Categories: Kali Linux

Peda – Python Exploit Development Assistance for GDB

PEDA is a python exploit development assistance for GDB.

Features

  • Enhance the display of gdb: colorize and display disassembly codes, registers, memory information during debugging.
  • Add commands to support debugging and exploit development (for a full list of commands use peda help):
    • aslr — Show/set ASLR setting of GDB
    • checksec — Check for various security options of binary
    • dumpargs — Display arguments passed to a function when stopped at a call instruction
    • dumprop — Dump all ROP gadgets in specific memory range
    • elfheader — Get headers information from debugged ELF file
    • elfsymbol — Get non-debugging symbol information from an ELF file
    • lookup — Search for all addresses/references to addresses which belong to a memory range
    • patch — Patch memory start at an address with string/hexstring/int
    • pattern — Generate, search, or write a cyclic pattern to memory
    • procinfo — Display various info from /proc/pid/
    • pshow — Show various PEDA options and other settings
    • pset — Set various PEDA options and other settings
    • readelf — Get headers information from an ELF file
    • ropgadget — Get common ROP gadgets of binary or library
    • ropsearch — Search for ROP gadgets in memory
    • searchmem|find — Search for a pattern in memory; support regex search
    • shellcode — Generate or download common shellcodes.
    • skeleton — Generate python exploit code template
    • vmmap — Get virtual mapping address ranges of section(s) in debugged process
    • xormem — XOR a memory region with a key

PEDA Installation

git clone https://github.com/longld/peda.git ~/peda
echo "source ~/peda/peda.py" >> ~/.gdbinit
echo "DONE! debug your program with gdb and enjoy"

Also Readhtrace.sh – Simple Shell Script To Debugging Http/Https Traffic Tracing

Screenshot

R K

Recent Posts

Promptmap

Prompt injection is a type of security vulnerability that can be exploited to control the…

1 day ago

Firefly – Black Box Fuzzer For Web Applications

Firefly is an advanced black-box fuzzer and not just a standard asset discovery tool. Firefly…

1 day ago

Winit : Cross-Platform Window Creation And Management In Rust

Winit is a robust, cross-platform library designed for creating and managing windows in Rust applications.…

1 day ago

Browser Autofill Phishing – The Hidden Dangers And Security Risks

In today’s digital age, convenience often comes at the cost of security. One such overlooked…

1 day ago

Terminal GPT (tgpt) – Your Direct CLI Gateway To ChatGPT 3.5

Terminal GPT (tgpt) offers a seamless way to bring the power of ChatGPT 3.5 directly…

1 day ago

garak, LLM Vulnerability Scanner : The Comprehensive Tool For Assessing Language Model Security

garak checks if an LLM can be made to fail in a way we don't…

4 days ago