首页
社区
课程
招聘
[转帖]HitTrace v0.1让od拥有CE的记录内存地址功能
发表于: 2015-10-11 09:44 13794

[转帖]HitTrace v0.1让od拥有CE的记录内存地址功能

2015-10-11 09:44
13794
HitTrace - david zimmer <dzzie@yahoo.com>

This is a simple plugin based on my modulebpx code.

You set breakpoints in the UI and it will then run
the app automating it and logging which ones were hit.

To set breakpoints in the main module use "main"
(no quotes) as mod name

For dlls you can enter partial strings as long
as they are unique and as long as they are the
dlls actual name as found in its export table.

Addresses of breakpoints are set in rva's (in case
a dll gets rebased)

The LogExp is optional..it accepts any type of
expression the ollydbg expression window takes
such as [ebp+4] or eax or whatever. If this is
set and is valid then it will shoot the results to the
log window on breakpoint. Sorry only supports one
expression to evaluate per bpx right now.

Each breakpoint is assigned an index which is visible
in the listbox. You can use one of these indexes
in the abort box to have it bail on tracing when
that bp is reached.

For example you can run it on looper.exe with the
following settings

main        1030        [esp+8]
main        1070        [esp+8]
main        1136       

abort on index: 2

Then hit View results to see hit count and log window

or load the test.htl sample provided (abort on index is not saved to htl files)

if you recompile looper offsets may change disasm to find new ones.

[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课

上传的附件:
收藏
免费 0
支持
分享
最新回复 (3)
雪    币: 1559
活跃值: (1795)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
wbs
2
2006年的东西了!
2015-10-11 10:27
0
雪    币: 30
活跃值: (1337)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
3
能用才是真的!
2015-10-11 21:20
0
雪    币: 2
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
4
顶你,好东西啊,做游戏辅助和外挂备必备,不过现在OD和CE都出了中文和新版本,都挺好用的
2016-8-28 09:24
0
游客
登录 | 注册 方可回帖
返回
//