Stat

Value

Total tools

207 (157 edb_ + 50 pwntools_)

Test count

372 (pytest, 4 Python versions)

EDB feature coverage

22/22 plugins · 29/29 actions · 13/13 dialogs · 6/6 views

Code size

~9000 LOC · 100 Pydantic models · 182 backend methods

Tool

Description

pwntools_analyze_elf

Full ELF binary analysis (headers, sections, symbols, security, strings)

pwntools_asm

Assemble assembly instructions to bytes (Keystone)

pwntools_build_rop_chain

Build a ROP chain with ordered gadgets

pwntools_checksec

Check ELF binary security properties (RELRO, Canary, NX, PIE)

pwntools_constgrep

Search pwntools/ELF constants by name or value

pwntools_cyclic

Generate De Bruijn cyclic pattern for offset discovery

pwntools_cyclic_find

Find offset of a value in cyclic pattern

pwntools_disasm

Disassemble raw bytes with pwntools (architecture-aware)

pwntools_elf_deps

Show shared library dependencies and interpreter

pwntools_elf_patch

Patch bytes in ELF binary at file offset (creates .bak)

pwntools_elf_read

Read bytes from ELF binary at section or address

pwntools_elf_sections

List all sections with type, flags, address, size

pwntools_elf_search

Search ELF binary for byte pattern grouped by section

pwntools_elf_strings

Extract printable strings from ELF (by section or all)

pwntools_elf_symbols

Search symbols by regex with address table

pwntools_enc

Encode shellcode (alphanumeric, null_free, xor)

pwntools_entropy

Shannon entropy analysis of file or region

pwntools_erope

Search ROP gadgets grouped by type (syscall, stack_pivot, call, jump)

pwntools_find_rop

Search for ROP gadgets by regex

pwntools_flat

Pack values/addresses into flat payload bytes

pwntools_fmtstr_payload

Generate format string write payload

pwntools_hexdump

Hex dump with ASCII side (colored, offset-labeled)

pwntools_make_elf

Compile assembly code into ELF binary

pwntools_pack

Pack integer to bytes (little/big endian, 8/16/32/64-bit)

pwntools_shellcraft

Generate shellcode for a given arch/OS (execve, bind/rev shell, etc.)

pwntools_sigreturn

Generate SROP (Sigreturn-Oriented Programming) frame

pwntools_unpack

Unpack bytes to integer

Plugin

MCP Coverage

DebuggerCore

Execution, stepping, breakpoints, registers, memory, state

BreakpointManager

edb_set_breakpoint, edb_list_breakpoints, edb_export/import

HardwareBreakpoints

edb_set_hardware_breakpoint, edb_set_watchpoint

InstructionInspector

edb_instruction_detail

Assembler

edb_assemble (Keystone optional)

BinaryInfo

edb_get_binary_info

BinarySearcher

edb_search_memory

Backtrace

edb_get_backtrace

FasLoader

edb_load_symbol_file

DumpState

edb_dump_state

FunctionFinder

edb_list_functions

OpcodeSearcher

edb_search_instructions

References

edb_find_references, edb_string_references

ROPTool

edb_find_rop_gadgets

HeapAnalyzer

edb_analyze_heap

Analyzer

edb_analyze_region, edb_analyze_basic_blocks

SymbolViewer

edb_lookup_symbol

ProcessProperties

edb_get_process_properties

ODbgRegisterView

edb_get_registers, edb_get_fpu_state, edb_get_simd_state

Bookmarks

edb_add_bookmark, edb_list_bookmarks, edb_remove_bookmark

CheckVersion

Automatically handled

DebuggerErrorConsole

edb_set_debug_output

Endpoint

Method

Description

/

GET

Serve the main HTML page (static)

/api/quick

GET

Quick action buttons metadata (name, tool, icon)

/api/tools

GET

All tools with category and input fields

/api/tools/{name}

GET

Single tool definition by name

/api/call/{name}

POST

Execute a tool with JSON {"args": {...}}

/api/state

GET

Debugger state snapshot (registers, stack, disasm, backtrace, status)

/api/state/v2

GET

Enhanced state with register diff highlighting

/api/register/set

POST

Set a register value {"name": "eax", "value": "0x..."}

/api/memory/hex

GET

Read memory as parsed hex dump ?address=0x400000&size=256

/api/disasm

GET

Disassemble at address ?address=entry&count=32

/api/disasm/functions

GET

List all functions in the binary

/api/history

GET

Tool call history (in-memory, ordered)

