首页
社区
课程
招聘
[转帖]ollystructs
发表于: 2015-7-10 09:03 6238

[转帖]ollystructs

2015-7-10 09:03
6238
这个插件是用来显示内存中的数据结构.

A plugin that helps to visualise and label datastructures from within OllyDbg.
The idea is simple. When you want to examine a data structure that’s being used in your target now you have to look up the definition of the data structure in MSDN and start counting the bytes to look at the structure member you are interested in.
Very tedious work. StollyStructs should bypass all this.
It consists of a plug-in dll “stollystruct.dll” and a data file “stollystructs.ini”
I parsed the windows.inc file from the masm library to build up the data file and added a few of my own. Currently there are about 1200 structure definitions inside the data file, so chances are that the one you are interested in is in there. 

[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课

上传的附件:
收藏
免费 0
支持
分享
最新回复 (5)
雪    币: 1556
活跃值: (893)
能力值: ( LV9,RANK:320 )
在线值:
发帖
回帖
粉丝
2
:) useful
2015-7-10 10:06
0
雪    币: 3305
活跃值: (2027)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
3
毛啊,啥介绍都没有。
2015-7-11 21:16
0
雪    币: 4
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
4
收下备用,感谢
2015-7-30 08:46
0
雪    币: 202
活跃值: (1255)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
5
没有使用说明,希望可以用
2020-2-26 10:18
0
雪    币: 1908
活跃值: (2008)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
6
这个插件计算地址的时候不会遵循数据对齐原则,所以只能参考看结构,实际地址会出错
2020-11-21 02:17
0
游客
登录 | 注册 方可回帖
返回
//