Skip to content

Commit e52495d

Browse files
committed
readme/plugin.json update
1 parent 5e2bd81 commit e52495d

2 files changed

Lines changed: 30 additions & 13 deletions

File tree

README.md

Lines changed: 27 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
# ScyllaNinja
22
Author: **Script-Ware Software**
33

4-
_Automated ScyllaHide injection and setup for Binary Ninja's debugger_
4+
_Automated ScyllaHide injection and setup/configuration for Binary Ninja's debugger_
55

66
## Description
77

@@ -23,31 +23,46 @@ ScyllaHide handles PEB manipulation, NT API hooking, and timing protection to hi
2323
- `HookLibraryx64.dll`
2424
- `HookLibraryx86.dll`
2525

26-
4. Configure in `Edit > Preferences > Settings > Debugger > ScyllaHide`:
26+
4. Configure in `Edit > Settings > Debugger > scyllahide`:
2727
- Set "ScyllaHide Directory" to the path containing extracted files
28-
- Select a profile (default: Basic)
28+
- Enable "Enable Automatic ScyllaHide Injection" (if you want)
29+
- Select a profile (default: Basic) or make a custom one
2930

30-
5. Open a x64/x86 binary of your choice
31+
5. Open a x64/x86 binary and start debugging
3132

32-
6. Set a breakpoint on the program's entry
33-
34-
7. ScyllaHide is automatically injected and set up.
33+
6. ScyllaHide is automatically injected when the debugger hits the initial breakpoint
3534

3635
## Usage
3736

38-
Once configured, ScyllaHide automatically injects when you start debugging any Windows executable. Console output will indicate injection status.
37+
### Automatic Injection
38+
39+
If configured (see Settings), ScyllaHide automatically injects when you start debugging any Windows executable. The status bar shows real-time progress during injection, and console output logs detailed status.
40+
41+
### Manual Injection
42+
43+
You can manually inject ScyllaHide at any time during a debug session via:
44+
- **Plugins > ScyllaNinja > Inject ScyllaHide**
45+
46+
This is useful for:
47+
- Retrying if automatic injection failed
48+
- Injecting after the initial breakpoint
49+
- Re-injecting after modifying settings
50+
51+
The plugin prevents accidental double-injection by tracking injection state and prompting for confirmation.
3952

4053
## Settings
4154

42-
Found in Binary Ninja Settings under `Debugger > ScyllaHide`:
55+
Found in Binary Ninja Settings under `Debugger > scyllahide`:
4356

4457
| Setting | Default | Description |
4558
|---------|---------|-------------|
46-
| Enable ScyllaHide | true | Automatically inject when debugger hits initial breakpoint |
59+
| Enable Automatic ScyllaHide Injection | false | Automatically inject when debugger hits initial breakpoint |
4760
| Profile | Basic | Pre-configured hook profile (preset profiles use built-in configs) |
4861
| ScyllaHide Directory | plugin folder | Directory containing InjectorCLI and HookLibrary DLLs |
4962
| Individual Hooks | varies | PEB, NT API, and timing hooks (only apply when Profile = Custom) |
5063

64+
**Note:** Remember that the individual hook settings are only used when Profile is set to "Custom". For preset profiles like "Basic" or "VMProtect x86/x64", ScyllaHide uses its already built-in configurations.
65+
5166
## Minimum Version
5267

5368
This plugin (was only tested on but likely) requires the following minimum version of Binary Ninja:
@@ -60,6 +75,8 @@ The following dependencies are required for this plugin:
6075

6176
* ScyllaHide binaries (InjectorCLI + HookLibrary DLLs) from https://github.com/x64dbg/ScyllaHide/releases
6277

78+
The plugin will alert you if these files don't exist and are not set up in the settings.
79+
6380
## License
6481

6582
This plugin is released under an MIT license.

plugin.json

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -3,15 +3,15 @@
33
"name": "ScyllaNinja",
44
"type": ["helper", "ui"],
55
"api": ["python3"],
6-
"description": "Automatically inject ScyllaHide anti-anti-debug DLL when debugging Windows executables",
7-
"longdescription": "Binary Ninja integration for [ScyllaHide](https://github.com/x64dbg/ScyllaHide) by x64dbg. Automatically injects the ScyllaHide DLL when the debugger hits the initial breakpoint, helping bypass common anti-debugging techniques.\n\n**Setup:**\n1. Download ScyllaHide binaries from https://github.com/x64dbg/ScyllaHide/releases/tag/v1.4\n2. Extract InjectorCLI (x86/x64) and HookLibrary DLLs (x86/x64)\n3. Configure directory in Settings > Debugger > ScyllaHide\n4. Select a profile and start debugging\n\nScyllaHide handles PEB manipulation, NT API hooking, and timing protection to hide the debugger from anti-debug checks.",
6+
"description": "Automated ScyllaHide injection and setup/configuration for Binary Ninja's debugger",
7+
"longdescription": "Binary Ninja integration for [ScyllaHide](https://github.com/x64dbg/ScyllaHide) by x64dbg. Automatically injects the ScyllaHide DLL when the debugger hits the initial breakpoint, helping bypass anti-debugging techniques commonly found in packed or protected executables.\n\n**Features:**\n- Automatic injection on debug start with status bar progress feedback\n- Manual injection via Plugins > ScyllaNinja > Inject ScyllaHide\n- Intelligent process detection with fuzzy matching\n- Multi-binary support with independent injection state\n- Double-injection prevention\n\n**Setup:**\n1. Download ScyllaHide binaries from https://github.com/x64dbg/ScyllaHide/releases/tag/v1.4\n2. Extract InjectorCLIx64.exe, InjectorCLIx86.exe, HookLibraryx64.dll, HookLibraryx86.dll\n3. Configure in Settings > Debugger > scyllahide\n4. Enable automatic injection and select a profile\n5. Start debugging - ScyllaHide injects automatically\n\nScyllaHide handles PEB manipulation, NT API hooking, and timing protection to hide the debugger from anti-debug checks.",
88
"license": {
99
"name": "MIT",
1010
"text": "Copyright (c) 2025 Script-Ware Software\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the \"Software\"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE."
1111
},
1212
"platforms": ["Windows"],
1313
"installinstructions": {
14-
"Windows": "1. Install plugin via Binary Ninja Plugin Manager or copy to plugins directory\n2. Download ScyllaHide from https://github.com/x64dbg/ScyllaHide/releases/tag/v1.4\n3. Extract InjectorCLIx64.exe, InjectorCLIx86.exe, HookLibraryx64.dll, HookLibraryx86.dll\n4. Set ScyllaHide directory in Settings > Debugger > ScyllaHide\n5. Restart Binary Ninja"
14+
"Windows": "1. Install plugin via Binary Ninja Plugin Manager or copy to %APPDATA%\\Binary Ninja\\plugins\n2. Download ScyllaHide from https://github.com/x64dbg/ScyllaHide/releases/tag/v1.4\n3. Extract InjectorCLIx64.exe, InjectorCLIx86.exe, HookLibraryx64.dll, HookLibraryx86.dll to a directory\n4. Configure in Settings > Debugger > scyllahide:\n - Set ScyllaHide Directory\n - Enable automatic injection (optional)\n - Select profile (default: Basic)\n5. Open a binary and start debugging"
1515
},
1616
"dependencies": {},
1717
"version": "1.0.0",

0 commit comments

Comments
 (0)