/api/history/clear

POST

Clear tool call history

/api/sessions

GET

List saved debugger sessions

/api/sessions/save

POST

Save session {"name": "..."}

/api/sessions/load/{name}

POST

Load a saved session

/api/sessions/{name}

DELETE

Delete a saved session

/api/tabs/{name}

GET

HTML fragment for a tab (history, sessions, state)

Challenge

Technique

Tools Demonstrated

ret2win

Buffer overflow overwrites return address to call a hidden win function

edb_load_program, edb_set_breakpoint, edb_get_stack, edb_evaluate_expression, edb_run

format-string

Format string vulnerability used to overwrite GOT entries

edb_evaluate_expression, edb_write_memory, edb_get_string, edb_find_strings

crackme

Static password analysis by examining the binary

edb_disassemble, edb_lookup_symbol, edb_get_string

rop-chain

Return-Oriented Programming chain to bypass NX (ret2libc)

edb_find_rop_gadgets, edb_get_registers, pwntools_build_rop_chain, edb_set_memory_permissions

shellcode-injection

Shellcode injection and execution on an executable stack

pwntools_shellcraft, edb_write_memory_bytes, edb_set_breakpoint, edb_run

off-by-one

Single-byte heap overflow corrupts adjacent variable

edb_set_breakpoint, edb_read_memory, edb_get_stack, edb_evaluate_expression

heap-uaf

Use-after-free corrupts a function pointer to gain control

edb_analyze_heap, edb_set_breakpoint, edb_read_memory, edb_write_memory

integer-overflow

Integer overflow bypasses a bounds check leading to OOB write

edb_evaluate_expression, edb_set_breakpoint, edb_read_memory, edb_set_register

nx-bypass

ROP chain calls mprotect then executes shellcode

pwntools_find_rop, edb_find_rop_gadgets, pwntools_shellcraft, edb_set_breakpoint

canary-leak

Format string leaks stack canary, then BOF overwrites return address

edb_get_stack, edb_find_strings, edb_evaluate_expression, edb_set_breakpoint

Tool

Description

edb_load_program

Load an executable binary for debugging. Resolves symbols and prepares for execu

edb_run

Start execution of the loaded program from the beginning.

edb_continue

Continue execution after a breakpoint or pause.

edb_continue_to

Continue execution until a specific address is reached.

edb_pause

Pause (interrupt) the running program.

edb_restart

Kill and restart the debugged program. Reloads the binary, preserves breakpoints

edb_attach_process

Attach the debugger to an already-running process by PID.

edb_detach_process

Detach from the debugged process. The process continues running independently.

edb_kill_process

Kill the debugged process immediately.

edb_remote_connect

Connect to a remote gdbserver for remote debugging.

edb_send_signal

Send a signal to the debugged process.

edb_call_function

Call a function in the context of the debugged process.

Tool

Description

edb_step_instruction

Step a single instruction (assembly-level), not a source line.

edb_step_into

Execute one machine instruction, stepping into function calls.

edb_step_over

Execute one machine instruction, treating calls as atomic.

edb_step_out

Execute until the current function returns to its caller.

edb_step_over_instruction

Step over a single instruction (assembly-level), skipping calls.

edb_reverse_step

Step backward in the program execution (reverse debugging).

edb_reverse_continue

Continue execution backward to the previous breakpoint or event.

edb_jump_to_address

Jump to a specific address, setting the instruction pointer.

Tool

Description

edb_set_breakpoint

Set a breakpoint at a function, address, or source location.

edb_set_hardware_breakpoint

Set a hardware-assisted breakpoint using CPU debug registers.

edb_set_watchpoint

Set a watchpoint to monitor memory access. Three modes:

edb_set_catchpoint

Set a catchpoint for exceptions, syscalls, signals, or process events.

edb_set_trace_point

Set a trace point (logging breakpoint) that prints a message and continues

edb_set_breakpoint_condition

Set or remove a condition on an existing breakpoint.

edb_set_breakpoint_ignore_count

Set the number of times a breakpoint should be ignored before stopping.

edb_breakpoint_commands

Set commands to execute when a breakpoint is hit.

edb_enable_breakpoint

Re-activate a disabled breakpoint.

edb_disable_breakpoint

Disable a breakpoint without removing it. It can be re-enabled later.

edb_remove_breakpoint

Permanently remove a breakpoint or watchpoint by number.

edb_list_breakpoints

List all breakpoints, watchpoints, and their status (number, type, enable/disabl

edb_breakpoint_export

Export all breakpoints to a JSON file on disk.

edb_breakpoint_import

Import breakpoints from a JSON file previously exported with

edb_trace_start

Start an execution trace at an address/function. Records every instruction execu

edb_trace_stop

Stop the current execution trace session.

edb_trace_show

Show execution trace status, frames, and collected data.

edb_list_breakpoint_types

List supported breakpoint types (software, hardware, watchpoint, catchpoint).

