x64dbg

An open-source x64/x32 debugger for windows.


Try the latest snapshot!

Visual C++ 2013 Redistributable (x86 + x64)


Download » Source » Bitcoin

 

Features

  • Open-source
  • Intuitive and familiar, yet new user interface
  • C-like expression parser
  • Full-featured debugging of DLL and EXE files (TitanEngine)
  • IDA-like sidebar with jump arrows
  • IDA-like instruction token highlighter (highlight registers, etc.)
  • Memory map
  • Symbol view
  • Thread view
  • Source code view
  • Content-sensitive register view
  • Fully customizable color scheme
  • Dynamically recognize modules and strings
  • Import reconstructor integrated (Scylla)
  • Fast disassembler (Capstone)
  • User database (JSON) for comments, labels, bookmarks, etc.
  • Plugin support with growing API
  • Extendable, debuggable scripting language for automation
  • Multi-datatype memory dump
  • Basic debug symbol (PDB) support
  • Dynamic stack view
  • Built-in assembler (XEDParse/Keystone/asmjit)
  • Executable patching
  • Yara Pattern Matching
  • Decompiler (Snowman)
  • Analysis

Overview

Active development

x64dbg is under constant active development.

GPLv3

We provide both the executable and the source. Feel free to contribute.

Customizable

Write plugins in C++, change colors and tweak your preferences.

x64/x32 support

x64dbg can debug both x64 and x32 applications. There is only one interface.

Built on open-source libraries

x64dbg uses Qt, TitanEngine, capstone, Yara, Scylla, Jansson, lz4, XEDParse, Keystone, asmjit and snowman.

Simple, powerful development

x64dbg uses C++ and Qt to quickly add new features.

Scriptable

x64dbg has an integrated, debuggable, ASM-like scripting language.

Community-aware

x64dbg has many features thought of or implemented by the reversing community.

Extendable

Write plugins to add script commands or to integrate your tools.

Plugins

testplugin <Mr. eXoDia>

[ x86, x64 ]

Demo plugin that demonstrates many of the internal API functions.

Source

ScyllaHide <Aguila & cypher>

[ x86, x64 ]

Open-source user-mode Anti-Anti-Debug plugin.

Source Download

TitanHide <Mr. eXoDia>

[ x86, x64 ]

Open-source kernel-mode Anti-Anti-Debug plugin.

Source Download

SwissArmyKnife <Nukem>

[ x86, x64 ]

Utility for MAP/DIFF files, PEiD/IDA signatures.

Source Download

MultiASM <RaMMicHaeL>

[ x86, x64 ]

Well-known plugin to write advanced inline assembly.

Homepage Download

OllyMigrate <lowprio20>

[ x86, x64 ]

A plugin to pass debuggee to another debugger without restarting.

Website Download

OllyDumpEx <lowprio20>

[ x86, x64 ]

Process memory dumper for x64dbg, OllyDbg and Immunity Debugger.

Website Download

ret-sync <bootleg>

[ x86, x64 ]

Synchronize a debugging session with IDA.

Source

labeless <a1ext>

[ x86, x64 ]

Label syncing between IDA and x64dbg.

Source Download

ChaiScript <jdavidberger>

[ x86, x64 ]

Run chaiscript files and commands from within x64dbg.

Source Download

x64dbgpy <Tomer Zait>

[ x86, x64 ]

Automating x64dbg using Python.

Source Download

Credits

Special Thanks

All the donators!, Everybody adding issues!, People I forgot to add to this list, EXETools community, Tuts4You community, ReSharper, Coverity, acidflash, cyberbob, cypher, Teddy Rogers, TEAM DVT, DMichael, Artic, ahmadmansoor, _pusher_, firelegend, kao, sstrato, kobalicek

Developers

mrexodia, Sigma, tr4ceflow, Dreg, Nukem, Herz3h, torusrxxx

Contributors

blaquee, wk-952, RaMMicHaeL, lovrolu, fileoffset, SmilingWolf, ApertureSecurity, mrgreywater, Dither, zerosum0x0, RadicalRaccoon, fetzerms, muratsu, ForNeVeR, wynick27, Atvaark, Avin, mrfearless, Storm Shadow

Donations

Contact