PsyloDbg

PsyloDbg is a fast-growing and user-friendly open-source Windows Debugger entirely coded in Delphi.

The main goal of this project is to offer to Malware analysts another tool to short their response time during their analysis process.

The project is still in very early stage, it is expected to grow in feature progressively.

Images

Debug Events

Memory Map

Loaded Modules

Debugged Process Tree

Dump and Reconstruct PE Image (Beta)

Debugger Features

• = Implemented
• = Not yet implemented

---

Loaded Modules

• List.
• Dump Reconstructed Module Image.
• List Exported Functions.

ANSI / WIDE String

• List file / memory strings.
• Advanced search features.

Memory Map

• List.
• Identify PE Images and Sections.
• Identify Thread Stacks.
• Identify Heaps.
• Dump Region(s) / Page(s) Memory.

Extra Tools

• File Merger.
• Hash Utils.

Misc

• Catch Debug Events.
• Attach running process to debugger.
• Enumerate Threads.
• Dump and reconstruct image(s) from process.
• List open handles.
• API Tracing.
• Import Module and Functions.
• Internationalization.
• PsyloDbg Logging (Ex: Psylo Exception).

Changelog

2022/10/13 : v0.1 - Initial Release

• First Release, Supporting Debug Events.

2022/10/21 : v0.2

• Memory Map List Added.
• Memory Dymp.
• Better Exception Handling.
• Logging.
• Themes Supported.

2022/11/15 : v0.3

• Option to keep session information when debug process stop.
• PsyloDbg Window Title is now dynamic.
• Better thread system (with thread manager) - previous feature needs to implement new thread system.
• Enumerate loaded modules.
• Certain features now support child process (Ex: loaded modules, memory map etc..)
• Memory Map now support child process.
• Dump and reconstruct module image (Reconstruct PE - Beta)