// SCAN REPORT

Pwndbg Lldb

153 tools. 63 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 30 Jun 2026

63 can modify or destroy data

90 read-only

153 tools total

Community server · catalogue entry verified 30/06/2026

How to control Pwndbg Lldb ↓

TOOL MAP

What Pwndbg Lldb exposes to your agents

Read (90) Write / Execute (60) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Pwndbg Lldb tools

Destructive · Medium pwndbg_breakpoint_delete Deleting a breakpoint is an irreversible action within the debugging session; the breakpoint configuration is permanently removed and cannot be recovered. Destructive · Medium pwndbg_terminate Terminating a debug session and freeing all resources is an irreversible action — the session state, breakpoints, and any in-progress debugging context are permanently destroyed. Execute · High pwndbg_emulate The tool name 'emulate' in the pwndbg context refers to instruction emulation or code execution simulation—a capability that executes arbitrary instructions or bytecode. Execute · High pwndbg_finish pwndbg_finish resumes and controls execution of a debugger target process.

63 of Pwndbg Lldb's 153 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Pwndbg Lldb

PolicyLayer is an MCP gateway — it sits between your AI agents and Pwndbg Lldb, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "pwndbg_breakpoint_delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "pwndbg_patch": {
    "limits": [
      {
        "counter": "pwndbg_patch_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "pwndbg_arena": {
    "limits": [
      {
        "counter": "pwndbg_arena_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Pwndbg Lldb — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON PWNDBG LLDB →

Instant setup, no code required.

FULL CATALOGUE

All 153 Pwndbg Lldb tools

DESTRUCTIVE 2 tools

Destructive pwndbg_breakpoint_delete Delete a breakpoint by its ID number. Destructive pwndbg_terminate Terminate a pwndbg session and free all resources.

EXECUTE 58 tools

Execute pwndbg_asm pwndbg_asm Execute pwndbg_attach Attach to a running process by PID. Execute pwndbg_command pwndbg_command Execute pwndbg_command_batch pwndbg_command_batch Execute pwndbg_context pwndbg_context Execute pwndbg_continue pwndbg_continue Execute pwndbg_cyclic pwndbg_cyclic Execute pwndbg_da pwndbg_da Execute pwndbg_dd pwndbg_dd Execute pwndbg_dt pwndbg_dt Execute pwndbg_dw pwndbg_dw Execute pwndbg_eb pwndbg_eb Execute pwndbg_emulate pwndbg_emulate Execute pwndbg_entry pwndbg_entry Execute pwndbg_eq pwndbg_eq Execute pwndbg_examine pwndbg_examine Execute pwndbg_expression Evaluate an expression in the current frame (LLDB native). Execute pwndbg_find_fake_fast pwndbg_find_fake_fast Execute pwndbg_finish Execute until the current function returns. Execute pwndbg_hijack_fd pwndbg_hijack_fd Execute pwndbg_load pwndbg_load Execute pwndbg_mprotect pwndbg_mprotect Execute pwndbg_next Step over the next source line or instruction (does not enter calls). Execute pwndbg_nextcall pwndbg_nextcall Execute pwndbg_nextjmp pwndbg_nextjmp Execute pwndbg_nextproginstr pwndbg_nextproginstr Execute pwndbg_nextret pwndbg_nextret Execute pwndbg_nextsyscall pwndbg_nextsyscall Execute pwndbg_onegadget pwndbg_onegadget Execute pwndbg_p2p pwndbg_p2p Execute pwndbg_parse_seccomp pwndbg_parse_seccomp Execute pwndbg_plist pwndbg_plist Execute pwndbg_pwndbg pwndbg_pwndbg Execute pwndbg_r2 pwndbg_r2 Execute pwndbg_rop pwndbg_rop Execute pwndbg_run pwndbg_run Execute pwndbg_run_until_stop pwndbg_run_until_stop Execute pwndbg_rz pwndbg_rz Execute pwndbg_set_breakpoint Set a breakpoint at the given location, optionally with a condition. Execute pwndbg_set_breakpoint_advanced pwndbg_set_breakpoint_advanced Execute pwndbg_sigreturn pwndbg_sigreturn Execute pwndbg_slab pwndbg_slab Execute pwndbg_spray pwndbg_spray Execute pwndbg_stackf pwndbg_stackf Execute pwndbg_start pwndbg_start Execute pwndbg_start_monitor pwndbg_start_monitor Execute pwndbg_step Step into the next source line or instruction. Execute pwndbg_stepover pwndbg_stepover Execute pwndbg_stepret pwndbg_stepret Execute pwndbg_stepsyscall pwndbg_stepsyscall Execute pwndbg_stepuntilasm pwndbg_stepuntilasm Execute pwndbg_stop_monitor Stop the background event monitor for a session. Execute pwndbg_tcache pwndbg_tcache Execute pwndbg_thread_select Select a specific thread and show its backtrace. Execute pwndbg_try_free pwndbg_try_free Execute pwndbg_valist pwndbg_valist Execute pwndbg_watchpoint Set a watchpoint on a memory address or variable. Execute pwndbg_xor pwndbg_xor

