首页
论坛
课程
招聘
[转帖]ollystructs
2015-7-10 09:03 3635

[转帖]ollystructs

2015-7-10 09:03
3635
这个插件是用来显示内存中的数据结构.

A plugin that helps to visualise and label datastructures from within OllyDbg.
The idea is simple. When you want to examine a data structure that’s being used in your target now you have to look up the definition of the data structure in MSDN and start counting the bytes to look at the structure member you are interested in.
Very tedious work. StollyStructs should bypass all this.
It consists of a plug-in dll “stollystruct.dll” and a data file “stollystructs.ini”
I parsed the windows.inc file from the masm library to build up the data file and added a few of my own. Currently there are about 1200 structure definitions inside the data file, so chances are that the one you are interested in is in there. 

[公告] 欢迎大家踊跃尝试高研班11月试题,挑战自己的极限!

上传的附件:
收藏
点赞0
打赏
分享
最新回复 (5)
雪    币: 1533
活跃值: 活跃值 (150)
能力值: ( LV9,RANK:320 )
在线值:
发帖
回帖
粉丝
红绡枫叶 活跃值 6 2015-7-10 10:06
2
0
:) useful
雪    币: 1230
活跃值: 活跃值 (615)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
chixiaojie 活跃值 2015-7-11 21:16
3
0
毛啊,啥介绍都没有。
雪    币: 4
活跃值: 活跃值 (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
fenfei 活跃值 2015-7-30 08:46
4
0
收下备用,感谢
雪    币: 21
活跃值: 活跃值 (232)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
jfztaq 活跃值 2020-2-26 10:18
5
0
没有使用说明,希望可以用
雪    币: 367
活跃值: 活跃值 (405)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
自由狼 活跃值 2020-11-21 02:17
6
0
这个插件计算地址的时候不会遵循数据对齐原则,所以只能参考看结构,实际地址会出错
游客
登录 | 注册 方可回帖
返回