Tool

Description

edb_get_registers

Get all CPU register values as JSON. Includes general-purpose registers,

edb_get_register

Get the value of a specific CPU register.

edb_set_register

Modify a CPU register value. Useful for patching execution flow or testing condi

edb_dump_registers

Get a human-readable register dump in markdown table format.

edb_get_changed_registers

Get all register values (shows current state, EDB-style).

edb_get_fpu_state

Get the FPU (Floating Point Unit) register state.

edb_get_simd_state

Get the SIMD (SSE/AVX) register state.

edb_get_arch_info

Get architecture information about the debugged process and binary.

edb_get_eflags

Show the EFLAGS/RFLAGS CPU status register with individual flag states.

edb_enum_registers

List available CPU registers by category (GPR, SIMD, FPU, flag).

Tool

Description

edb_read_memory

Read and display memory contents at an address as a hex dump.

edb_read_memory_as

Read memory at an address interpreted as a specific data type.

edb_write_memory

Write a value to a memory address. Use for patching code or data.

edb_write_memory_bytes

Write raw hex bytes to memory starting at an address.

edb_fill_memory

Fill a memory region with a repeating byte value.

edb_search_memory

Search memory for a byte pattern. Finds all occurrences in the specified region.

edb_compare_memory

Compare two memory regions byte-by-byte and show differences.

edb_compare_sections

Compare loaded memory sections with the original binary on disk.

edb_get_memory_map

Get the process memory map (like /proc/pid/maps).

edb_get_memory_region_info

Get information about defined memory regions and their permissions.

edb_set_memory_permissions

Set memory permissions for a region (read/write/execute).

edb_dump_memory_to_file

Dump a memory region to a binary file on disk.

Tool

Description

edb_disassemble

Disassemble machine code at an address or function.

edb_disassemble_range

Disassemble a range of memory from start to end address.

edb_get_current_instruction

Get the instruction at the current program counter (RIP/EIP).

edb_instruction_detail

Get detailed information about an instruction at a given address.

edb_search_instructions

Search memory for byte patterns (case-insensitive).

edb_analyze_basic_blocks

Analyze a code region and identify basic blocks.

edb_analyze_calls_at

Disassemble at an address and identify call/jump targets.

Tool

Description

edb_get_stack

Dump the current stack (stack pointer to higher addresses).

edb_get_backtrace

Get the full call stack backtrace. Frame #0 is the current function.

edb_get_frame_info

Get detailed information about a stack frame: address, function,

edb_get_locals

Get all local variables in the current function scope.

edb_get_arguments

Get the arguments passed to the current function.

edb_list_stack_arguments

List arguments for stack frames.

edb_stack_push

Push a value onto the program stack (decrements RSP, writes value).

edb_stack_pop

Pop a value from the program stack (reads value, increments RSP).

edb_stack_modify

Modify the value at the top of the stack without changing RSP.

edb_get_stack_frame

Get detailed information about a specific stack frame level.

edb_scan_stack_for_retaddr

Scan the stack for potential return addresses (values in valid text ranges). Use

Tool

Description

edb_lookup_symbol

Look up a symbol's address and type. Supports functions and variables.

edb_list_functions

List all functions in the binary, optionally filtered by name.

edb_get_function_info

Get detailed info about a function: address, prototype, source location.

edb_get_function_bounds

Get the start address, end address, and size of a function.

edb_list_modules

List all shared libraries / modules loaded by the process.

edb_get_section_info

Get detailed section information for loaded modules.

edb_get_entry_point

Get the program entry point address. The entry point is the first code

edb_find_references

Find all code references to a given address or symbol.

edb_find_strings

Find printable ASCII strings in the current code region.

edb_get_function_xrefs

Show cross-references to a given address or function.

edb_goto_function_start

Find the function start address containing a given address.

Tool

Description

edb_list_threads

List all threads in the debugged process with IDs, names, and states.

edb_get_current_thread

Get info about the currently active thread.

edb_set_current_thread

Switch the debugger context to a different thread.

edb_get_process_properties

Get comprehensive properties of the debugged process.

edb_inferior_info

Get information about all inferiors (processes) being debugged.

edb_follow_fork

Set whether the debugger follows the parent or child process after a fork.

