pwndbg_search
Search process memory for byte sequences, strings, pointers, or integers. Filter results by executable or writable regions.
Instructions
Search process memory for byte sequences, strings, pointers, or integers.
pwndbg command: search Source: pwndbg/commands/search.py Category: Memory
Searches all mapped memory regions for the given value. Supports multiple search types and can be filtered to specific permission regions.
Args: session_id: The UUID of the session. value: The value to search for. type: Search type — "bytes", "byte", "short", "dword", "qword", "pointer", "string". hex_encoded: If True, interpret value as hex-encoded bytes. executable: If True, only search executable regions. writable: If True, only search writable regions.
See: https://pwndbg.re/2025.05.30/reference/pwndbg/commands/search/
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes | ||
| value | Yes | ||
| type | No | bytes | |
| hex_encoded | No | ||
| executable | No | ||
| writable | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |