首页
社区
课程
招聘
[转帖]ODbgScript.V1.50.3+V1.62.3.By.Epsylon3
2007-5-8 18:57 6945

[转帖]ODbgScript.V1.50.3+V1.62.3.By.Epsylon3

fly 活跃值
85
2007-5-8 18:57
6945
From:RCE Messageboard's Regroupment
Author:Epsylon3

New thread for the 1.5x and more... (waiting also for chinese sources 1.51 to 1.53)
http://e3.lescigales.org/olly/


1.50.3 (8 May 2007)
* 4-bytes alignment and speed optimization (thanks Human)
* Changed URL to http://www.woodmann.com/forum in About Box
* Added fixes and news from Chinese version : 
*ASM
*EXEC,ENDE
+GMI (added DATABASE, RESBASE, RESSIZE constants)
*GN
*LEN bad operand fix
+DIV,MUL commands
+READSTR to read data at addr. (was possible in MOV command too)
+NEG,NOT asm commands (real asm code)
+ROL,ROR asm commands but looks like same as SHL, SHR
*RTU
*ADD, SHL, SHR, SUB, XOR results to script window

Notes : There are some differences between versions : 
WRTA doesnt add CR to lines (binary writing)
+SETEXC ??? not working for the moment...

http://e3.lescigales.org/olly/ODbgScript.1.50.3.VC6.rar

[培训]二进制漏洞攻防(第3期);满10人开班;模糊测试与工具使用二次开发;网络协议漏洞挖掘;Linux内核漏洞挖掘与利用;AOSP漏洞挖掘与利用;代码审计。

上传的附件:
收藏
点赞0
打赏
分享
最新回复 (18)
雪    币: 184
活跃值: (108)
能力值: ( LV9,RANK:410 )
在线值:
发帖
回帖
粉丝
hnhuqiong 10 2007-5-8 19:14
2
0
哇,126的邮箱给当垃圾信件退回,直接在1.50上修改的,bug还多多..

尽快用gmail发送,让大家都用上全新的1.53的英文版本.今后中文版本将和英文版本同步的发行.
雪    币: 896
活跃值: (4039)
能力值: ( LV9,RANK:3410 )
在线值:
发帖
回帖
粉丝
fly 85 2007-5-9 14:34
3
0
ODbgScript.V1.53.3
http://e3.lescigales.org/olly/ODbgScript.1.53.3.VC6.rar

1.53.3 (9 May 2007)
+ WRTA has now a third parameter for separator (default \n)
* ASK dlg is now TOPMOST
no more modal and fixed the crash on close if box was not closed properly
* Added fixes and news from 1.53 Chinese version

+ pop,push,test,xchg commands.
+ findcmds(Search for command sequence).
+ Added BPX and BPD functions
+ Added the OPENTRACE function (to open run trace)
+ Added the GAPI function (assign address API)
+ Supports 16bit registers (ax, bx)
+ Added the FINDCMD function (search for command);
* GN, GCMT, ASM
* Removed 0 prefix for Hex values in results/values
* negative hex values support
* MSG, MSGY no more modal

Other differences with Chinese Version :
MRU "Bug" not modified
I've made two MRU lists for a good reason, olly doesnt refresh Main Menu
Inline operators are still working in this branch of OdbgScript
Weird ESP Menu not added (i dont know what it is)
ADD doesnt supports dw+string itoa concatenation
雪    币: 170
活跃值: (18)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
yzjsdn 2007-5-9 15:12
4
0
发现一个BUG!

ODbgScript plugin by hnhuqiong
上传的附件:
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
Losyz 2007-5-9 16:56
5
0
太多太混乱  不知道用那个好
雪    币: 370
活跃值: (15)
能力值: ( LV9,RANK:170 )
在线值:
发帖
回帖
粉丝
快雪时晴 4 2007-5-10 00:41
6
0
大家试过findcmd没有,在我机器上怎么都出错,严重时还引发OD挂掉
雪    币: 226
活跃值: (20)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
linxun 2007-5-11 12:16
7
0
感谢分享了!
雪    币: 184
活跃值: (108)
能力值: ( LV9,RANK:410 )
在线值:
发帖
回帖
粉丝
hnhuqiong 10 2007-5-12 09:24
8
0
Current Changes :

   1.54.SVN
+ GMI new constants added, (imports, exports, reloc, name, version) see documentation
+ Added Length Information and Hex value to String Variables in Context Menu
+ Enhanced Internal Buffer/String Concatenation : mov test, ##+"123" give #313233# in test
+ Compare Buffer/String is now working
+ Begin Buffer+DW and String+DW (function ADD)
+ Buffer/String Variable Editor is now Binary editor
* Internal compare between different types (except buf/str) returns error -2
* Better support in Log Window and Context menu of strings containing "\0"
* removed 00 prefix of dword values in LOG and EVAL commands (%8X to %X)
* OPENTRACE now also opens trace window if not opened
* READSTR documentation update, but this function could be renamed/removed
* FIND commands fix, bad address parameter results 0

