首页
社区
课程
招聘
[转帖]ollystructs
发表于: 2015-7-10 09:03 6176

[转帖]ollystructs

2015-7-10 09:03
6176
这个插件是用来显示内存中的数据结构.

A plugin that helps to visualise and label datastructures from within OllyDbg.
The idea is simple. When you want to examine a data structure that’s being used in your target now you have to look up the definition of the data structure in MSDN and start counting the bytes to look at the structure member you are interested in.
Very tedious work. StollyStructs should bypass all this.
It consists of a plug-in dll “stollystruct.dll” and a data file “stollystructs.ini”
I parsed the windows.inc file from the masm library to build up the data file and added a few of my own. Currently there are about 1200 structure definitions inside the data file, so chances are that the one you are interested in is in there. 

[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入!

上传的附件:
收藏
免费 0
支持
分享
最新回复 (5)
雪    币: 1556
活跃值: (878)
能力值: ( LV9,RANK:320 )
在线值:
发帖
回帖
粉丝
2
:) useful
2015-7-10 10:06
0
雪    币: 3277
活跃值: (1992)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
3
毛啊,啥介绍都没有。
2015-7-11 21:16
0
雪    币: 4
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
4
收下备用,感谢
2015-7-30 08:46
0
雪    币: 193
活跃值: (1210)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
5
没有使用说明,希望可以用
2020-2-26 10:18
0
雪    币: 1846
活跃值: (1893)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
6
这个插件计算地址的时候不会遵循数据对齐原则,所以只能参考看结构,实际地址会出错
2020-11-21 02:17
0
游客
登录 | 注册 方可回帖
返回
//