Skip to main content
IMMUNITYSEC

x64dbg

Free x64 and x32 debugger for Windows binaries, featuring assembly viewing, memory editing, and plugin extensibility.

What Is x64dbg?

x64dbg is a free debugger for 32-bit and 64-bit Windows EXE and DLL files. It provides an interface with disassembly views, memory maps, call stacks, and expression evaluation. Its license is a modified GPL-3.0 with an added plugin exception clause that allows closed-source plugins, which makes it non-OSI-approved.

Use Cases

Dynamic malware analysis, Windows binary debugging, and reverse engineering of executables without source code.

Strengths and Limitations

Strengths

  • +Debugs both x64 and x32 applications from a single interface.
  • +Interface includes an IDA-like sidebar, graph view, memory map, and integrated Scylla import reconstructor.
  • +Plugin system with a C++ API and a community plugin list.

Limitations

  • -Runs only on Windows and debugs EXE and DLL files.
  • -Debug symbol (PDB) support is basic.

Defensive Use

Tracing execution and analyzing malware behavior in isolated analysis environments.

x64dbg Alternatives

ToolPricing
Cutter

Free reverse engineering platform powered by Rizin, providing a modern Qt interface for binary decompilation and graph views.

Open Source
GDB

GNU Project source-level debugger for inspecting process memory, breakpoints, and program execution in C, C++, Rust, and Go.

Open Source
Ghidra

Software reverse engineering suite developed by the NSA, offering disassembly, decompilation, and scriptable binary analysis.

Open Source

Frequently Asked Questions

What is x64dbg?→

x64dbg is a free debugger for 32-bit and 64-bit Windows EXE and DLL files. It provides an interface with disassembly views, memory maps, call stacks, and expression evaluation. Its license is a modified GPL-3.0 with an added plugin exception clause that allows closed-source plugins, which makes it non-OSI-approved.

What is x64dbg used for?→

Dynamic malware analysis, Windows binary debugging, and reverse engineering of executables without source code.

What are the strengths of x64dbg?→
  • +Debugs both x64 and x32 applications from a single interface.
  • +Interface includes an IDA-like sidebar, graph view, memory map, and integrated Scylla import reconstructor.
  • +Plugin system with a C++ API and a community plugin list.
What are the limitations of x64dbg?→
  • +Runs only on Windows and debugs EXE and DLL files.
  • +Debug symbol (PDB) support is basic.
How is x64dbg used defensively?→

Tracing execution and analyzing malware behavior in isolated analysis environments.