With the great help of https://github.com/mrexodia/DotNetPluginCS by Adams85 and approx. ~20 hours of coding time I managed to create a starting point for a self-contained MCP Server for x64Dbg. I have some cleaning up of some of the code to do but is a perfect proof of concept of getting this thing to fly.
One of the larger hurdles that needed to be overcome was creating a self contained MCP server without the ASP.NET hosting core dependency.
I’ve validated a few commands so far and is currently working wonders. I’m very excited to get this into the hands of a capable LLM.
I will continue to work and make improvements on this project as I am currently using it as an opportunity to grow me experience with AI integration and implementation / security.
|
1 2 3 4 5 6 7 8 9 |
ExecuteDebuggerCommand command=init C:\PathTo\Binary.exe GetAllRegisters ReadMemAtAddress addressStr=0x000000014000153f, byteCount=5 ReadMemAtAddress addressStr=00007FFA1AC81000, byteCount=5 WriteMemToAddress addressStr=0x000000014000153f, byteString=90 90 90 90 90 90 CommentOrLabelAtAddress addressStr=0x000000014000153f, value=Test, mode=Comment #Removes the comment CommentOrLabelAtAddress addressStr=0x000000014000153f, value= GetLabel addressStr=0x000000014000153f |
There are a few commands I am actively working the kinks out on but it wont take me long to straighten out. I am release the source code to the public to assist them with streamlining their reverse engineering process and another useful tool to add into their collect for those whom don’t want to be directly dependent on Ghidra. *Cheers*
|
1 2 3 4 5 6 7 8 9 |
GetAllActiveThreads [GetAllActiveThreads] Found 4 active threads: TID: 121428560 | EntryPoint: 0x0 | TEB: 0x0 TID: 0 | EntryPoint: 0x0 | TEB: 0x0 TID: 0 | EntryPoint: 0x0 | TEB: 0x0 TID: 0 | EntryPoint: 0x0 | TEB: 0x0 GetCallStack GetAllModulesFromMemMap |
You can run the project and rebuild / modify from the source or copy the files (DotNetPluginCS\bin\x64\Debug) into the x64DBG plugin (x96\release\x64\plugins) folder to run
All of these files may not be necessary but it does not seem to impact x64DBG running at all. Once you run x64DBG, the plugin menu will appear and you may select “Start MCP Server”. From there you may connect to it with your MCP AI Client.
If any of you have any suggestions or would like help in creating your own integration feel free to drop me an email (information on contact page) as I am looking for additional opportunities to grow in this area.
Download the latest copy here: https://github.com/AgentSmithers/x64DbgMCPServer