gef

No entries match these filters. Clear filters

1. docs update Aug 22, 2026 · issue 053

   GEF adds has_fastbins() to detect whether the current glibc version supports fastbins.

2. 2026.01 Feb 2, 2026 · release notes

   GEF 2026.01 adds ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead. CI testing, always-visible top chunk in heap output, and a path argument for GotCommand.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2026.01 https://github.com/hugsy/gef.git
   # already have the repo? check out this version:
   $ git checkout 2026.01

   └──▷ TRY IT
   Inspect all heap chunks including the top chunk in a single pass — useful when hunting for corruption at the top of the heap.
   copy

   $ heap chunks -a

   • Adds ARM64 build testing via GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure., expanding verified architecture support.
   • Always prints the top chunk when running heap chunks -a, giving complete heap visibility.
   • Adds a path argument to GotCommand's build_line to support extended GOT inspection in gef-extras.
   • Limits the number of instructions scanned when guessing arguments in the context command, improving performance on large code blocks.
   • Installer script (gef.sh) now warns when an XDGXDGA set of specifications maintained by freedesktop.org that standardise where Linux applications store config, data, and cache files, letting tools respect user-defined paths instead of hardcoding locations. init file takes precedence over the standard .gdbinit.

   5 details in Everything

3. 2025.01 Jan 13, 2025 · release notes

   gef 2025.01 adds multi-filter vmmap flags, a simplified clear_screen command, and RISC-V core dump improvements.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2025.01 https://github.com/hugsy/gef.git
   # already have the repo? check out this version:
   $ git checkout 2025.01

   └──▷ TRY IT
   Filter vmmap output to only show specific region types (e.g. heap and stack) using multiple filter flags in a single session.
   copy

   $ gef➤ vmmap --heap --stack

   • Adds support for multiple filter flags in the vmmap command, enabling finer-grained memory map filtering.
   • Adds a simplified clear_screen command for clearing the GDB display.
   • Moves GEF to a Python 3.10 baseline, unlocking modern language features.

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !GEF now requires Python 3.10 as the minimum baseline; setups running Python < 3.10 will break on upgrade.
4. 2024.06 Jun 3, 2024 · release notes

   GEF 2024.06 adds arch command, stepover command, on_changed setting hook, and layout mapping API

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2024.06 https://github.com/hugsy/gef.git
   # already have the repo? check out this version:
   $ git checkout 2024.06

   └──▷ TRY IT
   Inspect or modify the architecture state directly using the new subcommand.
   copy

   $ arch show

   Configure GEF to execute a command whenever a setting changes value at runtime.
   copy

   $ set on_changed "log 'Config changed'"

   Write a plugin that accesses the window layout state via the new API.
   python copy

   layout = gef.get_layout_mapping()
   # Use layout to determine screen regions

   • arch command is introduced to manage the internal gef.arch object
   • New stepover command provides a dedicated stepping mechanism distinct from nexti/next
   • The on_changed setting hook enables actions when GEF configuration values change
   • A layout mapping API is exposed for use by external plugins

   4 details in Everything

5. 2024.01 Jan 12, 2024 · release notes

   GEF 2024.01 adds target-remote support, xinfo C++ symbols, heap summary type resolution, min/max/count filters, and memory map provider.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2024.01 https://github.com/hugsy/gef.git
   # already have the repo? check out this version:
   $ git checkout 2024.01

   • Adds basic support for the target remote command via gef-remote to connect to a remote GDB stub
   • Adds C++ symbol support in the xinfo command
   • Adds config setting to override libc version for heap analysis
   • Adds option to resolve type information when dumping heap summary
   • Adds memory map provider capability

   +2 more show less

   • Adds min-size and max-size filters to the heap chunks command
   • Adds count option to the heap chunks command to limit chunks processed

   7 details in Everything

6. 2023.08 Aug 21, 2023 · release notes

   Adds nop and skipi commands to GEF for patching or skipping instructions.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2023.08 https://github.com/hugsy/gef.git
   # already have the repo? check out this version:
   $ git checkout 2023.08

   └──▷ TRY IT
   Skip forward by N instructions without stopping, useful for bypassing checks.
   copy

   $ skipi <N>

   • New skipi command to skip N instructions

   1 detail in Everything

   └──▷ BREAKING ON UPGRADE

   • !main branch is now the default for GEF and GEF-Extras contributions.
7. 2022.06 Jun 26, 2022 · release notes

   GEF 2022.06 adds gef install subcommand, gef.remote namespace, pcustom class factory support and runtime session info

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2022.06 https://github.com/hugsy/gef.git
   # already have the repo? check out this version:
   $ git checkout 2022.06

