[salgernon]

I don’t know if `pwndbg’ does this (or some other add-on maybe) but something I’ve haven’t seen since macsbug on a classic Mac: when stepping through a disassembly at a conditional branch, the PC line will state whether the branch will be taken and the target address. Saves all that tedious mucking about for the status register.

[ebeip90]

Not only does it do this, it does all kinds of forward emulation, thanks to Unicorn.

https://github.com/pwndbg/pwndbg/blob/dev/caps/disasm_taken_...

This also works for stepping through e.g. ROP gadgets during exploitation.