x64dbg_mcp

概述

x64dbg_mcp服务器通过集成x64dbg调试器提供全面的AI辅助调试功能。它由在x64dbg内部运行的C++插件（作为REST API服务器）和通过stdio实现协议的TypeScript MCP服务器组成。这种架构允许Claude、Cursor和Windsurf等AI助手控制调试操作、分析代码和执行逆向工程任务，通过151个端点组织成23个大型工具，涵盖调试器控制、CPU/内存操作、代码分析、断点、跟踪、符号、进程检查和转储功能。

试试问 AI

装完之后，这里有 5 个你可以让 AI 做的事：

• x64dbg_debug

  Control execution flow and query debugger state

  试试:Run the program试试:Pause execution试试:Step into the next instruction
• x64dbg_command

  Execute raw x64dbg commands, batch scripts, and expression evaluation

  试试:Evaluate expression试试:Execute debugger command试试:Run initialization script
• x64dbg_registers

  Read/write CPU registers including GPR, flags, and AVX-512

  试试:Show all registers试试:Set the value of RAX试试:Get current flags status
• x64dbg_memory

  Full memory operations: read, write, allocate, protect, and memory map

  试试:Read 128 bytes at address试试:Write NOPs to memory试试:Allocate a new memory page
• x64dbg_disassembly

  Disassemble instructions, whole functions, or assemble new code

  试试:Disassemble current function试试:Show instructions at address试试:Assemble new instructions
• x64dbg_analysis

  Cross-references, function boundaries, basic blocks, source mapping

  试试:Show cross-references to this function试试:Get function boundaries试试:Find basic blocks
• x64dbg_breakpoints

  Full breakpoint management: software, hardware, memory, conditional, logging

  试试:Set breakpoint on CreateFileW试试:Configure logging breakpoint试试:List all breakpoints
• x64dbg_symbols

  Symbol resolution, labels, comments, bookmarks

  试试:Resolve symbol address试试:Set label for address试试:Get comment at address
• x64dbg_search

  AOB/byte pattern scan, string search, symbol autocomplete

  试试:Search for byte pattern试试:Find string in memory试试:Search for symbols
• x64dbg_process

  Process info, PID, PEB, elevation status, debugger version

  试试:Get process information试试:Show PEB data试试:Check if process is elevated
• x64dbg_threads

  Thread enumeration, TEB access, thread control

  试试:List all threads试试:Switch to thread ID试试:Get thread information
• x64dbg_dumping

  PE analysis, module dumping, IAT reconstruction, patch file export

  试试:Dump main module to disk试试:Get PE header information试试:Export patch file

可对比工具

安装

x64dbg/
  x64/plugins/x64dbg_mcp.dp64    <-- 用于64位调试
  x32/plugins/x64dbg_mcp.dp32    <-- 用于32位调试

{
  "mcpServers": {
    "x64dbg": {
      "command": "npx",
      "args": ["-y", "x64dbg-mcp-server"]
    }
  }
}

FAQ

哪些AI客户端兼容x64dbg_mcp？

该服务器支持Claude Code、Claude Desktop、Cursor、Windsurf、Cline以及任何支持stdio传输的MCP兼容客户端。

MCP服务器和插件之间的通信是如何工作的？

TypeScript MCP服务器通过本地HTTP (127.0.0.1:27042) 与C++插件通信。插件暴露151个REST端点，MCP服务器通过stdio传输将请求路由到这些端点。

x64dbg_mcp 对比