首页
社区
课程
招聘
[转帖]OllyDumpEx 1.00 by Low Priority
发表于: 2013-3-24 17:35 6422

[转帖]OllyDumpEx 1.00 by Low Priority

2013-3-24 17:35
6422
OllyDumpEx 1.00 by Low Priority
This plugin is process memory dumper for OllyDbg and Immunity Debugger. Very simple overview:

OllyDumpEx = OllyDump + PE Dumper - obsoleted + useful features

Features:

OllyDbg version 2 plugin interface supported
Select to dump debugee exe, loaded dll or unlisted module
Search MZ/PE Signature from memory
Dump any address space as section even if not in original section header
Add dummy section to keep PE format consistency
Fix RVA in DataDirectory to follow ImageBase change
Auto calculate many parameters (RawSize, RawOffset, VirtualOffset, ...)

http://low-priority.appspot.com/ollydumpex/


[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)

上传的附件:
收藏
免费 1
支持
分享
最新回复 (9)
雪    币: 370
活跃值: (15)
能力值: ( LV9,RANK:170 )
在线值:
发帖
回帖
粉丝
2
thx 林版
2013-3-24 22:17
0
雪    币: 3277
活跃值: (1992)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
3
- v1.10 / 2013-03-24

    Add: Search type All Memory
    Add: Binary dump mode (no rebuild PE header, for before load image)
    Add: PE32+ support (Binary dump mode only)
    Add: Memory Address/Size parameters editable (dump source address)
    Improve: Add info message for Relocation Flag and EXE/DLL type
    Improve: Large PE Header handling (larger than 0x1000)
    Improve: Check SectionAlignment and FileAlignment consistency
    Improve: Reduce search memory usage (not depend on target memory size)
    Improve: Detect PE Header across different type pages (parse and search)
    Bugfix: Improper owner window handle
    Bugfix: Section not listed when belong memory range not exists
    Bugfix: Almost features broken when memory window sort order changed

http://low-priority.appspot.com/ollydumpex/OllyDumpEx.zip
2013-3-25 17:40
0
雪    币: 97697
活跃值: (200824)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
4
信息是好,知道需要代理.
2013-3-25 21:29
0
雪    币: 97697
活跃值: (200824)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
5
我这里没下载下来,谁帮助一下下载上传.
2013-3-25 21:39
0
雪    币: 411
活跃值: (25)
能力值: ( LV3,RANK:20 )
在线值:
发帖
回帖
粉丝
6
本地备档方便大家
V1.10
OllyDumpEx.zip
上传的附件:
2013-3-25 21:56
0
雪    币: 97697
活跃值: (200824)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
7
[QUOTE=Elijah;1157974]本地备档方便大家
V1.10
OllyDumpEx.zip[/QUOTE]
Thanks.
2013-3-25 22:29
0
雪    币: 3277
活跃值: (1992)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
8
2.01的那个插件 是针对 2.01g 的,不是 2.01h,可能作者不知道 OD2 升级到 h 了。
2013-3-26 08:47
0
雪    币: 682
活跃值: (826)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
9
有没有汉化版的
2013-3-26 09:42
0
雪    币: 411
活跃值: (25)
能力值: ( LV3,RANK:20 )
在线值:
发帖
回帖
粉丝
10
latest version : V1.12
作者说支持OD 2.01h了。

OllyDumpEx.zip

Supported Debugger
OllyDbg version 1.10 (tested 1.10)
OllyDbg version 2.01 (tested 2.01h)
Immunity Debugger version 1.7x or lower (tested 1.73)
Immunity Debugger version 1.8x or higher (tested 1.85)


- v1.12 / 2013-04-02
Improve: Update to OllyDbg 2 latest version PDK (2.01h)
Improve: Tested with latest version of debuggers
Bugfix: Search greater than 0x7FFFFFFF memory address failed
上传的附件:
2013-4-7 21:07
0
游客
登录 | 注册 方可回帖
返回
//