Tool

Description

edb_evaluate_expression

Evaluate a C expression in the debug context.

edb_ptype

Print the type of a variable, function, or expression.

edb_whatis

Print the type of an expression (short form).

edb_get_variable

Read the value of a local or global variable in the current scope.

edb_set_variable

Modify a variable's value in the current scope.

edb_get_string

Read a null-terminated string from a memory address.

edb_string_references

Find all code and data references to a string or address in the binary.

edb_watch_expression

Add an expression to the auto-display list. Evaluated and shown on every stop.

Tool

Description

edb_analyze_region

Analyze a code region for call instructions, branch instructions,

edb_analyze_heap

Analyze the heap memory region of the debugged process.

edb_generate_cfg

Generate a Control Flow Graph in Graphviz DOT format.

edb_generate_symbols

Generate a symbol map for a binary file using EDB's symbol generator.

edb_list_source

Display source code with line numbers. Current line is marked with '->'.

edb_list_source_files

List all source files used by the debugged program.

edb_binary_string_convert

Convert between hex, ASCII, and UTF-16 representations.

edb_process_strings

Scan process memory for readable ASCII strings.

Tool

Description

edb_nop_range

Replace a range of instructions with NOP (0x90) bytes.

edb_assemble

Assemble an assembly instruction and write it to memory.

edb_add_bookmark

Save a named bookmark pointing to an address for quick navigation.

edb_list_bookmarks

List all saved bookmarks with names and addresses.

edb_remove_bookmark

Remove a bookmark by name.

edb_add_comment

Add a text annotation to an address. Comments are stored in-memory

edb_list_comments

List all address annotations added via edb_add_comment.

edb_remove_comment

Remove an annotation previously added with edb_add_comment.

edb_apply_patches_to_file

Write runtime memory modifications back to the binary file on disk.

Tool

Description

edb_session_save

Save the complete debugging session to a JSON file.

edb_session_load

Load a debugging session from a JSON file.

edb_set_environment_variable

Set an environment variable for the debugged process.

edb_get_environment

Show all environment variables configured for the debugged process.

edb_unset_environment_variable

Remove an environment variable from the debugged process.

edb_set_working_directory

Set the working directory for the debugger and debugged process.

edb_set_tty

Set the terminal device for the debugged program's I/O.

edb_set_debug_output

Enable or disable GDB internal debug output.

edb_set_session_logging

Log all GDB input/output to a file for debugging or record-keeping.

edb_signal_handling

Configure how GDB handles signals (stop, print, pass to program).

edb_list_signals

List all signals and how GDB handles them.

edb_get_stop_reason

Determine why the process stopped (breakpoint, signal, step, etc.).

Tool

Description

edb_configure_debugger

Configure GDB debugger settings. Equivalent to EDB's Configure Debugger

edb_show_configuration

Display current debugger configuration settings.

edb_disable_aslr

Disable or enable ASLR for debugee.

edb_disable_lazy_binding

Disable or enable lazy binding for debugee.

edb_get_status

Get the current debugger and process status.

edb_get_binary_info

Get detailed information about the loaded binary file.

edb_list_features

List GDB debugger features and capabilities.

edb_list_plugins

List all available debugger plugins and capabilities.

edb_load_symbol_file

Load a symbol file for the debugged program.

edb_view_at_address

Navigate to and inspect an address across all views.

edb_find_rop_gadgets

Search for ROP gadgets (instructions ending with 'ret') in memory.

edb_label_address

Set a label/annotation at an address in the disassembly view.

edb_dump_state

Dump complete debugger state: all registers, current instruction,

edb_generate_core_dump

Generate a core dump of the current process for post-mortem analysis.

edb_execute_gdb_command

Execute any raw GDB command directly. Full access to GDB's CLI. Powerful for adv

edb_compare_snapshot

Save a full debugger snapshot (registers + memory) for later comparison.

edb_pipeline

Load a binary, set breakpoint, run, and dump state in one call.

edb_export_state

Export the complete debugger state as structured JSON.

edb_binary_diff

Compare the current loaded binary with its original on disk.

edb_exploit_generate

Generate a buffer-overflow exploit payload: offset + ROP chain + shellcode.

edb_patch_history

Show all memory patches made this session, or clear the history.

edb_remote_arch

Detect the architecture of a connected remote GDB target.

edb_remote_info

Show detailed information about the remote debugging target.

