How2debug

A small handbook on debugging for pwn.

Outline

• Basic Knowledge

  • Useful Tool
    • GDB plugins
      • pwndbg
      • Pwngdb
    • gdb-multiarch
    • pwntools
    • checksec
    • ROPgadget
    • one_gadget
    • LibcSearcher
    • objdump / readelf
    • strings
    • patchelf

• Stack Overflow

  • ret2text
  • ret2shellcode
  • ret2libc
  • ret2csu

• Fmtstr

  • classic x64 exploit
  • hijack_got
  • hijack_addr

• Heap Overflow

  • unlink
  • Use After Free
  • Fast Bin Attack
  • Large Bin Attack

• Kernel Pwn

  • Kernel ROP
  • Kernel Heap