首页
论坛
课程
招聘
[转帖]ollystructs
2015-7-10 09:03 3679

[转帖]ollystructs

2015-7-10 09:03
3679
这个插件是用来显示内存中的数据结构.

A plugin that helps to visualise and label datastructures from within OllyDbg.
The idea is simple. When you want to examine a data structure that’s being used in your target now you have to look up the definition of the data structure in MSDN and start counting the bytes to look at the structure member you are interested in.
Very tedious work. StollyStructs should bypass all this.
It consists of a plug-in dll “stollystruct.dll” and a data file “stollystructs.ini”
I parsed the windows.inc file from the masm library to build up the data file and added a few of my own. Currently there are about 1200 structure definitions inside the data file, so chances are that the one you are interested in is in there. 

【公告】看雪团队招聘安全工程师,将兴趣和工作融合在一起!看雪20年安全圈的口碑,助你快速成长!

上传的附件:
收藏
点赞0
打赏
分享
最新回复 (5)
雪    币: 1533
活跃值: 活跃值 (182)
能力值: ( LV9,RANK:320 )
在线值:
发帖
回帖
粉丝
红绡枫叶 活跃值 6 2015-7-10 10:06
2
0
:) useful
雪    币: 1402
活跃值: 活跃值 (653)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
chixiaojie 活跃值 2015-7-11 21:16
3
0
毛啊,啥介绍都没有。
雪    币: 4
活跃值: 活跃值 (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
fenfei 活跃值 2015-7-30 08:46
4
0
收下备用,感谢
雪    币: 25
活跃值: 活跃值 (397)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
jfztaq 活跃值 2020-2-26 10:18
5
0
没有使用说明,希望可以用
雪    币: 380
活跃值: 活跃值 (428)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
自由狼 活跃值 2020-11-21 02:17
6
0
这个插件计算地址的时候不会遵循数据对齐原则,所以只能参考看结构,实际地址会出错
游客
登录 | 注册 方可回帖
返回