pwndbg — The Cyber Toolchain

pwndbg 2026.10.22

Thu, 22 Oct 2026 11:26:07 GMT

pwndbg 2026.10.22 adds m68k support, Objective-C inspection, Android Bionic detection, Linux 7.0 SLUB sheaf/barn, setrlimit, and SIMD register display.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `nearpc --opcode` / `nearpc -o` to show opcode bytes sized to the longest instruction in the listing, or `nearpc -o 4` for a fixed-width column — without changing `nearpc-num-opcode-bytes`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `objc show-class -n ` to display Objective-C class metadata in pseudo-ObjC syntax, including method implementations and selector addresses, with `-a

` and `-m ` lookups, and `objc list-classes` to list Objective-C classes in the main module, where `-a` includes all modules except the DYLD shared cache and `-A` includes it. • Adds `setrlimit` command to set debugee resource limits — e.g. `setrlimit nofile 1 2` sets soft and hard open-file limits, `setrlimit core infinite` sets both core-file limits to unlimited. • Extends `regs` to display SIMD registers (e.g. `regs xmm0`) and decode individual flags-register bits (e.g. `regs eflags`). • Updates `slab info` to display per-CPU sheaves and per-node barns for Linux 7.0+. • Adds LLDB `target create -r` flag for specifying a remote executable path and `process launch -w` for setting the working directory. • Adds LLDB `target.run-args` support so launch now respects pre-configured run arguments. • Adds m68k architecture support including Capstone disassembly, Unicorn emulation, branch target resolution, and instruction annotations. • Pwndbg no longer refuses to start on unknown architectures — falls back to the underlying debugger's disassembler with reduced context and no emulation. • Adds Android Bionic libc detection, surfaced via the `libc` / `libcinfo` command showing libc and loader mappings. Breaking changes: • The `resolve-heap-via-heuristic` configuration key is deprecated and has no effect — pwndbg now always tries symbols first and then heuristics regardless of this setting. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg

pwndbg 2026.09.15

Sun, 20 Sep 2026 12:08:49 GMT

pwndbg gains backwards disassembly, new `stack-vis` command, `nearpc -f` without symbols, and full page info on `v2p`/`p2v`/`pageinfo`⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `stack-vis` command to visualize stack frames of the current thread, similar to how `vis-heap-chunks` visualizes heap chunks.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Expands `nearpc -f`/`--function` to work without debugging symbols, making it a full replacement for GDB's/LLDB's `disass` command with branch visualization, branch targets, and operand annotations. • Expands `v2p`, `p2v`, and `pageinfo` commands to display full page info including vaddr, paddr, and page. • Adds backwards disassembly in context disasm and `nearpc`, showing instructions before `$PC` when stopping at a breakpoint or after a syscall. • Enables emulation when debugging x64 kernels, unlocking emulated instruction flow and concrete operand display in the disassembly system. • Improves indirect jump handling for x86 PLT, `ret` instructions, and memory-indirect jumps that can segfault, enabling visualization of segfaulting ROP chains. Breaking changes: • `pwndbg.dbg_mod.Error` is renamed to `pwndbg.dbg_mod.DebuggerError`; any plugin or script that catches or references `pwndbg.dbg_mod.Error` will break on upgrade. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg

