“Unstripping” binaries: Restoring debugging information in GDB with Pwndbg

Summary: A Trail of Bits intern extended Pwndbg, the GDB plugin maintained by Dominik Czarnota, with an integration that runs an XML-RPC server inside Binary Ninja so Pwndbg can query its analysis database to sync symbols, function signatures, and stack variable offsets into stripped binaries. The same work added a go-dump command that dumps all of Go's built-in types, including arbitrarily nested ones, and a go-type command that parses the Go compiler's runtime type objects, both available on the Pwndbg dev branch and release 2024.08.29.
What you should know: Stripped binaries are what defenders usually face in incident response, and the release narrows the gap by restoring symbol and stack-variable labels from Binary Ninja and dumping complex Go values that previously took hundreds of manual commands.

Read the original at Trail of Bits Blog ↗