screenshots.md

Screenshots

This page illustrates a few of the possibilities available to you when using GEF.

Multi-architecture support

GEF was designed to support any architecture supported by GDB via an easily extensible architecture API.

Currently GEF supports the following architectures:

• Intel x86 (32b & 64b)
• ARM (v6/v7)
• AARCH64
• MIPS/MIPS64
• PowerPC
• SPARC/SPARCv9

Features

Embedded hexdump view

To this day, GDB doesn't come with a hexdump-like view. Well GEF fixes that for you via the hexdump command:

Dereferencing data or registers

No more endless manual pointer dereferencing x/x style. Just use dereference for that. Or for a comprehensive view of the registers, registers might become your best friend:

Heap analysis

Detailed view of Glibc Chunks

Automatic detection of UaF during runtime

Display ELF information

ELF structure

Security settings

Automatic vulnerable string detection

Code emulation with Unicorn-Engine (x86-64)

Comprehensive address space layout display

Defining arbitrary custom structures

Highlight custom strings