-
-
[转帖]OllyDumpEx 1.10 (1) by Low Priority
-
发表于: 2013-3-26 23:35
-
This plugin is process memory dumper for OllyDbg and Immunity Debugger. Very simple overview:
OllyDumpEx = OllyDump + PE Dumper - obsoleted + useful features
Features:
OllyDbg version 2 plugin interface supported
Select to dump debugee exe, loaded dll or non-listed module
Search MZ/PE Signature from memory
Multiple Dump mode. Rebuild for typical PE dump, Binary for PE Carving
PE32+ supported (Search and Binary Dump mode only)
Dump any address space as section even if not in original section header
Add dummy section to keep PE format consistency
Fix RVA in DataDirectory to follow ImageBase change
Auto calculate many parameters (RawSize, RawOffset, VirtualOffset, ...)
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
|
|
|---|---|
