-
-
[转帖]OllyDumpEx 1.10 (1) by Low Priority
-
2013-3-26 23:35
-
This plugin is process memory dumper for OllyDbg and Immunity Debugger. Very simple overview:
OllyDumpEx = OllyDump + PE Dumper - obsoleted + useful features
Features:
OllyDbg version 2 plugin interface supported
Select to dump debugee exe, loaded dll or non-listed module
Search MZ/PE Signature from memory
Multiple Dump mode. Rebuild for typical PE dump, Binary for PE Carving
PE32+ supported (Search and Binary Dump mode only)
Dump any address space as section even if not in original section header
Add dummy section to keep PE format consistency
Fix RVA in DataDirectory to follow ImageBase change
Auto calculate many parameters (RawSize, RawOffset, VirtualOffset, ...)
[CTF入门培训]顶尖高校博士及硕士团队亲授《30小时教你玩转CTF》，视频+靶场+题目！助力进入CTF世界
|
|
|---|---|