GMI addr, info
--------------
Gets information about a module to which the specified address belongs.
"info" can be :
MODULEBASE, MODULESIZE, CODEBASE, CODESIZE, MEMBASE, MEMSIZE,
ENTRY, NSECT, DATABASE, RELOCTABLE, RELOCSIZE
RESBASE, RESSIZE, IDATABASE, IDATATABLE, EDATATABLE, EDATASIZE
and strings NAME, PATH, VERSION
雪    币: 170
活跃值: (18)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
yzjsdn 2007-5-12 09:26
9
0
哇,又升级了。。。

hnhuqiong 大侠,问个问题:写出来的脚本能直接做成脱壳机吗?就像一个框架一样,我们只要把脚本代码添加进去就成了简单的

脱壳机了,大大减少工作量。相信很多人会需要,只怪自己编程没什么功底,所以才有这个想法,不知能否实现呢?
雪    币: 184
活跃值: (108)
能力值: ( LV9,RANK:410 )
在线值:
发帖
回帖
粉丝
hnhuqiong 10 2007-5-12 10:52
10
0
可以的,脚本本身写好了就是一个脱壳机,ODBGscript在不断的更新,就是逐渐的可以作成脚本=脱壳机,现在主要是IAT的处理和PE的文件处理上,它还比较弱,逐渐它会发展成为一种通用的脱壳机环境.
雪    币: 170
活跃值: (18)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
yzjsdn 2007-5-12 11:24
11
0
非常期待~
雪    币: 896
活跃值: (4039)
能力值: ( LV9,RANK:3410 )
在线值:
发帖
回帖
粉丝
fly 85 2007-5-13 13:00
12
0
2.1 What's new?


TODO:
"FOLLOW const" to see any dword data usage (log every command which use it)
A DLL call function

Known Problems:
MRU FROM Main Menu is static, so updated only on OllyDbg Restart

1.54.3 (13 May 2007)
+ BUF, STR commands added to convert string to buffer or buffer to string
+ GMI new constants added, (imports, exports, reloc, name, version) see documentation
+ Added Length Information and Hex value to String Variables in Context Menu
+ Enhanced Internal Buffer/String Concatenation : mov test, ##+"123" give #313233# in test
+ Compare Buffer/String is now working
+ Begin Buffer+DW and String+DW (function ADD)
+ Buffer/String Variable Editor is now Binary editor
- Removed MRU menu and some commands from Main Olly Menu
* Internal compare between different types (except buf/str) returns error -2
* Better support in Log Window and Context menu of strings containing "\0"
* removed 00 prefix of dword values in LOG and EVAL commands (%8X to %X)
* OPENTRACE now also opens trace window if not opened
* READSTR documentation update, but this function could be renamed/removed
* FIND commands fix, bad address parameter results 0

https://sourceforge.net/project/showfiles.php?group_id=195914&package_id=231385&release_id=507987
雪    币: 896
活跃值: (4039)
能力值: ( LV9,RANK:3410 )
在线值:
发帖
回帖
粉丝
fly 85 2007-5-14 21:38
13
0
ODbgScript.V1.55.3.By.Epsylon3

1.55.3 (14 May 2007)

+ Added HISTORY command to enable/disable value History (run faster)
+ Added BEGINSEARCH and ENDSEARCH to optimize "find commands"
+ Added GCI Command to Get info on disasm command
+ Added GRO Command Get Relative Offset ("procedure+offset")
+ Added TAB key to Step in Script (S key could "assemble" if ASM window get focus)
+ Added PAUSE key (everywhere) to Pause Script on next command when Application is Running
x BPHWS second parameter is now optional (default "x")
* Comments // in /**/ bloc fixed
* EXEC/END hex dword variables with letter as first char fixed
* label script position fixed
* negative values crash fixed
* eip could now be affected without problems
* Resume on Script breakpoint fixed (SPACE)

Note: GAPI function could be deleted, hnhu... has not finished the code

https://sourceforge.net/project/showfiles.php?group_id=195914
雪    币: 199
活跃值: (45)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
playar 2007-5-15 22:29
14
0
更新。。也忒快了一点吧?
雪    币: 896
活跃值: (4039)
能力值: ( LV9,RANK:3410 )
在线值:
发帖
回帖
粉丝
fly 85 2007-5-29 13:23
15
0
1.62 (26 May 2007)
+ Indent/color ASM Blocks (EXEC/ENDE)
+ Added GCI parameter COMMAND to get asm command string (like OPCODE), SIZE, CONDITION, TYPE
+ TICK without variable set time from start in text, in "%d ms" format. log purpose.
+ Added SCMP,SCMPI size parameter, to compare addr data.
* DF/SF flags fixed
* EOB with EXEC/ENDE fixed
* After Error Script Cursor, also added "!" symbol in front of line
* Fixed SUB <reg> command 
* Fixed Value History in commands using DoMOV

http://downloads.sourceforge.net/odbgscript/ODbgScript.1.62.3.VC6.rar?modtime=1180170757&big_mirror=0
雪    币: 791
活跃值: (2100)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
rooky2000 2007-5-30 11:32
16
0
already update to version 1.63.3
雪    币: 271
活跃值: (196)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
sunson 2007-5-31 15:45
17
0
哪个是最新版本?
雪    币: 342
活跃值: (323)
能力值: ( LV9,RANK:450 )
在线值:
发帖
回帖
粉丝
netsowell 11 2007-5-31 16:02
18
0
1.64有了
昨天发布的
雪    币: 896
活跃值: (4039)
能力值: ( LV9,RANK:3410 )
在线值:
发帖
回帖
粉丝
fly 85 2007-5-31 17:43
19
0
1.64 (30 May 2007)
+! Added ability to call ODBGScript command(s) from OllyDbg Conditional Log Breakpoints
+! Added CALL command to call Labels (use RET to return)
+ Added FINDCALLS command to find (and filter) intermodular calls.
+ Added GBPM command to get last memory breakpoint address, beta function affected on GBPR call
+ Script keeps breakpoints on reload if bp script lines were not modified.
+ Edit script line (to do temporary fix, not saved on disk)
+ Added GREF alone (to get lines count in reference window)
* Enhanced Script window Focus
* Error messagebox no more modal
* Fixed 1.63 bug witn pointers containing operator (now accept all operators)

http://downloads.sourceforge.net/odbgscript/ODbgScript.1.64.3.VC6.rar?modtime=1180542061&big_mirror=0
游客
登录 | 注册 方可回帖
返回