首页
论坛
课程
招聘
[转帖]OllyDumpEx 1.00 by Low Priority
2013-3-24 17:35 4471

[转帖]OllyDumpEx 1.00 by Low Priority

2013-3-24 17:35
4471
OllyDumpEx 1.00 by Low Priority
This plugin is process memory dumper for OllyDbg and Immunity Debugger. Very simple overview:

OllyDumpEx = OllyDump + PE Dumper - obsoleted + useful features

Features:

OllyDbg version 2 plugin interface supported
Select to dump debugee exe, loaded dll or unlisted module
Search MZ/PE Signature from memory
Dump any address space as section even if not in original section header
Add dummy section to keep PE format consistency
Fix RVA in DataDirectory to follow ImageBase change
Auto calculate many parameters (RawSize, RawOffset, VirtualOffset, ...)

http://low-priority.appspot.com/ollydumpex/


【公告】 讲师招募 | 全新“预付费”模式,不想来试试吗?

上传的附件:
收藏
点赞1
打赏
分享
最新回复 (9)
雪    币: 326
活跃值: 活跃值 (15)
能力值: ( LV9,RANK:170 )
在线值:
发帖
回帖
粉丝
快雪时晴 活跃值 4 2013-3-24 22:17
2
0
thx 林版
雪    币: 1757
活跃值: 活跃值 (761)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
chixiaojie 活跃值 2013-3-25 17:40
3
0
- v1.10 / 2013-03-24

    Add: Search type All Memory
    Add: Binary dump mode (no rebuild PE header, for before load image)
    Add: PE32+ support (Binary dump mode only)
    Add: Memory Address/Size parameters editable (dump source address)
    Improve: Add info message for Relocation Flag and EXE/DLL type
    Improve: Large PE Header handling (larger than 0x1000)
    Improve: Check SectionAlignment and FileAlignment consistency
    Improve: Reduce search memory usage (not depend on target memory size)
    Improve: Detect PE Header across different type pages (parse and search)
    Bugfix: Improper owner window handle
    Bugfix: Section not listed when belong memory range not exists
    Bugfix: Almost features broken when memory window sort order changed

http://low-priority.appspot.com/ollydumpex/OllyDumpEx.zip
雪    币: 42903
活跃值: 活跃值 (162452)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
linhanshi 活跃值 2013-3-25 21:29
4
0
信息是好,知道需要代理.
雪    币: 42903
活跃值: 活跃值 (162452)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
linhanshi 活跃值 2013-3-25 21:39
5
0
我这里没下载下来,谁帮助一下下载上传.
雪    币: 407
活跃值: 活跃值 (10)
能力值: ( LV3,RANK:20 )
在线值:
发帖
回帖
粉丝
Elijah 活跃值 2013-3-25 21:56
6
0
本地备档方便大家
V1.10
OllyDumpEx.zip
上传的附件:
雪    币: 42903
活跃值: 活跃值 (162452)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
linhanshi 活跃值 2013-3-25 22:29
7
0
[QUOTE=Elijah;1157974]本地备档方便大家
V1.10
OllyDumpEx.zip[/QUOTE]
Thanks.
雪    币: 1757
活跃值: 活跃值 (761)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
chixiaojie 活跃值 2013-3-26 08:47
8
0
2.01的那个插件 是针对 2.01g 的,不是 2.01h,可能作者不知道 OD2 升级到 h 了。
雪    币: 51
活跃值: 活跃值 (18)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
冬哥 活跃值 2013-3-26 09:42
9
0
有没有汉化版的
雪    币: 407
活跃值: 活跃值 (10)
能力值: ( LV3,RANK:20 )
在线值:
发帖
回帖
粉丝
Elijah 活跃值 2013-4-7 21:07
10
0
latest version : V1.12
作者说支持OD 2.01h了。

OllyDumpEx.zip

Supported Debugger
OllyDbg version 1.10 (tested 1.10)
OllyDbg version 2.01 (tested 2.01h)
Immunity Debugger version 1.7x or lower (tested 1.73)
Immunity Debugger version 1.8x or higher (tested 1.85)


- v1.12 / 2013-04-02
Improve: Update to OllyDbg 2 latest version PDK (2.01h)
Improve: Tested with latest version of debuggers
Bugfix: Search greater than 0x7FFFFFFF memory address failed
上传的附件:
游客
登录 | 注册 方可回帖
返回