\documentclass[10pt,a4paper]{article} % Packages \usepackage{fancyhdr} % For header and footer \usepackage{multicol} % Allows multicols in tables \usepackage{tabularx} % Intelligent column widths \usepackage{tabulary} % Used in header and footer \usepackage{hhline} % Border under tables \usepackage{graphicx} % For images \usepackage{xcolor} % For hex colours %\usepackage[utf8x]{inputenc} % For unicode character support \usepackage[T1]{fontenc} % Without this we get weird character replacements \usepackage{colortbl} % For coloured tables \usepackage{setspace} % For line height \usepackage{lastpage} % Needed for total page number \usepackage{seqsplit} % Splits long words. %\usepackage{opensans} % Can't make this work so far. Shame. Would be lovely. \usepackage[normalem]{ulem} % For underlining links % Most of the following are not required for the majority % of cheat sheets but are needed for some symbol support. \usepackage{amsmath} % Symbols \usepackage{MnSymbol} % Symbols \usepackage{wasysym} % Symbols %\usepackage[english,german,french,spanish,italian]{babel} % Languages % Document Info \author{superkojiman (cactuarnation)} \pdfinfo{ /Title (gdb-and-pwndbg.pdf) /Creator (Cheatography) /Author (superkojiman (cactuarnation)) /Subject (GDB and PWNDBG Cheat Sheet) } % Lengths and widths \addtolength{\textwidth}{6cm} \addtolength{\textheight}{-1cm} \addtolength{\hoffset}{-3cm} \addtolength{\voffset}{-2cm} \setlength{\tabcolsep}{0.2cm} % Space between columns \setlength{\headsep}{-12pt} % Reduce space between header and content \setlength{\headheight}{85pt} % If less, LaTeX automatically increases it \renewcommand{\footrulewidth}{0pt} % Remove footer line \renewcommand{\headrulewidth}{0pt} % Remove header line \renewcommand{\seqinsert}{\ifmmode\allowbreak\else\-\fi} % Hyphens in seqsplit % This two commands together give roughly % the right line height in the tables \renewcommand{\arraystretch}{1.3} \onehalfspacing % Commands \newcommand{\SetRowColor}[1]{\noalign{\gdef\RowColorName{#1}}\rowcolor{\RowColorName}} % Shortcut for row colour \newcommand{\mymulticolumn}[3]{\multicolumn{#1}{>{\columncolor{\RowColorName}}#2}{#3}} % For coloured multi-cols \newcolumntype{x}[1]{>{\raggedright}p{#1}} % New column types for ragged-right paragraph columns \newcommand{\tn}{\tabularnewline} % Required as custom column type in use % Font and Colours \definecolor{HeadBackground}{HTML}{333333} \definecolor{FootBackground}{HTML}{666666} \definecolor{TextColor}{HTML}{333333} \definecolor{DarkBackground}{HTML}{7D9CB0} \definecolor{LightBackground}{HTML}{F6F8FA} \renewcommand{\familydefault}{\sfdefault} \color{TextColor} % Header and Footer \pagestyle{fancy} \fancyhead{} % Set header to blank \fancyfoot{} % Set footer to blank \fancyhead[L]{ \noindent \begin{multicols}{3} \begin{tabulary}{5.8cm}{C} \SetRowColor{DarkBackground} \vspace{-7pt} {\parbox{\dimexpr\textwidth-2\fboxsep\relax}{\noindent \hspace*{-6pt}\includegraphics[width=5.8cm]{/web/www.cheatography.com/public/images/cheatography_logo.pdf}} } \end{tabulary} \columnbreak \begin{tabulary}{11cm}{L} \vspace{-2pt}\large{\bf{\textcolor{DarkBackground}{\textrm{GDB and PWNDBG Cheat Sheet}}}} \\ \normalsize{by \textcolor{DarkBackground}{superkojiman (cactuarnation)} via \textcolor{DarkBackground}{\uline{cheatography.com/54418/cs/14584/}}} \end{tabulary} \end{multicols}} \fancyfoot[L]{ \footnotesize \noindent \begin{multicols}{3} \begin{tabulary}{5.8cm}{LL} \SetRowColor{FootBackground} \mymulticolumn{2}{p{5.377cm}}{\bf\textcolor{white}{Cheatographer}} \\ \vspace{-2pt}superkojiman (cactuarnation) \\ \uline{cheatography.com/cactuarnation} \\ \end{tabulary} \vfill \columnbreak \begin{tabulary}{5.8cm}{L} \SetRowColor{FootBackground} \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Cheat Sheet}} \\ \vspace{-2pt}Not Yet Published.