Pwndbg
Pwndbg (/paʊnˈdiˌbʌɡ/) is a GDB plug-in that enhances the debugging experience for low-level software developers, hardware hackers, reverse-engineers, and exploit developers by providing a suite of utilities and crutches to smooth out the rough edges of GDB, making it more user-friendly and efficient. It addresses the shortcomings of vanilla GDB, such as the lack of a real hexdump command, arcane syntax, and difficulty in reverse engineering and exploit development tasks. Pwndbg is a Python module loaded directly into GDB, aiming to replace and surpass its predecessors like gdbinit, PEDA, and GEF.
FEATURES
SIMILAR TOOLS
A binary analysis and management framework for organizing and analyzing malware and exploit samples, and creating plugins.
A debugger tool for reverse engineers, crackers, and security analysts, with a user-friendly debugging UI and custom agent support.
Assembler/disassembler for the dex format used by Dalvik, Android's Java VM implementation.
A toolkit for detecting and tracking Blind XSS, XXE, and SSRF vulnerabilities
FLARE Obfuscated String Solver (FLOSS) automatically extracts and deobfuscates strings from malware binaries using advanced static analysis techniques.
A PowerShell obfuscation detection framework designed to highlight the limitations of signature-based detection and provide a scalable means of detecting known and unknown obfuscation techniques.
Dalfox is a powerful open-source XSS scanner and utility focused on automation.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.