lisa.py

LLDB MCP Integration This project provides a Model-Context Protocol MCP integration for LLDB, allowing AI assistants like Claude to interact with your debugging sessions through a standardized interface. Overview The integration consists of two main components: 1. server.py - An MCP server that...

voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

cerberus-re-skill

Cerberus RE cerberus-re is a local Apple-focused reverse-engineering workbench for building a repeatable three-headed static/dynamic/instrumentation loop around Ghidra, LLDB, and Frida. It is designed for analysts and coding agents that need durable artifacts instead of terminal-only notes: Ghidr...

pwndbg

pwndbg pwndbg는 GDB와 LLDB 플러그인으로, 디버깅을 덜 고통스럽게 만듭니다. 특히 저수준 소프트웨어 개발자, 하드웨어 해커, 리버스 엔지니어 및 익스플로잇 개발자에게 필요한 기능에 중점을 둡니다. 수많은 기능을 갖추고 있습니다. 자세한 내용은 Features 페이지와 CHEATSHEET을 참조하세요. 질문이 있으면 문서를 읽거나 Discord 서버에서 문의하세요. Pwndbg가 빠르게 발전하길 원하시거나, 저희가 이에 대해 발표하길 원하시나요? 후원해 주세요! 왜? 기본 GDB와 LLDB는 리버스 엔지니어링 및...

CVE-2025-43504

좋은 /bin이 나쁘게 변할 때: LLDB의 debugserver에서 발견된 원격 사전 인증 오버플로우 서론 어릴 적, 저는 동네 월마트의 DVD 할인 통을 뒤지는 것을 늘 즐겼습니다. 위에는 똑같은 영화들이 많이 놓여 있었지만, 실제로 깊이 뒤적이다 보면 더 흥미롭고 마니아적인 타이틀을 발견할 수 있었죠. 프로그램이 버퍼를 오버플로우할 때, 여러분은 본질적으로 그 프로그램의 할인 통에 손을 집어넣는 셈입니다. 손을 얼마나 깊이 넣느냐에 따라 DVD——즉, 이 경우에는 메모리에서 덮어쓰이는 구조체들——이 달라질 수 있습니다...

pwndbg v2026.09.15

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. It has a boatload of features, see our Features page and CHEATSHEET feel free to prin...

pwndbg v2026.07.29

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. It has a boatload of features, see our Features page and CHEATSHEET feel free to prin...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.95.0-5.hum1 aarch64, x8664 clippy-1.95.0-5.hum1 aarch64, x8664 rust-1.95.0-5.hum1 aarch64, x8664 rust-analyzer-1.95.0-5.hum1 aarch64, x8664 rust-debugger-common-1.95.0-5.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.95.0-2.hum1 aarch64, x8664 clippy-1.95.0-2.hum1 aarch64, x8664 rust-1.95.0-2.hum1 aarch64, x8664 rust-analyzer-1.95.0-2.hum1 aarch64, x8664 rust-debugger-common-1.95.0-2.hum1 noarch...

catbyte-toolkit

cb - Binary Analysis Toolkit for macOS/iOS Security Research...

Arbitrary Command Injection

Overview xcode-mcp-server is an An MCP server for Xcode integration, enabling AI assistants to interact with Xcode projects Affected versions of this package are vulnerable to Arbitrary Command Injection via the registerXcodeTools function in the runlldb component when processing the args argumen...

PT-2026-7010

Name of the Vulnerable Software and Affected Versions r-huijts xcode-mcp-server versions up to f3419f00117aa9949e326f78cc940166c88f18cb Description A command injection issue exists in the registerXcodeTools function within the src/tools/xcode/index.ts file of the run lldb component. Manipulation ...

About the security content of Xcode 26.1

About the security content of Xcode 26.1 This document describes the security content of Xcode 26.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of Xcode 26.1

About the security content of Xcode 26.1 This document describes the security content of Xcode 26.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CVE-2024-31852 affecting package lldb for versions less than 18.1.2-2

CVE-2024-31852 affecting package lldb for versions less than 18.1.2-2. A patched version of the package is available...

llvm-toolset:rhel8 bug fix and enhancement update

An update is available for llvm-compat, lld, compiler-rt, module.lld, lldb, python-lit, module.python-lit, module.lldb, llvm, libomp, module.compiler-rt, clang, module.libomp, module.llvm-compat, module.llvm, module.clang. This update affects Rocky Linux 8. A Common Vulnerability Scoring System...

lldb-eval:lldb_vs_lldb_eval_libfuzzer_test: Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

Detailed Report: https://oss-fuzz.com/testcase?key=5881405328916480 Project: lldb-eval Fuzzing Engine: libFuzzer Fuzz Target: lldbvslldbevallibfuzzertest Job Type: libfuzzerasanlldb-eval Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x606000058c20 Crash State:...

llvm-toolset:rhel8 bug fix and enhancement update

An update is available for lld, compiler-rt, module.lld, lldb, python-lit, module.python-lit, module.lldb, llvm, libomp, module.compiler-rt, clang, module.libomp, module.llvm, module.clang. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a...

Malicious code in lldb-dap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b30b65734b0a9961a35218b38d14cb5fc920ed076b3121fbab31e41262d4693 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-2628 Malicious code in lldb-dap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b30b65734b0a9961a35218b38d14cb5fc920ed076b3121fbab31e41262d4693 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...