x64dbg/ScyllaHide

Stars
3,404
Rank 13,138 (Top 0.3 %)
Language
C++
License
GNU General Publi...
Created almost 9 years ago
Updated 6 months ago

x64dbg/ScyllaHide

x64dbg

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

ScyllaHide

ScyllaHide is an advanced open-source x64/x86 user mode Anti-Anti-Debug library. It hooks various functions to hide debugging. This tool is intended to stay in user mode (ring 3). If you need kernel mode (ring 0) Anti-Anti-Debug, please see TitanHide. Forked from NtQuery/ScyllaHide.

ScyllaHide supports various debuggers through plugins:

OllyDbg v1 and v2
x64dbg
Hex-Rays IDA v6 (not supported)
TitanEngine v2 (original and updated versions)

PE x64 debugging is fully supported with plugins for x64dbg and IDA.

Please note that ScyllaHide is not limited to these debuggers. You can use the standalone command line version of ScyllaHide. You can inject ScyllaHide into any process debugged by any debugger.

More information is available in the documentation (PDF).

License

ScyllaHide is licensed under the GNU General Public License v3.

Special thanks to

What for his POISON Assembler source code
waliedassar for his blog posts
Peter Ferrie for his PDFs
MaRKuS-DJM for Olly Advanced
Lim Bio Liong for MS Spy++ style Window Finder

x64dbg

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

GleeBug

Debugging Framework for Windows.

docs

Documentation repository.

Scripts

A collection of x64dbg scripts. Feel free to submit a pull request to add your script.

x64dbgida

Official x64dbg plugin for IDA Pro.

TitanEngine

TitanEngine Community Edition. Debug engine used by x64dbg.

DotX64Dbg

x64Dbg plugin that enables C# plugins with hot-loading support and scripting.

XEDParse

XEDParse: A MASM-like, single-line plaintext assembler

OllyDbg

Implementation of OllyDbg 1.10 plugin SDK for x64dbg.

Rich Text Format

PluginTemplate

Plugin template for x64dbg.

yarasigs

Various Yara signatures (possibly to be included in a release later).

SlothBP

Collaborative Breakpoint Manager for x64dbg.

x64dbgbinja

Official x64dbg plugin for Binary Ninja

InterObfu

Intermediate x86 instruction representation for use in obfuscation/deobfuscation.

x64dbgpylib

Port of windbglib to x64dbgpy, in an effort to support mona.py in x64dbg.

PluginManager

Plugin manager plugin for x64dbg.

btparser

Lexer/Parser for 010 Editor's Binary Templates

strmatch

Simple string matching plugin for x64dbg. Supports UTF8, UTF16 and Local codepages.

LabelPEB

Plugin to label PEB addresses.

QtPlugin

Plugin demonstrating how to link with Qt.

StaticAnalysis

Static analysis plugin for x64dbg (now deprecated).

AutoExportPatches

Plugin that automatically stores patches in the database and restores them on restart.

Classroom

Plugin of x64dbg to help you analyze object-oriented applications

testplugin

Example plugin for x64dbg.

PluginDevHelper

Simple utility that allows you to automatically unload/reload an x64dbg plugin while developing with Visual Studio.

asmjit_xedparse

XEDParse emulator based on asmjit/asmtk.

ODbgScript

LLVMDemangle

Standalone DLL that implements LLVM's demangling functionality.

sdk

Offical x64dbg SDK repository.

deps

PyQt5

Compile scripts for PyQt5 (Qt 5.6.0), Python 2.7.11 and MSVC 2013.

capstone_wrapper

C++ wrapper for capstone (x86 only)

QtDraggingPane

Visual Studio-like draggable windows in Qt

x64dbgpy3

WIP python3 plugin for x64dbg

blog

Blog for x64dbg.

x64dbg_headless

Proof of concept headless GUI DLL

x64dbg.github.io

DbGit

Simple plugin to automatically add x64dbg databases to version control.

ldconvert

Library to convert 80-bit long double to and from strings.

QtGraph

Some graphing stuff with OGDF

QtSettings

Automated settings dialog.

x64dbg_saxparser

Proof of concept JSON parsing strategy for x64dbg that will drastically improve performance and memory usage.

wiki

Repository for the community wiki.

Fuck1481

Fixes x64dbg/x64dbg#1481

system

Plugin to execute system commands.

gitee-test

Repo to test syncing with gitee

QtStructView

Structure viewing & mapping window built in Qt

QtEntropyGraph

Entropy Graph in Qt

Translations

Auto-generated Qt English translation file.

ogdf

Compiled version of the OGDF library.

FrozenStorm

FrozenStorm is a project to make cryptography, hashing, checksumming, compression and transformation algorithms available over a unified interface.

SnowmanDummy

Dummy DLL for snowman.

TypeRepresentation

Representation of types.

x64dbg_forwarder

Export forwarder for compatibility with old plugins.

workflows

Repository for workflows to perform various maintenance tasks across the x64dbg organization.

BinaryNinjaDisassembly

C++ port of Binary Ninja

GetCharABCWidthsI_cache

Plugin to improve performance of QWindowsFontEngine::getGlyphBearings.

x64_dbg_old

https://bitbucket.org/mrexodia/x64_dbg_old