Сейчас на форуме: _MBK_, ManHunter, Magister Yoda, rtsgreg1989 (+9 невидимых) |
![]() |
eXeL@B —› Основной форум —› Плагин для Олли |
Посл.ответ | Сообщение |
|
Создано: 11 июня 2005 20:53 · Личное сообщение · #1 Description: You may have noticed the ghosted 'Heap' option under the 'View' menu in OllyDBG. The feature is available only under Windows 95 based OSes and is supposed to display a list of allocated memory blocks. The Olly Heap Vis plug-in was written to provide this functionality and more on all modern Windows OSes such as Windows 2000, XP and 2003. The OllyDbg Heap Vis plug-in exposes the following functionality: View Heaps Search Heaps Jump to Heap Chunk Create Heap Visualization www.idefense.com/iia/releases/olly_heap_vis.zip ![]() |
|
Создано: 28 июня 2005 20:53 · Личное сообщение · #2 ApiBreak is a plugin for Ollydbg. To enable it, simply put the ApiBreak.dll file into your Ollydbg folder. The plugin should then appear on your Plugins menu. To use it, simply click ApiBreak on your Plugins menu and you will see the main dialog box. From here, you can go into any of the 6 categories: Registry Time Dialog Memory Strings Point H In each category is one or more API calls. The checkboxes will tell you if there is a breakpoint already set for that call (Checkbox will be Checked) You also have the option to Erase All breakpoints that have been set in that category and on the main dialog, you have the option to Erase All breakpoints that can be set by the plugin (even if they aren’t set already) The purpose of this plugin is to make debugging and / or reverse engineering a little faster and easier. ApiBreak - Copyright (C) 2005 Nonameo ![]() ![]() |
|
Создано: 29 июня 2005 10:02 · Личное сообщение · #3 |
|
Создано: 29 июня 2005 10:40 · Личное сообщение · #4 |
|
Создано: 29 июня 2005 12:07 · Личное сообщение · #5 |
|
Создано: 04 июля 2005 23:05 · Личное сообщение · #6 OllyDbg PE Dumper v3.03 = (c)FKMA This is new PE Dumper plugin for best user mode debugger OlluDbg. The PE Dumper is similar to OllyDump by Gigapede but fully rewritten and have some features: - you can dump any *.exe and *.dll from debugged process address space; - you can add/remove sections to/from resulting dump. If you are add new section, you specify VA and size of memory region to add as section, attributes, File Offset, RAW size and section name. So, now you can add to dump any memory regions created by protectors during debug session; - antidump antiprotection and most correct save dump technics: during dumping, against other dumpers, PE Dumper save only present memory pages (basing on VA & Virtual size). So, if between memory regions present non-allocated space, most other dumpers (and OllyDump too) will not save dump correctly, but PE Dumper will save all correctly. - fix raw sizes correct only RAW size of image according to Virtual Sizes; - paste header from disk - use header from disk, it's clear; 88 kb rapidshare.de/files/1454959/peDumper303.rar.html ----- Don_t hate the cracker - hate the code. ![]() |
|
Создано: 07 июля 2005 22:29 · Личное сообщение · #7 |
![]() |
eXeL@B —› Основной форум —› Плагин для Олли |