pwndbg 2026.07.29

Thu, 30 Jul 2026 16:31:57 GMT

pwndbg 2026.07.29 adds exithandlers inspection, four kernel task commands, glibc 2.43 heap support, and heap allocation call-site tracking. • Adds `exithandlers` command (alias `exitfuncs`) to list registered glibc exit handlers by walking `__exit_funcs` and `tls_dtor_list`, demangling PTR_MANGLEd function pointers, and printing the `pointer_guard` cookie. • Adds four new Linux kernel task introspection commands without requiring typeinfo: `kstack [pid]`, `kseccomp [pid]`, `ksighand [pid]`, and `knamespace [pid]`. • Adds `percpu` GDB function to resolve per-CPU variables inside `print`/`break` expressions during kernel debugging. • Adds `v2p` and `p2v` GDB function helpers to convert between virtual and physical addresses inside expressions. • Adds support for breaking at the start of a JIT-compiled eBPF program. • Adds glibc 2.43 heap inspection support, including tcache large chunks since glibc 2.42. • Adds `heap --count ` and address range limits (`heap `) to walk only a requested portion of the heap. • Adds `track-heap enable --where` to annotate each heap allocation event with its nearest program symbol call site. • Adds `track-heap enable -r` to report heap event offsets relative to the mapping instead of absolute addresses. • Detects musl libc in statically linked binaries. • Enriches `procinfo` file descriptor output with netlink socket protocol/portid/groups, unix-domain socket peer process, and pipe peers with read/write end information. • Adds `--quiet` and `--force` flags to the `mmap`/`mprotect` commands. • Replaces the system `readelf` with pyelftools for ELF parsing across all architectures without requiring an external tool. • Adds `set vmmap-cache` to persist vmmap across stops on macOS. • Marks unresolved conditional branches with a question mark in the disassembly view. • Indicates when the current PC is at a breakpoint with a `b►` marker in the disassembly view. • Adds `set telescope-pad-leading-zeroes on` to zero-pad pointer-aligned integers to pointer width in `telescope` output. • GDB's `print` command now displays values in hex by default. • Extends `dt` command to properly handle bitfields (with sub-byte offsets like `+0x0000.1`), nested struct offsets, and flexible array members. • Extends `stepsyscall` to step until a given syscall name or a condition expression, e.g. `stepsyscall write` or `stepsyscall -c '$rdi==0'`. • Adds an optional count/length parameter to the windbg-style `dds`/`dps`/`dqs`/`kd` commands. • Command history and Enter-to-repeat now work on LLDB. • Enables RISC-V B extension disassembling. • Moves the pwndbg themes collection into the main repository under the `themes/` directory. • Page table scanning now reads `/proc/pid/mem` by default for significantly faster vmmap operations. • Kernel image downloads are now parallelized for faster retrieval. • `slab_contains` now shows inuse/total object count on its own line. Breaking changes: • The `mallocng-dump`, `mallocng-vis`, `jemalloc-heap`, `jemalloc-extent-info`, `knft-list-tables` (and similar dash-separated) commands are replaced by subcommands: use `mallocng dump`, `mallocng vis`, `jemalloc heap`, `jemalloc extent-info`, `knft list-tables` etc. instead. • The `cyclic` command now generates a de Bruijn sequence consistent with `pwn cyclic` from pwntools; previously generated sequences will differ. • Developer API: `pwndbg.aglib.disasm.arch` is renamed to `pwndbg.aglib.disasm.assistant`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg

pwndbg 2026.02.18

Wed, 18 Feb 2026 14:54:30 GMT

pwndbg 2026.02.18: branch viz in nearpc, decompiler integration, new kernel commands, LLDB core file support, and compact register modes • Adds radare2-inspired branch visualization in `nearpc` disassembly output using Unicode characters; disable with `-n`/`-no-branch` • Adds `nearpc -f ` to disassemble an entire function at once • Adds `nearpc -r` and `nearpc -t` parameters to control the number of previous and total instructions displayed • Adds decompiler integration via decomp2dbg, supporting IDA, Binary Ninja, Ghidra, and angr-management as backends; works with both GDB and LLDB • Adds `kmem-trace` command to trace SLUB and buddy Linux kernel allocator allocations and frees • Adds `kcurrent [pid] [-set]` command to display info about the current or a given kernel task • Adds `kfile [pid] [-fd [fd]]` command to display file descriptors accessible by the current or a given kernel task • Extends `pagewalk` to walk page tables of different kernel tasks when debug info is present • Adds LLDB support for core file loading and debugging • Adds `starti` command for LLDB • Adds `set show-compact-regs very` and `set show-compact-regs hardcut` modes for condensed register display • Adds stack variable names and offsets in the context display when debug info is present • Adds `ctx -a` to display all context sections at once • Adds a last-signal context panel showing the last signal received by the debugee • Adds `set context-backtrace-hex on` to display backtrace offsets in hexadecimal • Adds `context-tui-adjust-height on|off` for GDB TUI mode to control whether sections fill the full terminal height • Adds `set vis-skip-repeating-val on|off` to make the `vis` command collapse repeated lines • Adds `hexdump -C py` and `hexdump -C c` flags to dump memory as Python or C code arrays • Adds Intel PKU (Memory Protection Keys for Userspace) violation detection with detailed info messages • Extends the `patch` command to support more architectures via Zig • Adds syntax highlighting for decompiled code with IDA Pro • Adds `CONFIG_SLAB_VIRTUAL` and SLUB support for Linux kernel >= 6.18 • Adds PowerPC branch resolution and emulation • Adds Sparc branch following support • Adds detection of more MIPS architecture variants • Adds `XDG_CONFIG_HOME` environment variable lookup for the gdbinit file • Enables debuginfod client by default in portable releases, automatically fetching debug symbols from a hosted server covering Ubuntu, Debian, Fedora, Arch, NixOS, and more • Expands `vmmap` to show more pages when working with core files • Improves ropgadget integration with color support Breaking changes: • Deprecated underscore command aliases are removed (e.g. `heap_config` no longer works; use `heap-config` instead). • The `pwndbg.aglib.regs["x"]` bracket access is replaced with pwndbg.aglib.regs.read_reg("x"); existing scripts using bracket access will break. • The ppc64 big-endian portable release is dropped. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg

