-
-
[转帖]OllyDumpEx 1.20 (2) by Low Priority
-
发表于: 2013-6-16 23:50
-
OllyDumpEx 1.20 (2) by Low Priority
This plugin is process memory dumper for OllyDbg, IDA Pro (retail and freeware) and Immunity Debugger. Very simple overview:
OllyDumpEx = OllyDump + PE Dumper - obsoleted + useful features
Features:
- OllyDbg version 2 plugin interface supported
- IDA Pro Retail and Freeware version plugin interface supported
- Select to dump debugee exe, loaded dll or non-listed module
- Search MZ/PE Signature from memory
- Multiple Dump mode. Rebuild for typical PE dump, Binary for PE Carving
- PE32+ supported (Search and Binary Dump mode only available on 32bit debugger)
- Native 64bit process supported (IDA Pro only)
- Dump any address space as section even if not in original section header
- Add dummy section to keep PE format consistency
- Fix RVA in DataDirectory to follow ImageBase change
- Auto calculate many parameters (RawSize, RawOffset, VirtualOffset, ...)
551K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3I4G2N6#2)9J5k6s2m8J5K9h3!0J5K9i4c8&6i4K6u0W2j5i4m8H3M7%4m8G2N6q4)9J5k6h3y4G2L8g2)9J5c8X3!0D9L8s2W2V1N6h3#2H3k6i4S2Q4x3V1j5`.
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
|
|
|---|---|
|
|
OllyDumpEx 1.30 (2) by Low Priority
== Changelog
|