   └──▷ HOW TO FIND IT
   Install a missing command from the extras repository without cloning the repo manually.
   📍gef install <command_name>
   Check if the current target is running inside a remote QEMUQEMUAn open-source machine emulator and virtualizer that lets software run a guest OS or CPU architecture on a different host, giving cyber tools an isolated, inspectable execution environment without dedicated hardware. instance.
   📍pi print(gef.session.qemu_mode)
   • gef install subcommand allows to install commands from gef-extras on the fly
   • Remote support has been entirely rewritten and is now fully exposed via the gef.remote namespace (including Qemu support)
   • pcustom supports class factory allowing structure(s) defined to collect information from the runtime
   • Runtime info is now available in gef.session, including .pagesize, .canary, .constants, .pid, .qemu_mode, and .remote

   4 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !ida-interact has been totally removed from core GEF
   • !Many commands relying on external dependencies (such as cs-dis, asm, or emulate) were transferred to gef-extras and are no longer available in core
8. 2022.01 Jan 30, 2022 · release notes

   GEF 2022.01 introduces a new Pythonic API via the gef namespace (gef.arch, gef.session, gef.memory, gef.ui) and rewrites the pcustom command for external ctypes structures.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2022.01 https://github.com/hugsy/gef.git
   # already have the repo? check out this version:
   $ git checkout 2022.01

   └──▷ USE IT
   Retrieve the current pointer size using the new API namespace instead of the deprecated function.
   shell copy

   pi print(gef.arch.ptrsize)

   Check if GEF is running in QEMUQEMUAn open-source machine emulator and virtualizer that lets software run a guest OS or CPU architecture on a different host, giving cyber tools an isolated, inspectable execution environment without dedicated hardware. mode using the new session state object.
   shell copy

   pi print(gef.session.qemu_mode)

   Use the rewritten pcustom command to parse a custom struct from memory using external ctypes.
   shell copy

   pcustom <path-to-ctypes-struct-file> <memory-address>

   • Exposes a new internal API accessible via the gef Python namespace, including gef.arch, gef.session, gef.memory, and gef.ui modules
   • Adds support for pluggable architectures via the @register_architecture decorator on the Architecture base class
   • Rewrites the pcustom command to allow external ctypes structures to be used by plugins or from the command line

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The get_memory_alignment() function is removed; use gef.arch.ptrsize instead.
   • !The get_pid() function is removed; use gef.session.pid instead.
   • !The __gef_redirect_output_fd__ variable is removed; use gef.ui.redirect_fd instead.
9. 2021.10 Oct 17, 2021 · release notes

   gef 2021.10 adds custom context panes and elf-info command rewrite

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2021.10 https://github.com/hugsy/gef.git
   # already have the repo? check out this version:
   $ git checkout 2021.10

   • Supports custom context panes to display external commands within the break context
   • Rewrites the elf-info command entirely for improved ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code. file analysis
   • Allows heap chunks to display chunks in any or all arenas

   3 details in Everything

10. 2021.07 Jul 6, 2021 · release notes

    gef 2021.07 adds alias subcommands and short flags for existing commands

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2021.07 https://github.com/hugsy/gef.git
    # already have the repo? check out this version:
    $ git checkout 2021.07

    └──▷ TRY IT
    Manage CLI aliases for quick access to complex gef commands.
    copy

    $ alias add p pattern x0
    alias list
    alias remove p

    Use short flags for faster interaction during debugging sessions.
    copy

    $ print-format -h x0
    pattern add 0xdeadbeef

    • Adds alias add, alias remove, and alias list subcommands to manage command aliases.
    • Updates the pattern command default period to 4 for pwntools compatibility.
    • Enables short flag support (e.g. -h) for commands like print-format.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !pattern command default period changed from previous value to 4, potentially altering output format.
11. 2020.06 Jun 14, 2020 · release notes

    gef 2020.06 adds recursive pcustom structures and Glibc 2.32 heap safe linking support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2020.06 https://github.com/hugsy/gef.git
    # already have the repo? check out this version:
    $ git checkout 2020.06

    └──▷ HOW TO FIND IT
    Install the new gef-binja plugin from within Binary Ninja.
    📍1. Open Binary Ninja 2. Go to Plugins › Plugin Store 3. Search for gef-binja 4. Click Install
    • pcustom: now supports recursive structure
    • Rewrite of gef-binja, and is now a plugin available from the Binary Ninja Plugin Store

    2 details in Everything

12. 2018.10 Oct 29, 2018 · release notes

    GEF v2018.10 adds RISC-V support, print-format command, convenience variables, and Tcache bins

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2018.10 https://github.com/hugsy/gef.git
    # already have the repo? check out this version:
    $ git checkout 2018.10

    └──▷ TRY IT
    Access PIE base address via the new convenience variable.
    copy

    $ print $_pie

    • print-format command for formatting output
    • Support for RISC-V architecture
    • Glibc Tcache bins support

    3 details in Everything

13. 2018.04 Apr 3, 2018 · release notes

    GEF 2018.04 adds function call argument display to context and a new extras repository

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2018.04 https://github.com/hugsy/gef.git
    # already have the repo? check out this version:
    $ git checkout 2018.04

    • context now displays arguments when hitting function call instructions
    • New dedicated external script repository gef-extras available for contribution
    • theme command allows more customizable display themes

    3 details in Everything