-
-
[转帖]OllyExt 1.1 by Ferrit
-
发表于: 2013-3-27 23:31
-
OllyExt 1.1 by Ferrit
The main intention of this plugin is to provide the biggest anti-anti debugging features and bugfixes for Olly 2.xx. Updates will come...
VMProtect support!
The currently supported protections are the following:
- IsDebuggerPresent
- NtGlobalFlag
- HeapFlag
- ForceFlag
- CheckRemoteDebuggerPresent
- OutputDebugString
- CloseHandle
- SeDebugPrivilege
- BlockInput
- ProcessDebugFlags
- ProcessDebugObjectHandle
- TerminateProcess
- NtSetInformationThread
- NtQueryObject
- FindWindow
- NtOpenProcess
- Process32First
- Process32Next
- ParentProcess
- GetTickCount
- timeGetTime
- QueryPerformanceCounter
- ZwGetContextThread
- NtSetContextThread
- KdDebuggerNotPresent
- KdDebuggerEnabled
- NtSetDebugFilterState
- ProtectDRX
- HideDRX
- DbgPrompt
The currently supported bugfixes are the following:
- Caption change
- Kill Anti-Attach ( dll integrity check )
Requirements:
- Microsoft Visual C++ 2010 Redistributable Package (x86)
- On x64 platfoms the testsigning has to be turned on because of the protection driver
1. bcdedit -set testsigning on
2. Reboot windows
OS support:
- WinXP x32
- WinXP WoW64
- Win7 x32
- Win7 WoW64
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
OllyExt 1.2
|
|
|
|
|
|
|
|
|
OllyExt 1.7
|
|
|
|
