by dariushoule
Claude Code plugin providing skills for x64dbg debugger automation
# Add to your Claude Code skills
git clone https://github.com/dariushoule/x64dbg-skillsGuides for using mcp servers skills like x64dbg-skills.
Claude Code plugin providing skills for x64dbg debugger automation.
/state-snapshotCaptures a full debuggee state snapshot to disk for offline analysis:
/state-diffCompares two state snapshots to identify what changed between two points in time:
/decompileDecompiles a function to C-like pseudocode using angr:
/yara-sigsScans snapshot memory dumps with YARA signatures from the x64dbg yarasigs database:
/state-snapshot — uses an existing snapshot or takes a fresh oneNo comments yet. Be the first to share your thoughts!
Top skills in this category by stars
/tracealyzerTraces execution (into or over calls) for N steps or until a condition is met, then analyzes the recorded instruction log:
cip == 0x401000), or bothtraces/ with addresses, disassembly, labels, and comments/shellcode-analyzerLoads, unpacks, and analyzes raw shellcode blobs in x64dbg:
timeout.exe as a sacrificial process (supports 32-bit and 64-bit)/yara-sigs), annotates key addresses with comments and labels/find-oepSmart trace-based OEP finder for packed/protected PE executables:
/yara-sigs for packer identification and /state-snapshot for memory capture at OEP/vuln-hunterHunts for vulnerabilities in a running debuggee through systematic analysis:
/decompile for complex functions and /tracealyzer for execution tracingx64dbg_automate pip package installed:
pip install x64dbg_automate[mcp] --upgrade
/decompile skill: angr (Python >= 3.10):
pip install angr
/yara-sigs skill: yara-python and Git:
pip install yara-python
/vuln-hunter skill: LIEF for static PE analysis:
pip install lief
Add the marketplace and install the plugin:
/plugin marketplace add dariushoule/x64dbg-skills
/plugin install x64dbg-skills
To update to the latest version:
/plugin install x64dbg-skills
A decent guide that gives good ideas on how to use these skills: Cooking with x64dbg and MCP
MIT