\documentclass[10pt,a4paper]{article}

% Packages
\usepackage{fancyhdr}           % For header and footer
\usepackage{multicol}           % Allows multicols in tables
\usepackage{tabularx}           % Intelligent column widths
\usepackage{tabulary}           % Used in header and footer
\usepackage{hhline}             % Border under tables
\usepackage{graphicx}           % For images
\usepackage{xcolor}             % For hex colours
%\usepackage[utf8x]{inputenc}    % For unicode character support
\usepackage[T1]{fontenc}        % Without this we get weird character replacements
\usepackage{colortbl}           % For coloured tables
\usepackage{setspace}           % For line height
\usepackage{lastpage}           % Needed for total page number
\usepackage{seqsplit}           % Splits long words.
%\usepackage{opensans}          % Can't make this work so far. Shame. Would be lovely.
\usepackage[normalem]{ulem}     % For underlining links
% Most of the following are not required for the majority
% of cheat sheets but are needed for some symbol support.
\usepackage{amsmath}            % Symbols
\usepackage{MnSymbol}           % Symbols
\usepackage{wasysym}            % Symbols
%\usepackage[english,german,french,spanish,italian]{babel}              % Languages

% Document Info
\author{superkojiman}
\pdfinfo{
  /Title (gdb-pwndbg.pdf)
  /Creator (Cheatography)
  /Author (superkojiman)
  /Subject (gdb + pwndbg Cheat Sheet)
}

% Lengths and widths
\addtolength{\textwidth}{6cm}
\addtolength{\textheight}{-1cm}
\addtolength{\hoffset}{-3cm}
\addtolength{\voffset}{-2cm}
\setlength{\tabcolsep}{0.2cm} % Space between columns
\setlength{\headsep}{-12pt} % Reduce space between header and content
\setlength{\headheight}{85pt} % If less, LaTeX automatically increases it
\renewcommand{\footrulewidth}{0pt} % Remove footer line
\renewcommand{\headrulewidth}{0pt} % Remove header line
\renewcommand{\seqinsert}{\ifmmode\allowbreak\else\-\fi} % Hyphens in seqsplit
% This two commands together give roughly
% the right line height in the tables
\renewcommand{\arraystretch}{1.3}
\onehalfspacing

% Commands
\newcommand{\SetRowColor}[1]{\noalign{\gdef\RowColorName{#1}}\rowcolor{\RowColorName}} % Shortcut for row colour
\newcommand{\mymulticolumn}[3]{\multicolumn{#1}{>{\columncolor{\RowColorName}}#2}{#3}} % For coloured multi-cols
\newcolumntype{x}[1]{>{\raggedright}p{#1}} % New column types for ragged-right paragraph columns
\newcommand{\tn}{\tabularnewline} % Required as custom column type in use

% Font and Colours
\definecolor{HeadBackground}{HTML}{333333}
\definecolor{FootBackground}{HTML}{666666}
\definecolor{TextColor}{HTML}{333333}
\definecolor{DarkBackground}{HTML}{0FA319}
\definecolor{LightBackground}{HTML}{F0F9F0}
\renewcommand{\familydefault}{\sfdefault}
\color{TextColor}

% Header and Footer
\pagestyle{fancy}
\fancyhead{} % Set header to blank
\fancyfoot{} % Set footer to blank
\fancyhead[L]{
\noindent
\begin{multicols}{3}
\begin{tabulary}{5.8cm}{C}
    \SetRowColor{DarkBackground}
    \vspace{-7pt}
    {\parbox{\dimexpr\textwidth-2\fboxsep\relax}{\noindent
        \hspace*{-6pt}\includegraphics[width=5.8cm]{/web/www.cheatography.com/public/images/cheatography_logo.pdf}}
    }
\end{tabulary}
\columnbreak
\begin{tabulary}{11cm}{L}
    \vspace{-2pt}\large{\bf{\textcolor{DarkBackground}{\textrm{gdb + pwndbg Cheat Sheet}}}} \\
    \normalsize{by \textcolor{DarkBackground}{superkojiman} via \textcolor{DarkBackground}{\uline{cheatography.com/54436/cs/14586/}}}
\end{tabulary}
\end{multicols}}

