exgdb - Zip 扩展

项目说明

ExGDB
=====

ExGDB - Extension for GDB

New Classes:

* Exgdb -- This has many methods to coding debug automation script
* ExgdbCmd -- This has many methods that can execute as gdb command

Methods of Exgdb:

* read_int(addr) -- Customized read_int of peda
* read_int_bytes(addr, intsize=None) -- Read bytes as intsize list
* read_byte(addr, intsize=None) -- Read one byte
* read_bytes(addr, size) -- Read bytes as any size list
* ... and all methods of peda and Pwngdb.

Commands / Methods of ExgdbCmd (from other plugins):

* ctn, c -- Execute continue command of gdb
* brk, b <symbol> -- Execute break command of gdb
* next, n, [count] -- Execute next command of gdb
* step, s [count] -- Execute step command of gdb
* nexti, ni [count] -- Execute nexti command of gdb
* stepi, si [count] -- Execute stepi command of gdb
* infox <addr> -- Customized xinfo command of peda
* patch <addr> <value> [size] -- Customized patch command of peda
* parseheap -- Customized parseheap command of Pwngdb
* ... and all commands of peda and Pwngdb.

New Commands / New Methods of ExgdbCmd:

* nextnow, nn <count> -- Show instructions after now program-counter
* prevnow, pn <count> -- Show instructions before now program-counter
* grep <command> <regex> -- Grep command output
* allstack -- Show all stack data
* nuntil <regex> -- Execute nexti command until gi
* suntil <regex> -- Execute stepi command until gi
* nextcalluntil <regex> -- Execute nextcall command until gi
* stepcalluntil <regex> -- Execute nextcall and step command until gi and gi
* infonow, inow -- Show detail information of the instruction now specified program-counter
* contextmode <mode> -- Set context mode (e.g. contextmode reg,code, contextmode infonow, contextmode memtrace,infonow)
* lpout -- continue until leave from loop
* hexpatch -- hex patch
* strpatch -- string patch
* wordpatch -- word patch
* radvance -- regex advance
* rbreak -- regex breakpoint
* rtracepoint -- regex tracepoint
* tracepoint
* edit
* memtrace
* showchunk
* showchunkheader
* showchunkheaders
* tracecontinue
* tracemode

Installation

You can use any path instead of ~/exgdb .

Install any plugins you want

Usage of ExGDB

You have some example binaries.

Usage when just debugging:

Usage as a library:

Usage as a library when just debugging:

Usage of Plugin Manager (exgdbctl)

show plugins information

You can install peda, Pwngdb and gdb-dashboard with only each plugin name.

You can install any plugin from repository url

delete a plugin

disable a plugin

enable a plugin

Add New Plugin

1. Prepare new plugin:

You need "{any name}.py" (or gdb script like ".gdbinit") and "export_to_exgdb.py".

{any name}.py

- main (top) script of your plugin
- You can prepare gdb script like ".gdbinit" instead of python script.

export_to_exgdb.py

- import (setattr) your functions to Exgdb or ExgdbCmd
- You don't have to understand this script. You only have to try imitating this sample.

2. Install your plugin:

3. Edit $EXGDBPATH/gdbinit.py

You can issue Pull Request like this patch.

contact

Please feel free to ask -> twitter

项目信息

开发语言：Python

Star 数：107

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Extension for GDB展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。