EDB (Evan's Debugger)

EDB (Evan's Debugger) is an open source, free and portable graphical application designed to be used by any developer as a binary mode debugger. The project’s main goal is to offer usability on par with OllyDbg. However, it uses a plugin architecture, which allows users to easily and quickly add new features and extend its functionality.

Features at a glance

Key features include an easy-to-use, modern, straightforward, feature-rich and intuitive GUI (Graphical User Interface) front-end, standard debugging functionality, including run, break, step-over and step-into, support for conditional breakpoints, basic instruction analysis, ability to generate and import symbol maps, as well as compelling address inspection.

In addition, the software comes with many other powerful features, such as the ability to view and dump memory regions, tabbed data dump view, allowing you to watch multiple memory views at the same time, as well as to effectively switch between them. The debugging engine of EDB has been implemented as a plugin.

Offers a powerful plugin architecture

Another interesting feature of EDB (Evan's Debugger) is the built-in, state-of-the-art plugin architectures. Several plugins are offered, among which we can mention hardware breakpoints, reference finder, code bookmarks, heap block enumeration, basic ROP instruction search, string searching, search of binary strings, breakpoint management, environment variable viewer, open file enumeration, code analysis engine, opcode search engine, and update checker.

Under the hood and supported operating systems

EDB (Evan's Debugger) is written in the C++ programming language and uses the Qt GUI toolkit for its graphical user interface. Originally designed for the Linux platform, EDB (Evan's Debugger) can also be easily ported to other operating systems, such as Microsoft Windows and Mac OS X, thanks to the Qt SDK. The application supports both 32-bit and 64-bit architectures.

What is new in this release:

• This version supports x86 and x86-64 architectures.

What is new in version 0.9.17:

• This version supports x86 and x86-64 architectures

What is new in version 0.9.16:

• Experimental OpenBSD support was added.
• Symbol generation support is now built in, so there is no longer any dependency on system utilities.
• The reference finder was improved.
• A basic "ROP" plugin was implemented.
• Many internal changes were made to improve code quality and consistency.
• Many other small improvements and bug fixes were made.

What is new in version 0.9.12:

• Please give it a try and let me know what I can do to improve it.

What is new in version 0.9.11:

• This version supports x86 and x86-64 architectures. Please give it a try and let me know what I can do to improve it. Documentation is pretty much non-existant, but that's one of the reasons why this is not a 1.0 release. Remember to read the README file, it has a lot of information, and please check the bugzilla before asking about a missing feature, it may already be in the works.

What is new in version 0.9.8:

• This version supports x86 and x86-64 architectures. Please give it a try and let me know what I can do to improve it. Documentation is pretty much non-existant, but that's one of the reasons why this is not a 1.0 release :). Remember to read the README file, it has a lot of information, and please check the bugzilla before asking about a missing feature, it may already be in the works. Enjoy!

What is new in version 0.9.7:

• A new plugin API. Use of boost to improve code quality.
• Numerous minor bugfixes.
• Several other minor changes.

What is new in version 0.9.6:

• Improved 64-bit support (a bug preventing 64-bit debugging was fixed).
• Improved ASCII string identification code.
• Much faster heap analysis.
• Preliminary changes to help support future internationalization are in place.

What is new in version 0.9.5:

• The heap analyzer now works in x86-64, and GS/FS segments are now included in the basic analysis.
• There is better x86-64 install directory support.
• The symbol viewer plugin is improved.

Requirements:

• Qt