首页
社区
课程
招聘
[转帖]ollystructs
2015-7-10 09:03 5813

[转帖]ollystructs

2015-7-10 09:03
5813
这个插件是用来显示内存中的数据结构.

A plugin that helps to visualise and label datastructures from within OllyDbg.
The idea is simple. When you want to examine a data structure that’s being used in your target now you have to look up the definition of the data structure in MSDN and start counting the bytes to look at the structure member you are interested in.
Very tedious work. StollyStructs should bypass all this.
It consists of a plug-in dll “stollystruct.dll” and a data file “stollystructs.ini”
I parsed the windows.inc file from the masm library to build up the data file and added a few of my own. Currently there are about 1200 structure definitions inside the data file, so chances are that the one you are interested in is in there. 

[CTF入门培训]顶尖高校博士及硕士团队亲授《30小时教你玩转CTF》,视频+靶场+题目!助力进入CTF世界

上传的附件:
收藏
点赞0
打赏
分享
最新回复 (5)
雪    币: 1556
活跃值: (798)
能力值: ( LV9,RANK:320 )
在线值:
发帖
回帖
粉丝
红绡枫叶 6 2015-7-10 10:06
2
0
:) useful
雪    币: 2863
活跃值: (1592)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
chixiaojie 2015-7-11 21:16
3
0
毛啊,啥介绍都没有。
雪    币: 4
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
fenfei 2015-7-30 08:46
4
0
收下备用,感谢
雪    币: 15
活跃值: (512)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
jfztaq 2020-2-26 10:18
5
0
没有使用说明,希望可以用
雪    币: 1653
活跃值: (1535)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
自由狼 2020-11-21 02:17
6
0
这个插件计算地址的时候不会遵循数据对齐原则,所以只能参考看结构,实际地址会出错
游客
登录 | 注册 方可回帖
返回