dotfiles/.gef.rc
2025-05-09 23:15:55 +02:00

206 lines
4 KiB
Text

[assemble]
default_architecture = X86
default_mode = 64
[capstone-disassemble]
use-capstone = False
[context]
clear_screen = False
enable = True
grow_stack_down = False
ignore_registers =
layout = legend regs stack code args source memory threads trace extra syscall_args libc_function_args libc_function_args syscall_args
libc_args = True
libc_args_path = /home/kappa/.config/gef-extras/glibc-function-args
nb_lines_backtrace = 10
nb_lines_backtrace_before = 2
nb_lines_code = 6
nb_lines_code_prev = 3
nb_lines_stack = 8
nb_lines_threads = -1
peek_calls = True
peek_ret = True
redirect =
show_opcodes_size = 0
show_registers_raw = False
show_source_code_variable_values = True
show_stack_raw = False
[dereference]
max_recursion = 7
[entry-break]
entrypoint_symbols = main _main __libc_start_main __uClibc_main start _start
[ftrace]
output = /dev/stderr
[gef]
autosave_breakpoints_file =
bruteforce_main_arena = True
buffer = True
debug = False
disable_color = False
extra_plugins_dir = /home/kappa/.config/gef-extras/scripts
follow_child = True
main_arena_offset =
readline_compat = False
show_deprecation_warnings = True
tempdir = /tmp/gef
use-windbg-prompt = False
[got]
function_not_resolved = yellow
function_resolved = green
[heap-analysis-helper]
check_double_free = True
check_free_null = False
check_heap_overlap = True
check_uaf = True
check_weird_free = True
[heap-chunks]
peek_nb_byte = 16
[hexdump]
always_show_ascii = False
[highlight]
regex = False
[ida-rpyc]
host = 127.0.0.1
port = 18812
sync_cursor = False
[pattern]
length = 1024
[pcustom]
max_depth = 4
struct_path = /home/kappa/.config/gef-extras/structs
structure_name = bold blue
structure_size = green
structure_type = bold red
[print-format]
max_size_preview = 10
[process-search]
ps_command = /usr/bin/ps auxww
[retdec]
path = /tmp/gef
retdec_path =
theme = default
[rpyc-remote]
host = 0.0.0.0
port = 12345
[search-pattern]
max_size_preview = 10
nr_pages_chunk = 1024
[syscall-args]
path = /home/kappa/.config/gef-extras/syscall-tables
[theme]
address_code = red
address_heap = green
address_stack = pink
context_title_line = gray
context_title_message = cyan
default_title_line = gray
default_title_message = cyan
dereference_base_address = cyan
dereference_code = gray
dereference_register_value = bold blue
dereference_string = yellow
disassemble_current_instruction = green
old_context = gray
registers_register_name = blue
registers_value_changed = bold red
source_current_line = green
table_heading = blue
[trace-run]
max_tracing_recursion = 1
tracefile_prefix = ./gef-trace-
[unicorn-emulate]
show_disassembly = False
verbose = False
[vereference]
max_recursion = 7
[aliases]
r = run
ctx = context
telescope = dereference
flags = edit-flags
start = entry-break
fmtstr-helper = format-string-helper
hl = highlight
highlight set = highlight add
hla = highlight add
hlc = highlight clear
highlight ls = highlight list
hll = highlight list
highlight delete = highlight remove
highlight del = highlight remove
highlight unset = highlight remove
highlight rm = highlight remove
hlr = highlight remove
nb = name-break
pattern offset = pattern search
pf = print-format
ps = process-search
status = process-status
lookup = scan
grep = search-pattern
xref = search-pattern
sc-get = shellcode get
sc-search = shellcode search
screen-setup = tmux-setup
da = display/s
dt = pcustom
dq = hexdump qword
dd = hexdump dword
dw = hexdump word
db = hexdump byte
eq = patch qword
ed = patch dword
ew = patch word
eb = patch byte
ea = patch string
dps = dereference
bp = break
bl = info breakpoints
bd = disable breakpoints
bc = delete breakpoints
be = enable breakpoints
tbp = tbreak
s = grep
pa = advance
t = stepi
kp = info stack
uf = disassemble
asm = assemble
stack-view = current-stack-frame
perror = error
skeleton = exploit-template
ida-rpyc bp = ida-rpyc breakpoints
ida-rpyc bl = ida-rpyc breakpoints list
ida-rpyc cmt = ida-rpyc comments
ida-rpyc hl = ida-rpyc highlight
ida-rpyc goto = ida-rpyc jump
decompile = retdec
mprotect = set-permission
emulate = unicorn-emulate
v8 = vereference
heap-view = visualize-libc-heap-chunks