====== General ======
attach to running process without break:
gdb attach -ex cont -iex "set pagination off" $(pidof process_name)
set disassembly-flavor intel
define hook-stop
x/li $eip
x/8wx $esp
end
====== Print Command ======
print string pointed by $rdi:
x/s $rdi
show bytes pointed by register with offset:
x/16bx $rsi+0x42
print array with size as bytes in registers:
p/x *(char *)$rcx@$dx
p/x (char[size]) *$rcx
====== Breakpoint ======
break on address:
b *0xdeadbeef
break at offset to function name:
b *(&func_name+0xbeef)
b *(funcname+0xbeef)
b *('class::method'+0xbeef)
set conditional breakpoint:
break dlopen if strcmp(file, "libc.so") == 0
set logpoint:
break func_name
commands
silent
printf "msg: %d\n", *($rdi+0xbeef)
cont
end