Skip to main content

A Python library to automate x64dbg

Project description

x64dbg Automate: Reference Python Client

This is the reference client of x64dbg Automate. The library builds on x64dbg's command execution engine and plugin API to provide an expressive, modern, and easy to use Python client. x64dbg Automate is useful in a wide variety of malware analysis, reverse engineering, and vulnerability hunting tasks.

The client implements the full RPC protocol provided by x64dbg-automate.

Documentation

Full project documentation is published on: https://dariushoule.github.io/x64dbg-automate-pyclient/

See: Installation and Quickstart

🔔 All examples and sample code assume x64dbg is configured to stop on entry and system breakpoints, skipping TLS breakpoints.

MCP Server (Claude Code Integration)

The MCP server exposes x64dbg automation as Model Context Protocol tools for LLM clients like Claude Code.

Installation

pip install x64dbg_automate[mcp] --upgrade

Configuration

Add to your .mcp.json (project or user level):

{
  "mcpServers": {
    "x64dbg": {
      "command": "x64dbg-automate-mcp",
      "env": {
        "X64DBG_PATH": "C:\\path\\to\\x96dbg.exe"
      }
    }
  }
}

Setting X64DBG_PATH lets the MCP tools resolve x64dbg automatically — no need to pass the path on every start_session or connect_to_session call.

For local development, install from source with poetry and point .mcp.json at the entry point:

cd C:\path\to\x64dbg-automate-pyclient
poetry install --extras mcp
{
  "mcpServers": {
    "x64dbg": {
      "command": "poetry",
      "args": [
        "-C", "C:\\path\\to\\x64dbg-automate-pyclient",
        "run", "x64dbg-automate-mcp"
      ],
      "env": {
        "X64DBG_PATH": "C:\\path\\to\\x96dbg.exe"
      }
    }
  }
}

See the MCP Server documentation for the full tool reference and usage walkthrough.

Development and Testing

The client's environment is managed with poetry.

Update tests/conftest.py or provide the requisite environment to allow tests to pass.

poetry install --extras mcp --with dev
poetry env activate
python -m pytest # Test
python .\examples\assemble_and_disassemble.py C:\<you>\x64dbg\release\x64\x64dbg.exe # Run an example

Documentation is built using mkdocs

python -m mkdocs serve # dev
python -m mkdocs build # publish

Contributing

Issues, feature-requests, and pull-requests are welcome on this project ❤️🐛

My commitment to the community will be to be a responsive maintainer. Discuss with me before implementing major breaking changes or feature additions.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

x64dbg_automate-0.8.0.tar.gz (27.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

x64dbg_automate-0.8.0-py3-none-any.whl (29.9 kB view details)

Uploaded Python 3

File details

Details for the file x64dbg_automate-0.8.0.tar.gz.

File metadata

  • Download URL: x64dbg_automate-0.8.0.tar.gz
  • Upload date:
  • Size: 27.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: poetry/2.3.2 CPython/3.14.3 Windows/11

File hashes

Hashes for x64dbg_automate-0.8.0.tar.gz
Algorithm Hash digest
SHA256 bc84c18da6e77454e50ea2edec188b7cfb62da53340b4e362d644eb3edb1f9f5
MD5 12737a095cd105d6f8ce24a118ffcb87
BLAKE2b-256 d84c915b7e9dccfb63250a65aa034537594bae688c8e54f3f750b291d386472f

See more details on using hashes here.

File details

Details for the file x64dbg_automate-0.8.0-py3-none-any.whl.

File metadata

  • Download URL: x64dbg_automate-0.8.0-py3-none-any.whl
  • Upload date:
  • Size: 29.9 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: poetry/2.3.2 CPython/3.14.3 Windows/11

File hashes

Hashes for x64dbg_automate-0.8.0-py3-none-any.whl
Algorithm Hash digest
SHA256 5667f1450360a42982eee9efebe412588c076e85bb9ec835d707145d8ab605df
MD5 e3c8703cf7a85817ba1c550bdf7677cc
BLAKE2b-256 f9fabd217e24920856277c7456aa928e200c4d697be4c89272955cfbc138e7b1

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page