https://github.com/phrozenio/psylodbg

User-friendly Microsoft Windows Debugger for Malware Analysts.
https://github.com/phrozenio/psylodbg

dbg debugger delphi pascal winapi windows

Last synced: about 1 month ago
JSON representation

User-friendly Microsoft Windows Debugger for Malware Analysts.

• Host: GitHub
• URL: https://github.com/phrozenio/psylodbg
• Owner: PhrozenIO
• License: apache-2.0
• Created: 2022-10-13T15:35:15.000Z (about 2 years ago)
• Default Branch: main
• Last Pushed: 2022-11-15T14:15:40.000Z (about 2 years ago)
• Last Synced: 2024-05-02T02:55:18.102Z (8 months ago)
• Topics: dbg, debugger, delphi, pascal, winapi, windows
• Language: Pascal
• Homepage:
• Size: 8.49 MB
• Stars: 187
• Watchers: 14
• Forks: 27
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE

Awesome Lists containing this project

README

        






# PsyloDbg

PsyloDbg is a fast-growing and user-friendly open-source Windows Debugger entirely coded in Delphi.

The main goal of this project is to offer to Malware analysts another tool to short their response time during their analysis process.

The project is still in very early stage, it is expected to grow in feature progressively.

# Images

## Debug Events







## Memory Map







## Loaded Modules







## Debugged Process Tree







## Dump and Reconstruct PE Image (Beta)







## Debugger Features

- [x] = Implemented

- [ ] = Not yet implemented

---

### Loaded Modules

- [ ] List.

- [x] Dump Reconstructed Module Image.

- [ ] List Exported Functions.

### ANSI / WIDE String

- [ ] List file / memory strings.

- [ ] Advanced search features.

### Memory Map

- [x] List.

- [x] Identify PE Images and Sections.

- [ ] Identify Thread Stacks.

- [ ] Identify Heaps.

- [x] Dump Region(s) / Page(s) Memory.

### Extra Tools

- [ ] File Merger.

- [ ] Hash Utils.

### Misc

- [x] Catch Debug Events.

- [x] Attach running process to debugger.

- [ ] Enumerate Threads.

- [x] Dump and reconstruct image(s) from process.

- [ ] List open handles.

- [ ] API Tracing.

- [ ] Import Module and Functions.

- [ ] Internationalization.

- [x] PsyloDbg Logging (Ex: Psylo Exception).

## Changelog

### 2022/10/13 : v0.1 - Initial Release

- First Release, Supporting Debug Events.

### 2022/10/21 : v0.2

- Memory Map List Added.

- Memory Dymp.

- Better Exception Handling.

- Logging.

- Themes Supported.

### 2022/11/15 : v0.3

- Option to keep session information when debug process stop.

- PsyloDbg Window Title is now dynamic.

- Better thread system (with thread manager) - previous feature needs to implement new thread system.

- Enumerate loaded modules.

- Certain features now support child process (Ex: loaded modules, memory map etc..)

- Memory Map now support child process.

- Dump and reconstruct module image (Reconstruct PE - Beta)