Can I specify where the snapshots are saved?

Yes, by default it saves to a timestamped folder in a 'snapshots' directory, but you can provide a custom output directory during the command execution.

Why does the skill disconnect the MCP client during execution?

x64dbg's ZMQ interface typically supports one active connection at a time. The skill temporarily disconnects the MCP client so the specialized Python snapshot script can connect and extract the data safely.

What kind of data is included in the snapshot?

The snapshot includes every committed memory region saved as a separate .bin file and a JSON file containing the full state of processor registers.

Does this skill work with any debugger?

No, this skill is specifically designed for use with the x64dbg debugger and requires the corresponding x64dbg-skills MCP plugin to be installed.

x64dbg State Snapshot

Name: x64dbg State Snapshot
Author: dariushoule

bydariushoule

•

Security & Testing

Captures a comprehensive snapshot of process memory and processor state from x64dbg for detailed offline analysis.

The state-snapshot skill automates the complex task of freezing a debuggee session and extracting its entire execution context. By capturing all committed memory regions as raw binary files and the full processor state as JSON, it provides a persistent 'frozen' state of an application at a specific point in time. This is invaluable for reverse engineers and security researchers who need to perform forensic analysis, diff memory states, or investigate volatile data without keeping the debugger session active or risk losing the state during a crash.

Key Features

01Intelligent MCP connection management to allow external Python script execution

0257 GitHub stars

03Automated memory dumping of all committed regions to raw binary files

04Full processor state capture, including registers, saved as structured JSON

05Seamless integration with x64dbg via automated pause and reconnect sequences

06Timestamped output organization for easy versioning and comparison

Use Cases

01Preserving a precise debugging state for forensic documentation or team collaboration

02Capturing malware state at a specific execution point for static analysis of unpacked code

03Creating baseline memory snapshots to compare before and after specific application actions

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add dariushoule/x64dbg-skills state-snapshot

For use in Claude.ai and ChatGPT

Download Skill