-
-
[转帖]OllyDumpEx 1.10 (1) by Low Priority
-
发表于: 2013-3-26 23:35
-
This plugin is process memory dumper for OllyDbg and Immunity Debugger. Very simple overview:
OllyDumpEx = OllyDump + PE Dumper - obsoleted + useful features
Features:
OllyDbg version 2 plugin interface supported
Select to dump debugee exe, loaded dll or non-listed module
Search MZ/PE Signature from memory
Multiple Dump mode. Rebuild for typical PE dump, Binary for PE Carving
PE32+ supported (Search and Binary Dump mode only)
Dump any address space as section even if not in original section header
Add dummy section to keep PE format consistency
Fix RVA in DataDirectory to follow ImageBase change
Auto calculate many parameters (RawSize, RawOffset, VirtualOffset, ...)
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！
|
|
|---|---|