WRITE 2 tools

Write pwndbg_patch pwndbg_patch Write pwndbg_patch_revert pwndbg_patch_revert

READ 90 tools

Read pwndbg_arena pwndbg_arena Read pwndbg_arenas List all arenas in the process. Read pwndbg_argc Print the argument count (argc) of the running program. Read pwndbg_argv pwndbg_argv Read pwndbg_aslr pwndbg_aslr Read pwndbg_auxv pwndbg_auxv Read pwndbg_backtrace Show call stack backtrace (LLDB native). Read pwndbg_bins pwndbg_bins Read pwndbg_breakpoint_list List all breakpoints in the current session. Read pwndbg_breakpoint_list_parsed pwndbg_breakpoint_list_parsed Read pwndbg_bugreport Generate a bug report with environment information. Read pwndbg_canary pwndbg_canary Read pwndbg_checksec pwndbg_checksec Read pwndbg_comm pwndbg_comm Read pwndbg_commpage pwndbg_commpage Read pwndbg_config pwndbg_config Read pwndbg_contextoutput pwndbg_contextoutput Read pwndbg_contextunwatch pwndbg_contextunwatch Read pwndbg_contextwatch pwndbg_contextwatch Read pwndbg_cpsr pwndbg_cpsr Read pwndbg_db pwndbg_db Read pwndbg_dc pwndbg_dc Read pwndbg_dds pwndbg_dds Read pwndbg_disassemble Disassemble code using LLDB's native disassembler. Read pwndbg_distance pwndbg_distance Read pwndbg_dq pwndbg_dq Read pwndbg_dumpargs pwndbg_dumpargs Read pwndbg_ed pwndbg_ed Read pwndbg_elfsections pwndbg_elfsections Read pwndbg_envp pwndbg_envp Read pwndbg_errno pwndbg_errno Read pwndbg_fastbins pwndbg_fastbins Read pwndbg_frame_info Get detailed information about a stack frame (LLDB native). Read pwndbg_get_events pwndbg_get_events Read pwndbg_got pwndbg_got Read pwndbg_gotplt pwndbg_gotplt Read pwndbg_heap pwndbg_heap Read pwndbg_heap_config pwndbg_heap_config Read pwndbg_help Get help for a command (LLDB native or pwndbg). Read pwndbg_hex2ptr pwndbg_hex2ptr Read pwndbg_hexdump pwndbg_hexdump Read pwndbg_hi pwndbg_hi Read pwndbg_info_registers Display CPU registers. Read pwndbg_kbase Show the kernel base address. Read pwndbg_kchecksec Check kernel security configuration (KASLR, SMEP, SMAP, etc.). Read pwndbg_kcmdline Show the kernel command line. Read pwndbg_kconfig pwndbg_kconfig Read pwndbg_kdmesg Show kernel log messages (dmesg). Read pwndbg_kill Kill the running process. Read pwndbg_kmod Show loaded kernel modules. Read pwndbg_ksyscalls Show syscall table information. Read pwndbg_ktask Show kernel task/process information. Read pwndbg_kversion Show kernel version. Read pwndbg_largebins pwndbg_largebins Read pwndbg_leakfind pwndbg_leakfind Read pwndbg_libcinfo pwndbg_libcinfo Read pwndbg_linkmap pwndbg_linkmap Read pwndbg_list_sessions List all active pwndbg sessions with their IDs, targets, and working directories. Read pwndbg_ln pwndbg_ln Read pwndbg_load_core Load a core dump file for post-mortem analysis. Read pwndbg_malloc_chunk pwndbg_malloc_chunk Read pwndbg_mmap pwndbg_mmap Read pwndbg_nearpc pwndbg_nearpc Read pwndbg_pagewalk pwndbg_pagewalk Read pwndbg_patch_list List all applied patches. Read pwndbg_pid Get the PID of the running process. Read pwndbg_piebase pwndbg_piebase Read pwndbg_plt pwndbg_plt Read pwndbg_print Print value of an expression (LLDB native). Read pwndbg_probeleak pwndbg_probeleak Read pwndbg_process_info Get LLDB process status and info (LLDB native). Read pwndbg_procinfo pwndbg_procinfo Read pwndbg_retaddr pwndbg_retaddr Read pwndbg_search pwndbg_search Read pwndbg_setflag pwndbg_setflag Read pwndbg_smallbins pwndbg_smallbins Read pwndbg_stack pwndbg_stack Read pwndbg_strings pwndbg_strings Read pwndbg_tcachebins pwndbg_tcachebins Read pwndbg_telescope pwndbg_telescope Read pwndbg_theme pwndbg_theme Read pwndbg_thread_list List all threads in the current process (LLDB native). Read pwndbg_threads pwndbg_threads Read pwndbg_tips Show pwndbg usage tips. Read pwndbg_tls pwndbg_tls Read pwndbg_top_chunk pwndbg_top_chunk Read pwndbg_unsortedbin pwndbg_unsortedbin Read pwndbg_vis_heap_chunks pwndbg_vis_heap_chunks Read pwndbg_vmmap pwndbg_vmmap Read pwndbg_xinfo pwndbg_xinfo

OTHER 1 tools

Other pwndbg_mp pwndbg_mp

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Pwndbg Lldb

Can an AI agent delete data through the Pwndbg Lldb MCP server? +

Yes. The Pwndbg Lldb server exposes 2 destructive tools including pwndbg_breakpoint_delete, pwndbg_terminate. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Pwndbg Lldb? +

The Pwndbg Lldb server has 2 write tools including pwndbg_patch, pwndbg_patch_revert. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Pwndbg Lldb.

How many tools does the Pwndbg Lldb MCP server expose? +

153 tools across 4 categories: Destructive, Execute, Read, Write. 90 are read-only. 63 can modify, create, or delete data.

How do I enforce a policy on Pwndbg Lldb? +

Register the Pwndbg Lldb MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Pwndbg Lldb tool call.

Deterministic rules across all 153 Pwndbg Lldb tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON PWNDBG LLDB →

Instant setup, no code required.

153 Pwndbg Lldb tools catalogued and risk-classified — across an index of 43,000+ MCP servers.