protectors used to build PE, ELF, and Mach-O files.
angr
PythonBinary analysis framework. Symbolic execution, CFG recovery, and vulnerability discovery for compiled binaries in Python.
RetDec
C++Retargetable decompiler by Avast. Converts machine code back to C from x86, ARM, MIPS, and PowerPC binaries.