\\ Updated 3rd February, 2018.\\ Page {\thepage} of \pageref{LastPage}. \end{tabulary} \vfill \columnbreak \begin{tabulary}{5.8cm}{L} \SetRowColor{FootBackground} \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Sponsor}} \\ \SetRowColor{white} \vspace{-5pt} %\includegraphics[width=48px,height=48px]{dave.jpeg} Measure your website readability!\\ www.readability-score.com \end{tabulary} \end{multicols}} \begin{document} \raggedright \raggedcolumns % Set font size to small. Switch to any value % from this page to resize cheat sheet text: % www.emerson.emory.edu/services/latex/latex_169.html \footnotesize % Small font. \begin{multicols*}{3} \begin{tabularx}{5.377cm}{x{2.58804 cm} x{2.38896 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Disassembling}} \tn % Row 0 \SetRowColor{LightBackground} Disassemble a function & disassemble vuln \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} Disassemble at address & disassemble 0x400566 \tn % Row Count 4 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{2.63781 cm} x{2.33919 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Running}} \tn % Row 0 \SetRowColor{LightBackground} Run until termination or breakpoint & r \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} Run and pause at main() & start \tn % Row Count 4 (+ 2) % Row 2 \SetRowColor{LightBackground} Run and provide arguments & r arg1 arg2 \tn % Row Count 6 (+ 2) % Row 3 \SetRowColor{white} If binary prompts for input once through stdin, pass input via file & r \textless{} in.txt \tn % Row Count 10 (+ 4) % Row 4 \SetRowColor{LightBackground} If binary prompts for input more than once through stdin & r \textless{} \textless{}(echo " input1"; echo "input2") \tn % Row Count 13 (+ 3) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{4.4793 cm} p{0.4977 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Stepping}} \tn % Row 0 \SetRowColor{LightBackground} Continue execution & c \tn % Row Count 1 (+ 1) % Row 1 \SetRowColor{white} Execute next instruction and step over a function & ni \tn % Row Count 3 (+ 2) % Row 2 \SetRowColor{LightBackground} Execute instruction and step into a function & si \tn % Row Count 5 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{3.78252 cm} x{1.19448 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Breakpoints}} \tn % Row 0 \SetRowColor{LightBackground} Set breakpoint at function & bp vuln \tn % Row Count 1 (+ 1) % Row 1 \SetRowColor{white} Set breakpoint at address & bp 0x4005b5 \tn % Row Count 3 (+ 2) % Row 2 \SetRowColor{LightBackground} Set breakpoint at function + offset & bp vuln+47 \tn % Row Count 5 (+ 2) % Row 3 \SetRowColor{white} List breakpoints & bl \tn % Row Count 6 (+ 1) % Row 4 \SetRowColor{LightBackground} Delete all breakpoints & d br \tn % Row Count 7 (+ 1) % Row 5 \SetRowColor{white} Disable breakpoint 2 & bd 2 \tn % Row Count 8 (+ 1) % Row 6 \SetRowColor{LightBackground} Enable breakpoint 2 & be 2 \tn % Row Count 9 (+ 1) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{3.53367 cm} x{1.44333 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Examining data}} \tn % Row 0 \SetRowColor{LightBackground} Exmaine two 8-byte values at RBP in hex & x/2gx \$rbp \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} Examine 10 instructions at main+25 & x/10i *main+25 \tn % Row Count 4 (+ 2) % Row 2 \SetRowColor{LightBackground} Examine 4-bytes of RAX in hex & x/wx \$rax \tn % Row Count 6 (+ 2) % Row 3 \SetRowColor{white} Print R10 in decimal & p/d \$r10 \tn % Row Count 7 (+ 1) % Row 4 \SetRowColor{LightBackground} Print sum of 0x500 and 0x39 in decimal & p/d 0x500 + 0x39 \tn % Row Count 9 (+ 2) % Row 5 \SetRowColor{white} Print the address of vuln() & p vuln \tn % Row Count 10 (+ 1) \hhline{>{\arrayrulecolor{DarkBackground}}--} \SetRowColor{LightBackground} \mymulticolumn{2}{x{5.377cm}}{Using the {\bf{x}} or {\bf{p}} command followed by the {\bf{size}} of the data to examine, and {\bf{format}} letters \newline \newline Sizes include {\bf{b}}yte, {\bf{w}}ord, {\bf{h}}alfword, and {\bf{g}}iant. \newline \newline Format letters include {\bf{o}}ctal, he{\bf{x}}, {\bf{d}}ecimal, {\bf{i}}nstruction, {\bf{c}}har, and {\bf{s}}tring.