edit-flags
Command edit-flags
The edit-flags
command (alias: flags
) provides a quick and comprehensible
way to view and edit the flag register for the architectures that support it.
Without argument, the command will simply return a human-friendly display of the
register flags.
One or many arguments can be provided, following the syntax below:
gef➤ flags [(+|-|~)FLAGNAME ...]
Where FLAGNAME
is the name of the flag (case insensitive), and +|-|~
indicates
the action on whether to set, unset, or toggle the flag.
For instance, on x86 architecture, if we don't want to take a conditional jump
(e.g. a jz
instruction), but we want to have the Carry flag set, simply go with:
gef➤ flags -ZERO +CARRY