\fancyfoot[L]{ \footnotesize
\noindent
\begin{multicols}{3}
\begin{tabulary}{5.8cm}{LL}
  \SetRowColor{FootBackground}
  \mymulticolumn{2}{p{5.377cm}}{\bf\textcolor{white}{Cheatographer}}  \\
  \vspace{-2pt}superkojiman \\
  \uline{cheatography.com/superkojiman} \\
  \end{tabulary}
\vfill
\columnbreak
\begin{tabulary}{5.8cm}{L}
  \SetRowColor{FootBackground}
  \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Cheat Sheet}}  \\
   \vspace{-2pt}Not Yet Published.\\
   Updated 10th February, 2018.\\
   Page {\thepage} of \pageref{LastPage}.
\end{tabulary}
\vfill
\columnbreak
\begin{tabulary}{5.8cm}{L}
  \SetRowColor{FootBackground}
  \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Sponsor}}  \\
  \SetRowColor{white}
  \vspace{-5pt}
  %\includegraphics[width=48px,height=48px]{dave.jpeg}
  Measure your website readability!\\
  www.readability-score.com
\end{tabulary}
\end{multicols}}




\begin{document}
\raggedright
\raggedcolumns

% Set font size to small. Switch to any value
% from this page to resize cheat sheet text:
% www.emerson.emory.edu/services/latex/latex_169.html
\footnotesize % Small font.

