v0.10.1

HyperDbg v0.10.1 is released!

If you’re enjoying HyperDbg, don’t forget to give a star 🌟 on GitHub!

Please visit Build & Install to configure the environment for running HyperDbg. Check out the Quick Start and Frequently Asked Questions (FAQs) to learn more. You can use the examples of using the debugger and the script engine to get started with HyperDbg.

Added

• Added feature to pause the debuggee immediately upon connection
• The '.debug' command now supports pausing the debuggee at startup (link)
• Export SDK API for assembling instructions
• The 'struct' command now supports a path as output (link)
• Export SDK API closing connection to the remote debuggee
• Automated tests for the main command parser
• Export SDK APIs for stepping and tracing instructions
• Export SDK APIs for tracking execution

Changed

• HyperDbg command-line comment sign is changed from '#' to C-like comments ('//' and '/**/')
• Integrating a new command parser for the regular HyperDbg commands
• Fix showing a list of active outputs using the 'output' command (link)
• Fix the issue of passing arguments to the '.start' command (link)
• Fix the problem with parsing multiple spaces within the events (#420) (link)
• Fix the problem with escaping '{' in the command parser (#421) (link)
• Fix nested brackets issues in the main command parser
• Fix script engine bugs on order of passing arguments to functions (#453) (link)
• Fix the script test case for factorial computation (link)
• Fix the script test case for computation iterative Fibonacci (link)
• Fix miscomputation of physical address width for physical address validity checks (#469) (link)

v0.10

HyperDbg v0.10 is released!

If you’re enjoying HyperDbg, don’t forget to give a star 🌟 on GitHub!

Please visit Build & Install to configure the environment for running HyperDbg. Check out the Quick Start and Frequently Asked Questions (FAQs) to learn more. You can use the examples of using the debugger and the script engine to get started with HyperDbg.

Added

• Support using assembly conditions and codes in all events (link)(link)
• Added support for forwarding events to binary (DLL) modules (link)(link)(link)
• Added the assembler command 'a' for virtual memory (link)
• Added the assembler command '!a' for physical memory (link)
• Providing a unified SDK API for reading memory in the VMI Mode and the Debugger Mode
• Export SDK APIs for reading/writing into registers in the Debugger Mode
• Export SDK API for writing memory in the VMI Mode and the Debugger Mode
• Export SDK API for getting kernel base address
• Export SDK API for connecting to the debugger and from debuggee in the Debugger Mode
• Export SDK API for starting a new process
• Add and export SDK API for unsetting message callback
• Event commands are coming with more examples regarding scripts and assembly codes
• Add message callback using shared memory
• Add maximum execution limitation to the script IRs (#435) (link)

Changed

• Fix clearing '!monitor' hooks on a different process or if the process is closed (#409) (link)
• Fix triggering multiple '!monitor' hooks with different contexts (#415) (link)
• Fix the problem of repeating commands once kHyperDbg is disconnected
• Fix step-over hangs if the process terminates/excepts within call instruction (#406) (link)
• Fix crash on editing invalid physical addresses (#424) (link)
• Fix exporting VMM module load and install it in the SDK
• Fix function interpretation issues and update the parser and the code execution (#435) (link)

v0.9.1

HyperDbg v0.9.1 is released!

If you’re enjoying HyperDbg, don’t forget to give a star 🌟 on GitHub!

Please visit Build & Install to configure the environment for running HyperDbg. Check out the Quick Start and Frequently Asked Questions (FAQs) to learn more. You can use the examples of using the debugger and the script engine to get started with HyperDbg.

Added

• Regular port/pin value read and modification in hwdbg
• Conditional statement evaluation in hwdbg
• Added automatic script buffer packet generator for hwdbg
• Added support for @hw_pinX and @hw_portX registers
• Added hwdbg instance information interpreter
• Added stack buffer in vmx-root (link)
• Exporting functions to support loading drivers with different names
• Exporting function to connect and load HyperDbg drivers
• Exporting function to connect and load HyperDbg drivers
• $date and $time pseudo-registers are added (link)(link)

Changed

• Fix using constant WSTRINGs in the wcsncmp function (link)
• Fix phnt build error with 24H2 SDK
• hprdbgctrl.dll changed to libhyperdbg.dll
• hprdbgkd.sys changed to hyperkd.sys
• hprdbghv.dll changed to hyperhv.dll
• Dividing user/kernel exported headers in the SDK

v0.9.0

HyperDbg v0.9.0 is released!

