Alan Li

Add support to use heap commands without debug symbols

12

I'm trying to make some features that #937 mentioned. I use two classes to represent different heap resolving strategies(by debug symbols or heuristic), and use some classes in `pwndbg/heap/structs.py` to...

### Description Property: `malloc_alignment` of `Heap` class seems wrong for i386. `Heap` is always using `pwndbg.arch.ptrsize * 2` for `malloc_alignment`, but i386 will override it to a constant 16 when...

Add a helper command for one_gadget

3

This draft PR adds a new command for finding valid [one_gadget](https://github.com/david942j/one_gadget) for the current context and makes it easier to debug when the constraints are unsat. ---- Although this PR...

`movsxd` instruction might be recognized as an invalid instruction

2

Recently, when I was playing a CTF challenge about shellcoding, I found out that some of the instructions are valid, but `nearpc` refused to disassemble it. The instruction I used...

`mprotect` command doesn't lock scheduler before executing shellcode

4

This is similar to #1535 and can be reproduced similarly: ```console $ cat test.c #include #include void* print_hello(void* args) { printf("hello\n"); pthread_exit(NULL); } int main() { pthread_t thread; pthread_create(&thread, NULL,...

Make the `disassemble` and the `nearpc` commands have the same output style for the symbol names

2

The result of `nearpc` doesn’t respect `set print asm-demangle on/off`, so the symbol name it showed will not same as `disassemble` for some symbols. To change the result of `nearpc`...

After the first successful alert, `rumps.alert` will freeze the process and can't succeed again even I restart the process. - python 3.8.8 - rumps 0.3.0 - macOS 11.4 Thanks! Edited:...

We should find a way to test the features of GEP. ---- #39 was merged, but there are still many TODOs: - [ ] Add tests for tab auto-completion. -...

Vanilla GDB's autocompletion can't complete breakpoint numbers when the buffer contains commands like `disable` or `enable`. It would be nice if we could complete the breakpoint numbers and preview the...

TGA file footer can be used to create adversarial examples

1

I noticed that somehow Magika's model is maybe too sensitive to the TGA file footer, and it can be used to create adversarial examples easily. > I also made a...