💾

DevOpsPython

State Snapshot

State Snapshot is a DevOps skill for Claude Code, published by dariushoule in x64dbg-skills.

203 stars16 forkson dariushoule/x64dbg-skillsAdded 2026/09/05Repository updated 2026/03/13

View source on GitHub Download repo ZIP

claude-codemcpskillsx64dbg

Install in seconds

Install State Snapshot

Copy State Snapshot into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/dariushoule/x64dbg-skills/tree/main/skills/state-snapshot ~/.claude/skills/state-snapshot

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/dariushoule/x64dbg-skills.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/state-snapshot/SKILL.md in dariushoule/x64dbg-skills
Installs to: ~/.claude/skills/state-snapshot
Collection: One of 8 skills cataloged from this repository
Category: DevOps — 973 skills

What State Snapshot does

State Snapshot captures all committed memory regions and the full processor state from a live debuggee for offline analysis. Use it when you need a disk snapshot of memory and registers from x64dbg.

State Snapshot is cataloged under DevOps on DirSkills. State Snapshot comes from a repository tagged claude-code, mcp, skills and x64dbg.

Documentation

README

Excerpt

state-snapshot

Capture a full debuggee state snapshot — all committed memory regions as raw binary files plus the complete processor state as JSON.

Instructions

Follow these steps exactly:

1. Verify debugger connection

Call mcp__x64dbg__get_debugger_status to confirm the debugger is connected and a debuggee is loaded. Note the session PID and x64dbg path from the current MCP connection — you will need these to reconnect later.

If no debuggee is loaded, tell the user and stop.

2. Pause the debuggee if running

If the debugger status shows the debuggee is running (not paused), call mcp__x64dbg__pause to pause it. Remember that you auto-paused so you can resume later.

3. Disconnect the MCP client

This is the opening of the README. Read the full README on GitHub.

Frequently asked about State Snapshot

What else does dariushoule publish alongside State Snapshot?
State Snapshot is one of 8 skills that DirSkills catalogs from dariushoule/x64dbg-skills, the repository it ships in. Its siblings there include Decompile, Find OEP and Shellcode Analyzer. Each one is a separate skill with its own page in this directory, installs the same way State Snapshot does, and is maintained by dariushoule in that same repository. The rest of the collection is listed on the dariushoule/x64dbg-skills page.
How does State Snapshot compare to other DevOps skills?
State Snapshot ranks #862 by stars among the 973 DevOps skills in this catalog. The most-starred ones next to it are Backend Patterns, API Connector Builder and Migration. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of State Snapshot against them. Open each page to compare what they document and how they install.

More from dariushoule/x64dbg-skills

State Snapshot is one of 8 skills cataloged on DirSkills from dariushoule/x64dbg-skills.

See all 8 skills →

Decompile

Decompile turns a function in a debugged binary into C-like pseudocode using angr. Use it to inspect code when you have an address, symbol, or the current instruction pointer.

Find OEP

Find OEP traces packed or protected PE executables to locate the original entry point and capture a debugger state snapshot. Use it when a binary needs unpacking, anti-debug evasion, or handoff for reconstruction and analysis.

Shellcode Analyzer

Shellcode Analyzer loads a raw shellcode blob into x64dbg for unpacking, static review, and dynamic tracing. Use it when analyzing encoded or encrypted shellcode and identifying imports, anti-debugging, or payload behavior.

State Diff

State Diff compares two debuggee snapshots and reports register and memory changes between them. Use it to see what executed, what memory was modified, and what the changes suggest.

Tracealyzer

Tracealyzer records x64dbg execution step-by-step into or over calls for a set count or stop condition, then analyzes the instruction log. Use it to inspect control flow, loops, and key instructions during debugging.

Vuln Hunter

Vuln Hunter analyzes a paused program in x64dbg, maps imports and exports, and triages attack surface by input source. It then probes for memory, integer, and logic bugs and helps build proof-of-concept exploits.

More DevOps skills

State Snapshot is one of 973 DevOps skills cataloged on DirSkills, ranked #862 by stars among them.

Browse all DevOps skills →

Backend Patterns

Backend Patterns covers backend architecture patterns, API design, database optimization, and server-side best practices for Node.js, Express, and Next.js API routes. Use when building or reviewing Node.js, Express, or Next.js API routes and their data access.

API Connector Builder

API Connector Builder builds a new API connector or provider by matching an existing integration pattern in the codebase exactly. Use it when adding a new integration to a project without introducing a second architecture.

Migration

Migration implements reversible compatibility-safe transitions for schema, data, API, protocol, configuration, or dependency changes. Use it when rollback and preservation proof are required.