What is the Linux equivalent to OllyDbg
and IDA Pro
? Or if there are multiple tools that do the various functions that OllyDbg
and IDA Pro
do, where can I find these tools? I'd like to start reversing some elf files on Linux and I'm just looking for a set of tools to get me started.
-
IDA Pro for Windows runs beautifully under Wine, so no problem to use it this way ... just sayin'.– 0xC0000022L ♦May 24, 2019 at 7:17
5 Answers
Ida Pro runs on Windows, Linux and Mac OS, so i guess the Linux equivalent of Ida Pro is Ida Pro. The debugger that's used mostly seems to be gdb, possibly enhanced with a GUI.
-
2
-
Thank you for this answer. I had no idea that IDA Pro ran on Linux. Its been a while.– k170Dec 30, 2014 at 15:50
-
@k170 a brief example of the Debugger with Visual view of Radare2. radare.tv/a/71– MaijinJan 2, 2015 at 15:30
-
2Meanwhile (2018 onwards) I would also suggest to use github.com/radareorg/cutter.– ikaeromMay 29, 2019 at 8:41
edb is a cross platform x86/x86-64 debugger. It was inspired by Ollydbg, but aims to function on x86 and x86-64 as well as multiple OS's.
I would say radare2. It is opensource fast moving project, and it has analysis capibilites similar to that of ida, and supports many architectures like x86 and the 64bit version of x86 plus lots of other architectures you might never hear of. It has nice command line interface and everything is somehow documented.
It comes with bunch of tools for analysing binary files, patching, generating shellcodes from C, bindiffing, assemblers, and debugging all by default.
As an (2019) addition to all the other answers:
Try Ghidra.
It is the Software Reverse Engineering (SRE) suit of the NSA and it's free and open source. It was leaked as part of Wikileaks' "Vault 7" but the NSA decided to release it and they published it as open source software. It's written in Java and is cross platform, supporting Windows, Linux and MacOS.
For gbd try fGs gdbinit There is lldb, too. It's llvm debugger and it's scriptable in python
P.S. I would have commented, but that would have required registering, and earning 50 reputation.