Tool

Description

edb_va_to_file_offset

Convert a virtual address in the loaded process to the corresponding

edb_file_offset_to_va

Convert a file offset from the binary on disk to the corresponding

Tool

Description

pwntools_align

Calculate aligned value (up/down) for a given alignment boundary.

pwntools_analyze_elf

Analyze an ELF binary using pwntools — entry point, PIE/NX/RELRO/Canary, section

pwntools_asm

Assemble assembly instructions into hex bytes using pwntools + keystone.

pwntools_bits

Get or set a specific bit in an integer.

pwntools_build_rop_chain

Build a ROP chain to call a target function with arguments using pwntools ROP.

pwntools_checksec

Check security properties of an ELF binary: RELRO, Canary, NX, PIE, RPATH/RUNPAT

pwntools_constgrep

Search pwntools/ELF constants by name or value.

pwntools_context

View or modify pwntools global context (arch, os, endian, log_level).

pwntools_cyclic

Generate a cyclic pattern for buffer overflow offset discovery.

pwntools_cyclic_find

Find the offset of a value within a cyclic pattern.

pwntools_disasm

Disassemble raw hex bytes into assembly instructions using pwntools + capstone.

pwntools_elf_deps

List shared library dependencies of an ELF binary (DT_NEEDED entries).

pwntools_elf_diff

Compare two ELF binaries: sections, segments, symbols.

pwntools_elf_got

Parse Global Offset Table (GOT) entries from an ELF binary.

pwntools_elf_notes

Show ELF notes: build ID, ABI tag, property notes.

pwntools_elf_patch

Patch bytes in an ELF binary at a given file offset. Creates a backup.

pwntools_elf_plt

Parse Procedure Linkage Table (PLT) entries from an ELF binary.

pwntools_elf_read

Read bytes from an ELF binary at a section or address, with hex dump output.

pwntools_elf_relocs

Show ELF relocation entries (GOT/PLT fixups and absolute relocations).

pwntools_elf_search

Search for a byte pattern in an ELF binary.

pwntools_elf_sections

List all ELF sections with detailed info: type, flags, address, offset, size, al

pwntools_elf_segments

List ELF program headers (segments): type, flags, offset, vaddr, filesz, memsz.

pwntools_elf_strings

Extract printable strings from an ELF binary, optionally filtered by section.

pwntools_elf_symbols

Search symbols in an ELF binary by regex pattern and type.

pwntools_enc

Encode shellcode using pwntools encoders (alphanumeric, null_free, xor).

pwntools_enhex

Encode raw bytes to hexadecimal string. Supports \x escapes.

pwntools_entropy

Calculate byte entropy (Shannon) of a file or memory region. Useful for detectin

pwntools_erope

Search ROP gadgets grouped by type: syscall, stack_pivot, call, jump.

pwntools_find_rop

Search for ROP gadgets in an ELF binary using pwntools ROP engine.

pwntools_flat

Pack a list of values/addresses into flat bytes using pwntools flat().

pwntools_fmtstr_payload

Generate a format string exploit payload for arbitrary writes.

pwntools_hexdump

Display a formatted hex dump using pwntools hexdump styling.

pwntools_log_level

Set pwntools log verbosity. Levels: debug, info, warning, error.

pwntools_make_elf

Compile assembly code into an ELF binary using pwntools make_elf.

pwntools_pack

Pack an integer into bytes (e.g., p64, p32, p16).

pwntools_process

Start a local process for interaction (pwntools tube).

pwntools_remote

Connect to a remote TCP service (pwntools tube).

pwntools_rol

Rotate an integer value left by N bits.

pwntools_ror

Rotate an integer value right by N bits.

pwntools_shellcraft

Generate shellcode using pwntools shellcraft module.

pwntools_sigreturn

Generate a Sigreturn-Oriented Programming (SROP) frame using pwntools SigreturnF

pwntools_tube_close

Close an active tube connection.

pwntools_tube_list

List all active tube connections.

pwntools_tube_recv

Receive data from an active tube.

pwntools_tube_recvline

Receive a single line from an active tube.

pwntools_tube_recvuntil

Receive data from a tube until a pattern is found.

pwntools_tube_send

Send raw data to an active tube (process or remote).

pwntools_tube_sendline

Send a line (with newline) to an active tube.

pwntools_unhex

Decode hexadecimal string back to raw bytes.

pwntools_unpack

Unpack bytes into an integer (e.g., u64, u32, u16).