pwndbg 2025.10.20

Mon, 20 Oct 2025 21:22:52 GMT

pwndbg 2025.10.20 adds a new `kbpf` command for kernel BPF introspection and improves page marker detection. • Adds `kbpf` command for inspecting kernel BPF internals during live kernel debugging sessions. • Enables page marker detection without requiring debug symbols, broadening kernel debugging coverage. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg

pwndbg 2025.10.10

Thu, 09 Oct 2025 20:55:41 GMT

pwndbg 2025.10.10 adds musl mallocng commands, new kernel debug commands, LLDB Objective-C/Mach-O support, and cyclic --detect. • New `kdmesg` command for dumping kernel dmesg during kernel debugging. • New `ktask` command for dumping kernel task info during kernel debugging. • New `kmod` command for dumping kernel module info during kernel debugging. • New `ksyscall` command for dumping kernel syscall info during kernel debugging. • New `kdmabuf` command for dumping DMA buf info during kernel debugging. • Improved `vmmap` output for kernel debugging sessions. • New `ng-explain` command to explain musl mallocng slot layout. • New `ng-find` command to locate a slot, group, or meta by address in musl mallocng. • New `ng-slots` command to inspect musl mallocng slots. • New `ng-metaarea` and `ng-ctx` commands to inspect musl mallocng internals. • New `ng-vis` command to visualize the musl mallocng heap. • New `ng-dump` command to dump musl mallocng heap state. • Adds `--detect` flag to `cyclic` command to detect cyclic sequences in registers and memory. • New `max-decimal-number` config option to set the threshold above which values display in hex instead of decimal. • New `disasm-branch-on` and `disasm-branch-off` theme options for branch jump markers in disassembly. • New `disasm-reg-alias` config option to force disassembly to use register aliases (e.g. aarch64 x29 → fp). • Adds Objective-C and Mach-O support on Darwin under LLDB. • Improved `vmmap` output on Darwin under LLDB, incorporating DYLD Shared Cache. • New `commpage` command in LLDB to dump Apple commpage memory mapping. • Adds arm64e architecture support in LLDB. • Adds fzf (fuzzy finder) tab completion in LLDB. • Adds `help set` command in LLDB. • Adds Go binaries support for mips, loongarch64, and s390x architectures. • Updated Capstone disassembly engine to version 6 alpha5. • Portable releases now include `zig`, enabling commands such as `cyclic` in portable builds. Breaking changes: • The `PWNDBG_PLEASE_SKIP_VENV` environment option is removed; setups that relied on it will break. • The `PWNDBG_DISABLE_COLORS` environment option is removed; use `NO_COLOR` instead. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg

