https://cybertoolchain.io/tools/gef New releases and features in gef, tracked by The Cyber Toolchain. en Mon, 02 Feb 2026 03:31:54 GMT https://github.com/hugsy/gef/releases/tag/2026.01 https://github.com/hugsy/gef/releases/tag/2026.01 Mon, 02 Feb 2026 03:31:54 GMT GEF 2026.01 adds ARM64 CI testing, always-visible top chunk in heap output, and a path argument for GotCommand. • Adds ARM64 build testing via GitHub Actions, expanding verified architecture support. • Always prints the top chunk when running `heap chunks -a`, giving complete heap visibility. • Adds a `path` argument to `GotCommand`'s `build_line` to support extended GOT inspection in gef-extras. • Limits the number of instructions scanned when guessing arguments in the `context` command, improving performance on large code blocks. • Installer script (`gef.sh`) now warns when an XDG init file takes precedence over the standard `.gdbinit`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gef https://github.com/hugsy/gef/releases/tag/2025.01 https://github.com/hugsy/gef/releases/tag/2025.01 Mon, 13 Jan 2025 02:54:13 GMT gef 2025.01 adds multi-filter vmmap flags, a simplified clear_screen command, and RISC-V core dump improvements. • Adds support for multiple filter flags in the `vmmap` command, enabling finer-grained memory map filtering. • Adds a simplified `clear_screen` command for clearing the GDB display. • Moves GEF to a Python 3.10 baseline, unlocking modern language features. Breaking changes: • GEF now requires Python 3.10 as the minimum baseline; setups running Python < 3.10 will break on upgrade. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gef https://github.com/hugsy/gef/releases/tag/2024.06 https://github.com/hugsy/gef/releases/tag/2024.06 Mon, 03 Jun 2024 03:41:31 GMT GEF 2024.06 adds `arch` command, `stepover` command, `on_changed` setting hook, and layout mapping API • `arch` command is introduced to manage the internal `gef.arch` object • New `stepover` command provides a dedicated stepping mechanism distinct from `nexti`/`next` • The `on_changed` setting hook enables actions when GEF configuration values change • A layout mapping API is exposed for use by external plugins Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gef https://github.com/hugsy/gef/releases/tag/2024.01 https://github.com/hugsy/gef/releases/tag/2024.01 Fri, 12 Jan 2024 16:43:56 GMT GEF 2024.01 adds `target-remote` support, `xinfo` C++ symbols, heap summary type resolution, min/max/count filters, and memory map provider. • Adds basic support for the `target remote` command via gef-remote to connect to a remote GDB stub • Adds C++ symbol support in the `xinfo` command • Adds config setting to override libc version for heap analysis • Adds option to resolve type information when dumping heap summary • Adds memory map provider capability • Adds min-size and max-size filters to the `heap chunks` command • Adds count option to the `heap chunks` command to limit chunks processed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gef https://github.com/hugsy/gef/releases/tag/2023.08 https://github.com/hugsy/gef/releases/tag/2023.08 Mon, 21 Aug 2023 20:24:03 GMT Adds `nop` and `skipi` commands to GEF for patching or skipping instructions. • New `skipi` command to skip N instructions Breaking changes: • `main` branch is now the default for GEF and GEF-Extras contributions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gef https://github.com/hugsy/gef/releases/tag/2022.06 https://github.com/hugsy/gef/releases/tag/2022.06 Sun, 26 Jun 2022 17:19:17 GMT GEF 2022.06 adds `gef install` subcommand, `gef.remote` namespace, `pcustom` class factory support and runtime session info • `gef install` subcommand allows to install commands from gef-extras on the fly • Remote support has been entirely rewritten and is now fully exposed via the `gef.remote` namespace (including Qemu support) • `pcustom` supports class factory allowing structure(s) defined to collect information from the runtime • Runtime info is now available in `gef.session`, including `.pagesize`, `.canary`, `.constants`, `.pid`, `.qemu_mode`, and `.remote` Breaking changes: • `ida-interact` has been totally removed from core GEF • Many commands relying on external dependencies (such as `cs-dis`, `asm`, or `emulate`) were transferred to gef-extras and are no longer available in core Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gef https://github.com/hugsy/gef/releases/tag/2022.01 https://github.com/hugsy/gef/releases/tag/2022.01 Sun, 30 Jan 2022 22:46:28 GMT GEF 2022.01 introduces a new Pythonic API via the `gef` namespace (`gef.arch`, `gef.session`, `gef.memory`, `gef.ui`) and rewrites the `pcustom` command for external ctypes structures. • Exposes a new internal API accessible via the `gef` Python namespace, including `gef.arch`, `gef.session`, `gef.memory`, and `gef.ui` modules • Adds support for pluggable architectures via the `@register_architecture` decorator on the `Architecture` base class • Rewrites the `pcustom` command to allow external `ctypes` structures to be used by plugins or from the command line Breaking changes: • The get_memory_alignment() function is removed; use `gef.arch.ptrsize` instead. • The get_pid() function is removed; use `gef.session.pid` instead. • The `__gef_redirect_output_fd__` variable is removed; use `gef.ui.redirect_fd` instead. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gef