Screenshots

This page illustrates a few of the possibilities available to you when using GEF.

Multi-architecture support

GEF was designed to support any architecture supported by GDB via an easily extensible architecture API.

Currently GEF supports the following architectures:

  • Intel x86 (32b & 64b)
  • ARM (v6/v7)
  • AARCH64
  • MIPS/MIPS64
  • PowerPC
  • SPARC/SPARCv9

Features

Embedded hexdump view

To this day, GDB doesn't come with a hexdump-like view. Well GEF fixes that for you via the hexdump command:

hexdump

Dereferencing data or registers

No more endless manual pointer dereferencing x/x style. Just use dereference for that. Or for a comprehensive view of the registers, registers might become your best friend:

mipsel-deref-regs

Heap analysis

Detailed view of Glibc Chunks

x86-heap-chunks

Automatic detection of UaF during runtime

x86-heap-helper-uaf

Display ELF information

ELF structure

arm-elf-info

Security settings

mips-elf-checksec

Automatic vulnerable string detection

aarch64-fmtstr

Code emulation with Unicorn-Engine (x86-64)

x86-unicorn

Comprehensive address space layout display

mips-vmmap

Defining arbitrary custom structures

sparc-arb-struct