pwndbg 2025.05.30

Sat, 31 May 2025 23:09:27 GMT

pwndbg 2025.05.30 adds kernel debugging commands, ✘ branch markers, dump-register-frame, s390x support, and IDA stack variable lookup. • New `buddydump` command inspects Linux kernel buddy allocator state on x86-64. • New `msr` command reads/writes Model-Specific Registers during ring0 kernel debugging. • New `dump-register-frame` command dumps saved register frames, useful for ARM Cortex-M exception/interrupt debugging. • Disassembly now marks branches that will NOT be taken with a ✘ marker via emulation. • Adds initial support for the IBM s390x architecture. • Adds Capstone disassembler support and heap (TLS) support for LoongArch64. • Adds Cortex-M exception return address resolution and context handling. • Exposes additional x64 registers for QEMU-system kernel debugging. • Improved `slab` command output and handling for kernel slab allocator inspection. • Supports stack variable lookup in IDA integration via $ida("var_name"). • Upgraded Capstone to version 6, enabling new architecture and disassembly improvements. • One-liner portable install now available for Linux and macOS (both GDB and LLDB variants). Breaking changes: • Passthrough for shell commands has been removed due to stability and security concerns. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg

pwndbg 2025.04.18

Sat, 19 Apr 2025 12:29:30 GMT

pwndbg adds `libcinfo` command, breakpoint markers in disasm, improved `tls`/`attachp` commands, and LoongArch64/Apple Silicon portable builds. • New `libcinfo` command displays the glibc version used by the debugged program and links to its source. • Context disasm panel now marks user-set breakpoints inline (shown as `b+` by default). • The `tls` command now renders thread-local storage as a structured `tcbhead_t` view; new `-a` flag shows full output. • The `attachp` command defaults to attaching to a process matching the currently loaded binary's name; new `--exact` flag enables precise process matching. • Adds portable GDB and LLDB builds for LoongArch64 Linux (`*_loongarch64-portable.tar.xz`). • Adds native GDB portable build for Apple Silicon macOS (remote ELF debugging only). • LLDB now supports Ctrl+C cancellation of long-running operations. • LLDB gains programmatic debugger controls, usable as an API for scripting and tests. • Backward-compatibility aliases added so old underscore-style command names (e.g., `heap_config`) inform users of the new dash-style equivalents. Breaking changes: • All pwndbg command names now use dashes instead of underscores (e.g., `heap-config` instead of `heap_config`); scripts or keybindings using the old underscore names will need updating. • The config parameter `telescope-skip-repeating-val-minimum` has been renamed to `telescope-skip-repeating-val-min`; any saved config using the old name will no longer apply. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg

pwndbg 2025.04.13

Wed, 16 Apr 2025 23:42:29 GMT

pwndbg 2025.04.13 adds breakpoint markers in disasm view, new `libcinfo` command, enhanced `tls`/`attachp`, and LoongArch64+Apple Silicon builds. • Adds breakpoint markers in the context disasm panel, displayed as `b+` next to breakpointed instructions. • New `libcinfo` command displays the glibc version used by the debugged program and links to its source. • Enhances `tls` command with a structured `tcbhead_t` view and a `-a` flag to show the full thread-local storage dump. • Improves `attachp` command: defaults to the process matching the currently loaded binary name and adds `--exact` for precise process matching. • Adds `hexdump-limit-mb` config to cap memory reads at 10 MB, preventing OOM conditions during large dumps. • Ships first portable builds for LoongArch64 Linux (GDB and LLDB) and native Apple Silicon GDB (remote ELF debugging). • LLDB now supports CTRL+C cancellation of long-running operations and programmatic debugger controls via API. • Portable release bundles GDB upgraded from 15.2 to 16.2. Breaking changes: • All pwndbg command names now use dashes instead of underscores (e.g., `heap-config` instead of `heap_config`); scripts or aliases using underscore forms will break. • The config parameter `telescope-skip-repeating-val-minimum` has been renamed to `telescope-skip-repeating-val-min`; existing config files referencing the old name will no longer apply the setting. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg

