GEFis aimed to be used mostly by exploiters and reverse-engineers. It provides additional features to GDB using the Python API to assist during the process of dynamic analysis or exploit development.
GEFfully relies on GDB API and other Linux specific source of information (such as
/proc/pid). As a consequence, some of the features might not work on custom or harden systems such as GrSec. It has fully support for Python2 and Python3 indifferently (as more and more distro start pushing
gdbcompiled with Python3 support).
Simply make sure you're having a GDB 7.x+ .
Then just start playing (for local files):
$ wget -q -O- https://github.com/hugsy/gef/raw/master/gef.sh | sh
Or (for remote debugging)
$ gdb -q /path/to/my/bin
gef> gef help
remote:~ $ gdbserver 0.0.0.0:1234 /path/to/file
local:~ $ gdb -q
gef> gef-remote your.ip.address:1234
There are none:
GEFworks out of the box! However, to enjoy all the coolest features, it is recommended to install:
ROPgadgetas Python3 support has not implemented yet.
radare2-pythonwill work just fine.
Another note :
Capstoneis packaged for Python 2 and 3 with
pip. So a quick install is
And same goes for
$ pip2 install capstone # for Python2.x
$ pip3 install capstone # for Python3.x
$ pip install ropgadget
assemblecommand relies on the binary