x64dbg

An open-source x64/x32 debugger for windows.


Try the latest snapshot!

Visual C++ 2013 Redistributable (x86 + x64)


Download » Source » Bitcoin

 

Features

  • Open-source
  • Intuitive and familiar, yet new user interface
  • C-like expression parser
  • Full-featured debugging of DLL and EXE files (TitanEngine)
  • IDA-like sidebar with jump arrows
  • IDA-like instruction token highlighter (highlight registers, etc.)
  • Memory map
  • Symbol view
  • Thread view
  • Source code view
  • Content-sensitive register view
  • Fully customizable color scheme
  • Dynamically recognize modules and strings
  • Import reconstructor integrated (Scylla)
  • Fast disassembler (Capstone)
  • User database (JSON) for comments, labels, bookmarks, etc.
  • Plugin support with growing API
  • Extendable, debuggable scripting language for automation
  • Multi-datatype memory dump
  • Basic debug symbol (PDB) support
  • Dynamic stack view
  • Built-in assembler (XEDParse/Keystone)
  • Executable patching
  • Yara Pattern Matching
  • Decompiler (Snowman)
  • Analysis

Overview

Active development

x64dbg is under constant active development.

GPLv3

We provide both the executable and the source. Feel free to contribute.

Customizable

Write plugins in C++, change colors and tweak your preferences.

x64/x32 support

x64dbg can debug both x64 and x32 applications. There is only one interface.

Built on open-source libraries

x64dbg uses Qt, TitanEngine, capstone, Yara, Scylla, Jansson, lz4, XEDParse and Keystone.

Simple, powerful development

x64dbg uses C++ and Qt4 to quickly add new features.

Scriptable

x64dbg has an integrated, debuggable, ASM-like scripting language.

Community-aware

x64dbg has many features thought of or implemented by the reversing community.

Extendable

Write plugins to add script commands or to integrate your tools.

Plugins

testplugin <Mr. eXoDia>

[ x86, x64 ]

Demo plugin that demonstrates many of the internal API functions.

Source

ScyllaHide <Aguila & cypher>

[ x86, x64 ]

Open-source user-mode Anti-Anti-Debug plugin.

Website

TitanHide <Mr. eXoDia>

[ x86, x64 ]

Open-source kernel-mode Anti-Anti-Debug plugin.

Source Download

IDALdr <Nukem>

[ x86, x64 ]

Plugin to load IDA signatures and linker map files in x64dbg.

Source Download

Highlightfish <Insid3Code>

[ x86, x64 ]

Plugin to select x64dbg color and highlighting schemes.

Download

MultiASM <RaMMicHaeL>

[ x86, x64 ]

Well-known plugin to write advanced inline assembly.

Homepage Download

SigMake <Nukem>

[ x86, x64 ]

A plugin for signature generation in x64dbg.

Source Download

OllyMigrate <lowprio20>

[ x86, x64 ]

A plugin to pass debuggee to another debugger without restarting.

Website Download

OllyDumpEx <lowprio20>

[ x86, x64 ]

Process memory dumper for x64dbg, OllyDbg and Immunity Debugger.

Website Download

IDASkins <Nukem>

[ x86, x64 ]

Advanced skinning support for Qt utilizing stylesheets, ported to x64dbg.

Source

ret-sync <bootleg>

[ x86, x64 ]

Synchronize a debugging session with IDA.

Source

labeless <a1ext>

[ x86, x64 ]

Label syncing between IDA and x64dbg.

Source Download

ChaiScript <jdavidberger>

[ x86, x64 ]

Run chaiscript files and commands from within x64dbg.

Source Download

Credits


Special Thanks

All the donators!, Everybody adding issues!, People I forgot to add to this list, EXETools community, Tuts4You community, ReSharper, Coverity, acidflash, cyberbob, cypher, Teddy Rogers, TEAM DVT, DMichael, Artic, ahmadmansoor, _pusher_, firelegend


Developers

Contributers

torusrxxx, blaquee, wk-952, RaMMicHaeL, lovrolu, fileoffset, SmilingWolf, ApertureSecurity, mrgreywater, Dither, zerosum0x0, RadicalRaccoon, fetzerms, muratsu, ForNeVeR

Donations

Contact