pwndbg
A plug-in for GDB and LLDB that makes low-level debugging easier for reverse engineering and exploit work.
- Stars
- 11.1k
- Forks
- 1.3k
- Licence
- MIT
- Language
- Python
- Last update
- 4 days ago
- Type
- Dev tool
What it is
pwndbg is a Python plug-in that loads into GDB (and runs as an interface for LLDB) to add features the stock debuggers lack, such as a hexdump command and clearer views of registers and memory. It is aimed at low-level developers, reverse engineers, hardware hackers and exploit developers. The README says it is meant to replace older single-file helpers like PEDA and GEF with a more modular codebase.
- Inspect memory with a hexdump and a readable stack view while stepping through a binary in GDB
- Debug Linux kernel code with QEMU system emulation using GDB or LLDB, as listed in the README's table
- Follow the project's cheatsheet to learn common debugging commands during CTF challenges
Great for
- Reverse engineers working with Linux ELF binaries under GDB
- Exploit developers who use GDB and want better memory and register inspection
- CTF players doing binary exploitation challenges
- Embedded developers debugging ARM Cortex-M or RISC-V/32 targets with GDB, per the README's support table
Not ideal for
- Users who need a stable LLDB workflow: the README says the LLDB port is early-stage and may contain bugs
- Users on Windows-native debugging: the README focuses on GDB and LLDB, not WinDbg
- Anyone who wants a point-and-click graphical debugger rather than a command-line extension
How to get it
- 1
See the README
You'll need: Python 3.10+ · GDB 12.1+ (for pwndbg-gdb)
Installation instructions (see project docs)
git clone https://github.com/pwndbg/pwndbg - 2
Run it
- Install pwndbg by following the official setup instructions at pwndbg.re/stable/setup
- Start GDB on a binary, for example: gdb ./your_binary
- Run a basic command such as a hexdump or register view to confirm pwndbg loaded
- Consult the CHEATSHEET for common commands
- 3
Get the most out of it
- Read the Features page at pwndbg.re/stable/features to see the full command set
- Keep the CHEATSHEET (PDF linked in the README) handy while learning
- Check the QEMU compatibility table if you plan to debug kernels or user-mode emulation
- Ask questions on the project's Discord server for help with setup
Downloads
Strengths
- Adds practical features missing from vanilla GDB and LLDB, such as a hexdump command
- Supports both GDB and LLDB, with a consistent experience across them according to the README
- Actively maintained, with a recent release and a large test and CI setup shown by badges
Trade-offs
- The LLDB support is explicitly early-stage and may have bugs or limitations
- Requires specific recent versions (for example Python 3.10+ and GDB 12.1+ for the GDB build), so older systems may need upgrades
- Best suited to users already comfortable with command-line debuggers
How it compares
| Project | Stars | Type | Level | Updated | Best for |
|---|---|---|---|---|---|
| pwndbg (this) | 11.1k | Dev tool | intermediate | 4 days ago | Reverse engineers working with Linux ELF binaries under GDB |
| Detect-It-Easy | 11.8k | Dev tool | intermediate | 4 days ago | Malware analysts triaging unknown Windows executables |
| ida-pro-mcp | 13.3k | App | intermediate | 1 months ago | Reverse engineers who already use IDA Pro 8.3 or newer and want an AI assistant to help with analysis |
| awesome-cheatsheets | 12.6k | Curated list | beginner | 2 months ago | Chinese-speaking developers who want quick command or syntax reminders |
| hackingtool | 81.6k | Dev tool | intermediate | 6 days ago | Penetration testers who want a single launcher for many common tools |
| mitmproxy | 46.6k | Dev tool | intermediate | 4 days ago | Developers debugging how an app talks to a backend API |
Stats synced from GitHub. The assessment above was drafted with AI from the project's README on 2026-10-29 and may miss recent changes — check the README before relying on a command. MIT licence: free to use, modify and distribute, including commercially, as long as you keep the copyright notice.