pwndbg 2025.02.19

Fri, 21 Feb 2025 01:52:49 GMT

pwndbg 2025.02.19 adds Linux kernel nftables inspection commands, LoongArch64 support, and new cymbol/dumpargs capabilities. • Adds eight new kernel nftables inspection commands: `knft_dump`, `knft_list_tables`, `knft_list_chains`, `knft_list_rules`, `knft_list_exprs`, `knft_list_sets`, `knft_list_objects`, and `knft_list_flowtables`. • Adds initial LoongArch64 architecture support, using native GDB/LLDB disassemblers in the `disasm` context section. • The `cymbol` command now accepts a `-f header-filepath.h` flag to load symbols directly from C header files. • The `dumpargs` command now displays formatted bit flags, currently supporting mmap flags. • IDA and Binary Ninja integration servers can now be configured via `PWNDBG_IDA_SERVER_HOST`, `PWNDBG_IDA_SERVER_PORT`, `PWNDBG_BINJA_SERVER_HOST`, and `PWNDBG_BINJA_SERVER_PORT` environment variables. • Adds GDB 16+ compatibility support. • LLDB gains fallback disassembly for architectures not supported by Capstone (e.g. LoongArch64), plus ported `version` and `bugreport` commands. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg

pwndbg 2025.01.20

Mon, 20 Jan 2025 10:30:48 GMT

Pwndbg 2025.01.20 adds LLDB support, macOS/Mach-O debugging, TUI layout, jemalloc inspection, and 8 new commands. • Adds LLDB backend via a new debugger-agnostic library (`aglib`), bringing most Pwndbg functionality to LLDB alongside GDB. • Supports macOS (Intel & Apple Silicon) and Mach-O binary debugging via LLDB. • Adds GDB Text User Interface (TUI) layout with `tui layout pwndbg` and `tui layout pwndbg_code`. • Adds context history navigation with new `contextprev` and `contextnext` commands. • New `gdt ` command dumps Global Descriptor Table entries from a given address. • New `strings` command searches memory for readable strings, similar to the `strings` CLI utility. • New `jemalloc_heap`, `jemalloc_extent_info`, and `jemalloc_find_extent` commands inspect jemalloc heap allocator structures. • New `hijack-fd ` command modifies a process file descriptor. • New `kallsyms` and `klookup` commands provide Linux kernel symbol table lookup helpers. • New `profiler {start,stop}` command benchmarks Pwndbg performance and identifies bottlenecks. • Improves embedded systems debugging with better vmmap detection and enhanced `vmmap_add` and `vmmap_load` commands. • The `ropgadget` command now scans all executable memory regions for gadgets. • `context

` gains `--on|--off` toggle to temporarily disable individual sub-sections. • `plist` gains `--offset` and `--count` options to limit the number of linked list elements printed. • Adds `vmmap -C ` to display N pages before and after a filtered vmmap entry. • Speeds up syntax highlighting via pygments and reduces Pwndbg startup time. Breaking changes: • Python 3.8, Ubuntu 20.04, and Debian 11 are no longer supported. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg

pwndbg 2024.08.29

Mon, 09 Sep 2024 11:27:39 GMT

Pwndbg 2024.08.29 adds Binary Ninja integration, Go debugging commands, glibc UAF tracking, assembly search, and richer disasm annotations. • Adds Binary Ninja integration to synchronize Binary Ninja view and symbols with Pwndbg. • Adds `go-dump

` command to dump Go types (including interface objects via the `any` type). • Adds `go-type

` command to inspect Go type information. • Adds glibc heap UAF (use-after-free) tracking and detection. • Extends `search` with `--asm

` to find assembly instructions and `--asmbp ` to set breakpoints on matching instructions.
• Adds `vmmap --gaps` to display unmapped memory gaps alongside mapped regions.
• Disassembly view displays upcoming syscall details for syscall instructions.
• Disasm banner now shows ARM mode (ARM vs Thumb).
• Honors MIPS delay slots in the disassembly view.
• Prompt is now colored green when the process is alive and red when it is dead.
• WX memory is now underlined in memory maps (previously RWX was highlighted).
• Adds commands to display Android Binder driver info (experimental).
• Adds `pcp` command to print Linux kernel per-cpu page cache.
Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg



