bootleg/ret-sync

Health v2 · maintenance only

Adoption not part of the score

2378 stars · 307 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

ret-sync is a set of plugins that synchronize a debugging session (WinDbg, GDB, LLDB, OllyDbg, x64dbg) with disassemblers (IDA, Ghidra, Binary Ninja). It combines static and dynamic analysis by keeping disassembler views in sync with the debugger's live state, including automatic ASLR rebasing.

Use cases

• synchronize IDA graph view with a live WinDbg debugging session
• trace execution in Ghidra while debugging with GDB
• debug malware with x64dbg while following along in a disassembler
• rebase addresses on-the-fly to deal with ASLR during dynamic analysis
• sync multiple IDBs at once to trace across multiple modules
• pass debugger comments and command output into the disassembler

When to choose

• you want to combine static disassembly with live dynamic debugging
• you need ASLR-aware address synchronization between debugger and disassembler
• you work across multiple hosts or VMs with debugger and disassembler separated
• you need support for many debugger/disassembler combinations from one tool

When to avoid

• you only do static analysis without a debugger
• you use a disassembler or debugger not on the supported list
• you need a fully integrated single-tool reversing environment

Facets

plugin · maturity active

reverse-engineering security developer-tools reverse-engineering security developer-tools windows cross-platform debugger-plugin disassembler ida-pro ghidra binary-ninja windbg gdb lldb x64dbg dynamic-analysis static-analysis linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="bootleg/ret-sync")