If you’re enjoying HyperDbg, don’t forget to give a star 🌟 on GitHub!

Please visit Build & Install to configure the environment for running HyperDbg. Check out the Quick Start and Frequently Asked Questions (FAQs) to learn more. You can use the examples of using the debugger and the script engine to get started with HyperDbg.

Added

• The !monitor command now physical address hooking (link)
• hwdbg is merged to HyperDbg codebase (link)
• strncmp(Str1, Str2, Num), and wcsncmp(WStr1, WStr2, Num) functions in script engine (link)(link)

Changed

• Using a separate HOST IDT in VMCS (not OS IDT) (fix to this VM escape issues)
• Using a dedicated HOST GDT and TSS Stack
• Checking for race-condition of not locked cores before applying instant-events and switching cores
• The error message for invalid address is changed (more information)
• Fix the problem of not locking all cores after running the '.pagein' command

v0.8.4

HyperDbg v0.8.4 is released!

If you’re enjoying HyperDbg, don’t forget to give a star 🌟 on GitHub!

Please visit Build & Install to configure the environment for running HyperDbg. Check out the Quick Start and Frequently Asked Questions (FAQs) to learn more. You can use the examples of using the debugger and the script engine to get started with HyperDbg.

Changed

• Fixed the signedness overflow of the command parser

v0.8.3

HyperDbg v0.8.3 is released!

If you’re enjoying HyperDbg, don’t forget to give a star 🌟 on GitHub!

Please visit Build & Install to configure the environment for running HyperDbg. Check out the Quick Start and Frequently Asked Questions (FAQs) to learn more. You can use the examples of using the debugger and the script engine to get started with HyperDbg.

Added

• Added hwdbg headers (link)
• Added support NUMA configuration with multiple count CPU sockets (link)
• Added citation to TRM paper (link)

Changed

• Change release flag of hyperdbg-cli to Multi-threaded Debug (/MTd)
• Fix bitwise extended type, fixed memleaks, remove excess else and cmp int with EOF (link)

v0.8.1

HyperDbg v0.8.1 is released!

If you’re enjoying HyperDbg, don’t forget to give a star 🌟 on GitHub!

Please visit Build & Install to configure the environment for running HyperDbg. Check out the Quick Start and Frequently Asked Questions (FAQs) to learn more. You can use the examples of using the debugger and the script engine to get started with HyperDbg.

Added

• The !monitor command now supports length in parameters (link)

Changed

• Fix the issue of not intercepting memory monitoring on non-contiguous physical memory allocations
• The speed of memory read/write/execution interception is enhanced by avoiding triggering out-of-range events

v0.8.0

HyperDbg v0.8 is released!

If you’re enjoying HyperDbg, don’t forget to give a star 🌟 on GitHub!

Please visit Build & Install to configure the environment for running HyperDbg. Check out the Quick Start and Frequently Asked Questions (FAQs) to learn more. You can use the examples of using the debugger and the script engine to get started with HyperDbg.

Added

• The !mode event command is added to detect kernel-to-user and user-to-kernel transitions (link)
• The 'preactivate' command is added to support initializing special functionalities in the Debugger Mode (link)

Changed

• Fix miscalculating MTRRs in 13th gen processors

v0.7.2

HyperDbg v0.7.2 is released!

If you’re enjoying HyperDbg, don’t forget to give a star 🌟 on GitHub!

Please visit Build & Install to configure the environment for running HyperDbg. Check out the Quick Start and Frequently Asked Questions (FAQs) to learn more. You can use the examples of using the debugger and the script engine to get started with HyperDbg.

Changed

• Fix INVEPT invalidation using out of scope descriptor (link)
• Fix MTRR initialization crash (link)

Thanks to @mattiwatti and @cutecatsandvirtualmachines.

v0.7.1

HyperDbg v0.7.1 is released!

If you’re enjoying HyperDbg, don’t forget to give a star 🌟 on GitHub!

Please visit Build & Install to configure the environment for running HyperDbg. Check out the Quick Start and Frequently Asked Questions (FAQs) to learn more. You can use the examples of using the debugger and the script engine to get started with HyperDbg.

Changed

• Fix the single core broadcasting events issue (link)
• Evaluate the '.pagein' ranges as expressions (link)
• Add hexadecimal escape sequence as string parameter for string functions (link)
• Add hexadecimal escape sequence as wstring parameter for wstring functions (link)
• Fix breakpoint and the '!epthook' problems in the same address (link)