This release brings improved disassembly and architecture handling (including fixes for s390x and ARM), enhanced page marker detection, new kernel BPF (kbpf) command, and various stability fixes and cleanups.
Want to support us or buy us a coffee? Visit our Pwndbg sponsors page!
Quick install
A portable version of Pwndbg can be installed as shown below.
Portable via Linux or macOS (choose one line for either GDB or LLDB):
curl -qsL 'https://install.pwndbg.re' | sh -s -- -t pwndbg-gdb
curl -qsL 'https://install.pwndbg.re' | sh -s -- -t pwndbg-lldb
Homebrew package (macOS only):
brew install pwndbg/tap/pwndbg-gdb
brew install pwndbg/tap/pwndbg-lldb
Note: On macOS the pwndbg-gdb only allows for remote debugging of ELFs.
Nix package manager (Linux/macOS):
nix shell github:pwndbg/pwndbg
Want a package for specific distro & arch? Check out setup docs and download the specific asset below.
Want latest development version? See install from source.
What's changed
Portable & Packaging
- Fixed
No package metadata was found for prompt_toolkitcrash on portable releases (#3343)
General
- Fixed missing function lookup in
klookupcommand by adding proper existence checks (#3352, fixes [#3349]) -
Added new
kbpfcommand for inspecting kernel BPF internals (#3354) -
Removed unnecessary debug symbol requirement for page marker detection, improving kernel debugging experience (#3346)
- Added documentation page about packaging and distribution (#3355)
Architectures & Disassembly
- Fixed branch checkmarks incorrectly appearing on certain s390x unconditional jumps (#3347)
- Fixed bugs in ARM conditional instruction annotations (#3358, fixes [#3299])
- Improved register tracking during disassembly by manually propagating register values across instructions (#2963)
Full Changelog: https://github.com/pwndbg/pwndbg/compare/2025.10.10...2025.10.20