Skip to main content

A Python library to automate x64dbg

Project description

x64dbg Automate: Reference Python Client

This is the reference client of x64dbg Automate. The library builds on x64dbg's command execution engine and plugin API to provide an expressive, modern, and easy to use Python client. x64dbg Automate is useful in a wide variety of malware analysis, reverse engineering, and vulnerability hunting tasks.

The client implements the full RPC protocol provided by x64dbg-automate.

Documentation

Full project documentation is published on: https://dariushoule.github.io/x64dbg-automate-pyclient/

See: Installation and Quickstart

🔔 All examples and sample code assume x64dbg is configured to stop on entry and system breakpoints, skipping TLS breakpoints.

MCP Server (Claude Code Integration)

The MCP server exposes x64dbg automation as Model Context Protocol tools for LLM clients like Claude Code.

Installation

pip install x64dbg_automate[mcp] --upgrade

Configuration

Add to your .mcp.json (project or user level):

{
  "mcpServers": {
    "x64dbg": {
      "command": "x64dbg-automate-mcp",
      "env": {
        "X64DBG_PATH": "C:\\path\\to\\x96dbg.exe"
      }
    }
  }
}

Setting X64DBG_PATH lets the MCP tools resolve x64dbg automatically — no need to pass the path on every start_session or connect_to_session call.

For local development, use uv to run from source:

{
  "mcpServers": {
    "x64dbg": {
      "command": "uv",
      "args": [
        "run",
        "--directory", "C:\\path\\to\\x64dbg-automate-pyclient",
        "--extra", "mcp",
        "x64dbg-automate-mcp"
      ],
      "env": {
        "X64DBG_PATH": "C:\\path\\to\\x96dbg.exe"
      }
    }
  }
}

See the MCP Server documentation for the full tool reference and usage walkthrough.

Development and Testing

The client's environment is managed with poetry.

Update tests/conftest.py or provide the requisite environment to allow tests to pass.

poetry install
poetry env activate
python -m pytest # Test
python .\examples\assemble_and_disassemble.py C:\<you>\x64dbg\release\x64\x64dbg.exe # Run an example

Documentation is built using mkdocs

python -m mkdocs serve # dev
python -m mkdocs build # publish

Contributing

Issues, feature-requests, and pull-requests are welcome on this project ❤️🐛

My commitment to the community will be to be a responsive maintainer. Discuss with me before implementing major breaking changes or feature additions.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

x64dbg_automate-0.7.6.tar.gz (27.3 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

x64dbg_automate-0.7.6-py3-none-any.whl (29.8 kB view details)

Uploaded Python 3

File details

Details for the file x64dbg_automate-0.7.6.tar.gz.

File metadata

  • Download URL: x64dbg_automate-0.7.6.tar.gz
  • Upload date:
  • Size: 27.3 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: poetry/2.3.2 CPython/3.14.3 Windows/11

File hashes

Hashes for x64dbg_automate-0.7.6.tar.gz
Algorithm Hash digest
SHA256 f64ebd82c0499e5758a1e3237e02f8f16a43826b089d0ce6c29b58d88488a2c2
MD5 ae8dc912e353002680bc337d997d359b
BLAKE2b-256 b410820ea58975edbdf2530194b1311f89a30fa782185e624e1fe99453f5a2a0

See more details on using hashes here.

File details

Details for the file x64dbg_automate-0.7.6-py3-none-any.whl.

File metadata

  • Download URL: x64dbg_automate-0.7.6-py3-none-any.whl
  • Upload date:
  • Size: 29.8 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: poetry/2.3.2 CPython/3.14.3 Windows/11

File hashes

Hashes for x64dbg_automate-0.7.6-py3-none-any.whl
Algorithm Hash digest
SHA256 eff3eff4fa485c1523d142fc7d1bfcd393117c8f2aab438e4b983ba1dca45018
MD5 100d4d1ae1afa8862bafc7357a6aed75
BLAKE2b-256 fc2d6514ac376cfe266c5d01c9d32d194e6a1715471067ae5a947667992d5df9

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page