pwndbg 2024.02.14
Sun, 18 Feb 2024 20:37:00 GMT
Pwndbg adds `track-got`, `stepuntilasm`, `break-if-taken`, `plist`, `mmap`/`mprotect` commands and thread context display.
• Adds `track-got {enable,disable,info,query}` command for GOT tracking
• Adds $base(objfile_name) function to compute base address of memory pages
• Context now displays threads information for multi-threaded programs (controlled by `context-max-threads`)
• Adds `stepuntilasm ` command to step until a matching instruction string is found
• Adds `break-if-taken ` and `break-if-not-taken ` commands to set branch condition breakpoints
• Adds `plist ...` command to print linked lists
• Adds `mmap ...` and `mprotect ...` commands to invoke syscalls in the debugged program
• Adds `thread` command to display threads information
• Adds `hi ` command to check if an address belongs to a glibc heap chunk
• Adds `tips` command to display usage tips
• Adds `sigreturn ` command to print sigreturn x86-64 frame
• Adds `telescope --frame` option to display stack frame information
• Adds `-A ` and `-B ` flags to `vmmap` to show adjacent memory entries
• Adds `-i | --inverse` flag to `stack` command to show reverse order
Breaking changes:
• Drops support for Ubuntu 18.04 and Debian 10, requiring Python >= 3.8
• Drops support for GDB versions less than 9.2
Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg


pwndbg 2023.07.17
Mon, 17 Jul 2023 13:02:37 GMT
New `killthreads`, `slab contains`, and `spray` commands; `setup.sh` uses venv by default
• Added `killthreads []` command to kill threads with given IDs
• Added `slab contains  []` command to inspect Linux kernel heap (when debugging kernel)
• Added `spray  ...` command to spray memory with given values
• The `setup.sh` script now installs Python dependencies in a virtual environment created at `pwndbg/.venv/`
• `gdbinit.py` automatically uses the virtual environment created by `setup.sh`
Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg


pwndbg 2023.03.19
Sun, 19 Mar 2023 10:56:52 GMT
pwndbg 2023.03.19 adds kernel debugging commands (kbase, kchecksec, slab), an AI query command (ai), and Rizin support.
• Adds `kbase`, `kchecksec`, and `slab` kernel debugging commands to get the kernel base address, check kernel security settings, and list kernel slabs
• Adds `valist` command to dump arguments of a `va_list` structure at a given address
• Adds `ai` command to ask an AI about the current debugging session (requires OpenAI API key)
• Adds support for Rizin as a backend
• Adds `riscv:rv64` architecture support
• Adds `--all-chunks` flag to `vis_heap_chunks` to display all chunks
• Enables instruction opcodes in the disasm context via GDB's `set nearpc-num-opcode-bytes 9`
Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg


pwndbg 2022.12.19
Mon, 19 Dec 2022 22:34:35 GMT
pwndbg 2022.12.19 adds `kconfig`, `cymbol`, `patch`, and `ipi` commands with configurable heap heuristics
• Adds `kconfig` command to obtain the debugged Linux kernel config
• Adds `cymbol` command to add, show, load, edit, or delete custom C structures
• Adds `patch` command to patch memory
• Adds `ipi` command to start an IPython interactive prompt
• Adds support for setting heap resolution mode via `set resolve-heap-via-heuristic` when libc debug symbols are missing
• Adds `help set kernel-vmmap` modes to control how vmmap info is fetched for QEMU kernels
Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg


pwndbg 2022.08.30
Tue, 30 Aug 2022 03:02:50 GMT
Pwndbg 2022.08.30 adds `attachp`, `setflag`, `telescope --reverse` and heap debugging without symbols.
• Adds `attachp` command to attach to a process by PID, name, or device file
• Adds `setflag` command to set CPU flags register values
• Adds `--reverse` flag to `telescope` command to view memory before a provided address
• Adds `heap_config` command to configure heap command settings including symbol addresses
• Introduces `$heap_base` variable available after running the heap command
• Adds `--trunc-out` flag to `search` and `nearpc` commands to control output truncation
Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg


pwndbg 2022.01.05
Wed, 05 Jan 2022 11:34:21 GMT
Adds `attachp` and `p2p` commands with safe-linking support and VS Code devcontainer.
• Adds the `attachp` command to attach pwndbg to a running process by name or PID
• Adds the `p2p` command for pointer chain search (P2P) via source code
• Adds `safe-linking` support for heap analysis when debug symbols are loaded in glibc detection
• Adds `devcontainer.json` configuration to allow direct development inside a Docker container from VS Code
Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pwndbg