\begin{multicols*}{3}

\begin{tabularx}{5.377cm}{x{2.58804 cm} x{2.38896 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Disassembling}}  \tn
% Row 0
\SetRowColor{LightBackground}
Disassemble a function & disassemble vuln \tn 
% Row Count 2 (+ 2)
% Row 1
\SetRowColor{white}
Disassemble at address & disassemble 0x400566 \tn 
% Row Count 4 (+ 2)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{x{2.63781 cm} x{2.33919 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Running}}  \tn
% Row 0
\SetRowColor{LightBackground}
Run until termination or breakpoint & r \tn 
% Row Count 2 (+ 2)
% Row 1
\SetRowColor{white}
Run and pause at main() & start \tn 
% Row Count 4 (+ 2)
% Row 2
\SetRowColor{LightBackground}
Run and provide arguments & r arg1 arg2 \tn 
% Row Count 6 (+ 2)
% Row 3
\SetRowColor{white}
If binary prompts for input once through stdin, pass input via file & r \textless{} in.txt \tn 
% Row Count 10 (+ 4)
% Row 4
\SetRowColor{LightBackground}
If binary prompts for input more than once through stdin & r \textless{} \textless{}(echo " input1"; echo "input2") \tn 
% Row Count 13 (+ 3)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{x{4.4793 cm} p{0.4977 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Stepping}}  \tn
% Row 0
\SetRowColor{LightBackground}
Continue execution & c \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
Execute next instruction and step over a function & ni \tn 
% Row Count 3 (+ 2)
% Row 2
\SetRowColor{LightBackground}
Execute instruction and step into a function & si \tn 
% Row Count 5 (+ 2)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{x{3.78252 cm} x{1.19448 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Breakpoints}}  \tn
% Row 0
\SetRowColor{LightBackground}
Set breakpoint at function & bp vuln \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
Set breakpoint at address & bp 0x4005b5 \tn 
% Row Count 3 (+ 2)
% Row 2
\SetRowColor{LightBackground}
Set breakpoint at function + offset & bp vuln+47 \tn 
% Row Count 5 (+ 2)
% Row 3
\SetRowColor{white}
List breakpoints & bl \tn 
% Row Count 6 (+ 1)
% Row 4
\SetRowColor{LightBackground}
Delete all breakpoints & d br \tn 
% Row Count 7 (+ 1)
% Row 5
\SetRowColor{white}
Disable breakpoint 2 & bd 2 \tn 
% Row Count 8 (+ 1)
% Row 6
\SetRowColor{LightBackground}
Enable breakpoint 2 & be 2 \tn 
% Row Count 9 (+ 1)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{x{3.53367 cm} x{1.44333 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Examining data}}  \tn
% Row 0
\SetRowColor{LightBackground}
Exmaine two 8-byte values at RBP in hex & x/2gx \$rbp \tn 
% Row Count 2 (+ 2)
% Row 1
\SetRowColor{white}
Examine 10 instructions at main+25 & x/10i *main+25 \tn 
% Row Count 4 (+ 2)
% Row 2
\SetRowColor{LightBackground}
Examine 4-bytes of RAX in hex & x/wx \$rax \tn 
% Row Count 6 (+ 2)
% Row 3
\SetRowColor{white}
Print R10 in decimal & p/d \$r10 \tn 
% Row Count 7 (+ 1)
% Row 4
\SetRowColor{LightBackground}
Print sum of 0x500 and 0x39 in decimal & p/d 0x500 + 0x39 \tn 
% Row Count 9 (+ 2)
% Row 5
\SetRowColor{white}
Print the address of vuln() & p vuln \tn 
% Row Count 10 (+ 1)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\SetRowColor{LightBackground}
\mymulticolumn{2}{x{5.377cm}}{Using the {\bf{x}} or {\bf{p}} command followed by the {\bf{size}} of the data to examine, and {\bf{format}} letters \newline  \newline Sizes include {\bf{b}}yte, {\bf{w}}ord, {\bf{h}}alfword, and {\bf{g}}iant. \newline  \newline Format letters include {\bf{o}}ctal, he{\bf{x}}, {\bf{d}}ecimal, {\bf{i}}nstruction, {\bf{c}}har, and {\bf{s}}tring.}  \tn 
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{x{3.13551 cm} x{1.84149 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Modifying data}}  \tn
% Row 0
\SetRowColor{LightBackground}
Set the RAX register to 5 & set \$rax = 5 \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
Set the value pointed to by an address to 5 & set \seqsplit{*0x7fffffffe280} = 5 \tn 
% Row Count 3 (+ 2)
% Row 2
\SetRowColor{LightBackground}
Set the value pointed to by RAX-8 to 5 & set *(\$rax-8) = 5 \tn 
% Row Count 5 (+ 2)
% Row 3
\SetRowColor{white}
Set the RIP register to another address & set \$rip = 0x4005b5 \tn 
% Row Count 7 (+ 2)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{x{2.53827 cm} x{2.43873 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{FLAGS register}}  \tn
% Row 0
\SetRowColor{LightBackground}
View FLAGS register & regs eflags \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
Set the ZF flag (bit 6) & set \$eflags |= (1 \textless{}\textless{} 6) \tn 
% Row Count 3 (+ 2)
% Row 2
\SetRowColor{LightBackground}
Clear the ZF flag (bit 6) & set \$eflags \&= \textasciitilde{}(1 \textless{}\textless{} 6) \tn 
% Row Count 5 (+ 2)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\SetRowColor{LightBackground}
\mymulticolumn{2}{x{5.377cm}}{Carry: CF=0 \newline Parity: PF=2  \newline Adjust: AF=4 \newline Zero: ZF=6  \newline Sign: SF=7  \newline Interruption: IF=9 \newline Direction: DF=10  \newline Overflow: OF=11}  \tn 
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{p{0.4977 cm} p{0.4977 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Display state of the program}}  \tn
% Row 0
\SetRowColor{LightBackground}
\mymulticolumn{2}{x{5.377cm}}{context} \tn 
% Row Count 1 (+ 1)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{x{3.88206 cm} x{1.09494 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Get address of saved return pointer}}  \tn
% Row 0
\SetRowColor{LightBackground}
Return address of current stack frame & x/gx \$rbp+8 \tn 
% Row Count 2 (+ 2)
% Row 1
\SetRowColor{white}
Discovered return addresses on the stack & retaddr \tn 
% Row Count 4 (+ 2)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{x{2.83689 cm} x{2.14011 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Search for a string in memory}}  \tn
% Row 0
\SetRowColor{LightBackground}
Look for "Hello" & search Hello \tn 
% Row Count 1 (+ 1)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{x{1.34379 cm} x{3.63321 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Get distance between addresses}}  \tn
% Row 0
\SetRowColor{LightBackground}
Using p & p/d 0x7fffffffe278 - 0x7fffffffe220 \tn 
% Row Count 2 (+ 2)
% Row 1
\SetRowColor{white}
Using distance & distance 0x7fffffffe220 0x7fffffffe278 \tn 
% Row Count 4 (+ 2)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{x{2.28942 cm} x{2.68758 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Print hexdump}}  \tn
% Row 0
\SetRowColor{LightBackground}
Dump register & hexdump \$rsp \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
Dump memory address & hexdump 0x7fffffffe248 \tn 
% Row Count 3 (+ 2)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{x{3.78252 cm} x{1.19448 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Display stack}}  \tn
% Row 0
\SetRowColor{LightBackground}
View the stack & stack \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
View 30 rows of the stack & stack 30 \tn 
% Row Count 2 (+ 1)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{x{2.78712 cm} x{2.18988 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Print virtual memory map pages}}  \tn
% Row 0
\SetRowColor{LightBackground}
Display stack & vmmap stack \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
Display program & vmmap vuln01 \tn 
% Row Count 2 (+ 1)
% Row 2
\SetRowColor{LightBackground}
Display heap & vmmap heap \tn 
% Row Count 3 (+ 1)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{p{0.4977 cm} p{0.4977 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Check security settings}}  \tn
% Row 0
\SetRowColor{LightBackground}
\mymulticolumn{2}{x{5.377cm}}{checksec} \tn 
% Row Count 1 (+ 1)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}


% That's all folks
\end{multicols*}

\end{document}