Back to Home
SetsunaYukiOvO icon

x64dbg-mcp

by SetsunaYukiOvO

Overview

Provides a JSON-RPC 2.0 HTTP/SSE interface for external applications and AI agents to perform remote debugging and interact programmatically with x64dbg/x32dbg.

Installation

Run Command
No command provided

Security Notes

The plugin exposes an HTTP server with JSON-RPC over SSE, by default on localhost (127.0.0.1:3000). A critical security concern is that the default `config.json` generated by `pluginit` explicitly sets `allow_memory_write: true`, `allow_register_write: true`, `allow_script_execution: true`, and `allow_breakpoint_modification: true`. This grants broad control over the debugging process and the debugged application, including arbitrary command execution, memory manipulation, and register modification. If the server address is changed from `127.0.0.1` or if other local processes are malicious, this poses a significant risk. The `Access-Control-Allow-Origin: *` header in HTTP responses is also very permissive.

Similar Servers

Stats

Interest Score15
Security Score3
Cost ClassMedium
Avg Tokens2000
Stars5
Forks2
Last Update2025-12-16

Tags

remote debuggingJSON-RPCx64dbgpluginAI agent