Skip to content

Debuggers

Fernando Mercês edited this page Sep 29, 2021 · 13 revisions

RE Platform powered by Rizin framework (previously it was the GUI for radare2).

Hypervisor-assisted, user-mode and kernel-mode Windows debugger.

To use it, open a Command Prompt and type:

>hyperdbg-cli
HyperDbg Debugger [core version: v0.1.0.0]
Please visit https://docs.hyperdbg.com for more information...
HyperDbg is released under the GNU Public License v3 (GPLv3).

But to really understand how it works, read the docs.

Both 32 and 64-bit versions. It also includes the following plugins:

Plugin name Description
ASLR Removal Creates a copy of the target executable without the ASLR bit set
checksec Checks for security features in the target
MapoAnalyzer Pseudo-C decompiler
Multiline Ultimate Assembler Assembler that makes the reverse engineer's like much easier
ScyllaHide Must have plugin to deal with anti-debug routines
SwissArmyKnife I mainly use it to import .MAP files generated from IDA
xAnalyzer Analyse API function calls to show you the parameters
xSelectBlock Adds a widget and a command to easier selecting a block
YaraGen Generate Yara rules based on code from targets

In %AppFolder%\x64dbg\scripts folder you will also find scripts to help with the unpacking of PECompact, UPX, FSG, MPRESS and others.

Clone this wiki locally