首页
社区
课程
招聘
[转帖]OllyDumpEx 1.00 by Low Priority
发表于: 2013-3-24 17:35 6755

[转帖]OllyDumpEx 1.00 by Low Priority

2013-3-24 17:35
6755
OllyDumpEx 1.00 by Low Priority
This plugin is process memory dumper for OllyDbg and Immunity Debugger. Very simple overview:

OllyDumpEx = OllyDump + PE Dumper - obsoleted + useful features

Features:

OllyDbg version 2 plugin interface supported
Select to dump debugee exe, loaded dll or unlisted module
Search MZ/PE Signature from memory
Dump any address space as section even if not in original section header
Add dummy section to keep PE format consistency
Fix RVA in DataDirectory to follow ImageBase change
Auto calculate many parameters (RawSize, RawOffset, VirtualOffset, ...)

edbK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3I4G2N6#2)9J5k6s2m8J5K9h3!0J5K9i4c8&6i4K6u0W2j5i4m8H3M7%4m8G2N6q4)9J5k6h3y4G2L8g2)9J5c8X3!0D9L8s2W2V1N6h3#2H3k6i4S2Q4x3V1j5`.


[培训]科锐逆向工程师培训第53期2025年7月8日开班!

上传的附件:
收藏
免费 1
支持
分享
最新回复 (9)
雪    币: 370
活跃值: (15)
能力值: ( LV9,RANK:170 )
在线值:
发帖
回帖
粉丝
2
thx 林版
2013-3-24 22:17
0
雪    币: 3411
活跃值: (2132)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
3
- v1.10 / 2013-03-24

    Add: Search type All Memory
    Add: Binary dump mode (no rebuild PE header, for before load image)
    Add: PE32+ support (Binary dump mode only)
    Add: Memory Address/Size parameters editable (dump source address)
    Improve: Add info message for Relocation Flag and EXE/DLL type
    Improve: Large PE Header handling (larger than 0x1000)
    Improve: Check SectionAlignment and FileAlignment consistency
    Improve: Reduce search memory usage (not depend on target memory size)
    Improve: Detect PE Header across different type pages (parse and search)
    Bugfix: Improper owner window handle
    Bugfix: Section not listed when belong memory range not exists
    Bugfix: Almost features broken when memory window sort order changed

6a1K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3I4G2N6#2)9J5k6s2m8J5K9h3!0J5K9i4c8&6i4K6u0W2j5i4m8H3M7%4m8G2N6q4)9J5k6h3y4G2L8g2)9J5c8X3!0D9L8s2W2V1N6h3#2H3k6i4S2Q4x3V1k6a6L8r3I4&6c8s2g2E0M7p5g2^5i4K6u0W2P5X3W2H3
2013-3-25 17:40
0
雪    币: 106611
活跃值: (202414)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
4
信息是好,知道需要代理.
2013-3-25 21:29
0
雪    币: 106611
活跃值: (202414)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
5
我这里没下载下来,谁帮助一下下载上传.
2013-3-25 21:39
0
雪    币: 411
活跃值: (25)
能力值: ( LV3,RANK:20 )
在线值:
发帖
回帖
粉丝
6
本地备档方便大家
V1.10
OllyDumpEx.zip
上传的附件:
2013-3-25 21:56
0
雪    币: 106611
活跃值: (202414)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
7
[QUOTE=Elijah;1157974]本地备档方便大家
V1.10
OllyDumpEx.zip[/QUOTE]
Thanks.
2013-3-25 22:29
0
雪    币: 3411
活跃值: (2132)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
8
2.01的那个插件 是针对 2.01g 的,不是 2.01h,可能作者不知道 OD2 升级到 h 了。
2013-3-26 08:47
0
雪    币: 672
活跃值: (851)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
9
有没有汉化版的
2013-3-26 09:42
0
雪    币: 411
活跃值: (25)
能力值: ( LV3,RANK:20 )
在线值:
发帖
回帖
粉丝
10
latest version : V1.12
作者说支持OD 2.01h了。

OllyDumpEx.zip

Supported Debugger
OllyDbg version 1.10 (tested 1.10)
OllyDbg version 2.01 (tested 2.01h)
Immunity Debugger version 1.7x or lower (tested 1.73)
Immunity Debugger version 1.8x or higher (tested 1.85)


- v1.12 / 2013-04-02
Improve: Update to OllyDbg 2 latest version PDK (2.01h)
Improve: Tested with latest version of debuggers
Bugfix: Search greater than 0x7FFFFFFF memory address failed
上传的附件:
2013-4-7 21:07
0
游客
登录 | 注册 方可回帖
返回