} \tn \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{3.13551 cm} x{1.84149 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Modifying data}} \tn % Row 0 \SetRowColor{LightBackground} Set the RAX register to 5 & set \$rax = 5 \tn % Row Count 1 (+ 1) % Row 1 \SetRowColor{white} Set the value pointed to by an address to 5 & set \seqsplit{*0x7fffffffe280} = 5 \tn % Row Count 3 (+ 2) % Row 2 \SetRowColor{LightBackground} Set the value pointed to by RAX-8 to 5 & set *(\$rax-8) = 5 \tn % Row Count 5 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{p{0.4977 cm} p{0.4977 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Print out state of the program}} \tn % Row 0 \SetRowColor{LightBackground} \mymulticolumn{2}{x{5.377cm}}{context} \tn % Row Count 1 (+ 1) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{3.88206 cm} x{1.09494 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Get address of saved return pointer}} \tn % Row 0 \SetRowColor{LightBackground} Return address of current stack frame & x/gx \$rbp+8 \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} Discovered return addresses on the stack & retaddr \tn % Row Count 4 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{2.83689 cm} x{2.14011 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Search for a string in memory}} \tn % Row 0 \SetRowColor{LightBackground} Look for "Hello" & search Hello \tn % Row Count 1 (+ 1) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{1.34379 cm} x{3.63321 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Get distance between addresses}} \tn % Row 0 \SetRowColor{LightBackground} Using p & p/d 0x7fffffffe278 - 0x7fffffffe220 \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} Using distance & distance 0x7fffffffe220 0x7fffffffe278 \tn % Row Count 4 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \SetRowColor{LightBackground} \mymulticolumn{2}{x{5.377cm}}{Note that using {\bf{distance}} reverses the operands.} \tn \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{p{0.4977 cm} p{0.4977 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Print hexdump}} \tn % Row 0 \SetRowColor{LightBackground} \mymulticolumn{2}{x{5.377cm}}{hexdump \$rbp} \tn % Row Count 1 (+ 1) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{3.78252 cm} x{1.19448 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Display stack}} \tn % Row 0 \SetRowColor{LightBackground} View the stack & stack \tn % Row Count 1 (+ 1) % Row 1 \SetRowColor{white} View 30 rows of the stack & stack 30 \tn % Row Count 2 (+ 1) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{p{0.4977 cm} p{0.4977 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Print virtual memory map pages}} \tn % Row 0 \SetRowColor{LightBackground} \mymulticolumn{2}{x{5.377cm}}{vmmap} \tn % Row Count 1 (+ 1) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{p{0.4977 cm} p{0.4977 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Check security settings}} \tn % Row 0 \SetRowColor{LightBackground} \mymulticolumn{2}{x{5.377cm}}{checksec} \tn % Row Count 1 (+ 1) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} % That's all folks \end{multicols*} \end{document}