View Single Post
  #1  
Old 09-18-2011, 00:16
JeRRy's Avatar
JeRRy JeRRy is offline
VIP
 
Join Date: Oct 2010
Posts: 119
Rept. Given: 89
Rept. Rcvd 204 Times in 72 Posts
Thanks Given: 13
Thanks Rcvd at 13 Times in 3 Posts
JeRRy Reputation: 200-299 JeRRy Reputation: 200-299 JeRRy Reputation: 200-299
OllyDumpEx Plugin v1.30 / 2013-06-28

Overview

This plugin is process memory dumper for OllyDbg and Immunity Debugger.
Very simple overview:
OllyDumpEx = OllyDump + PE Dumper - obsoluted + useful features

Features
  • OllyDbg version 2 plugin interface supported (EXPERIMENTAL)
  • Select to dump debugee exe or loaded dll
  • Dump any address space as section even if not in original section header
  • Add dummy section to keep PE format consistency
  • Fix RVA in DataDirectory to follow ImageBase change
  • Auto calculate many parameters (RawSize, RawOffset, VirtualOffset, ...)
Screenshot
http://low-priority.appspot.com/olly...dumpex_ss0.png

Supported Debugger
  • OllyDbg version 1.10 (tested 1.10)
  • OllyDbg version 2.01 EXPERIMENTAL (tested 2.01 alpha 4)
  • Immunity Debugger version 1.7x or lower (tested 1.73)
  • Immunity Debugger version 1.8x or higher (tested 1.83)
This archive file contains plugin DLLs for each debuggers.
OllyDumpEx.zip
Version: v0.90
MD5 : 2c247ed143bcb3c6f9505f2de4fb8a1e
SHA1: 5df21ab07fc843ca4d5057d7ba9689ac623084c0<p id="changes">
Recent Changes
- v0.90 / 2011-08-24
  • Add: Support OllyDbg version 2 plugin interface (EXPERIMENTAL)
  • Improve: Rewrite Wide/Multibyte-Character support code
  • Improve: Decode CopyOnWrite page attribute
  • Bugfix: Detect working directory
- v0.80 / 2011-07-15
  • Add: Support Immunity Debugger version 1.8x or higher
  • Improve: Data Directory rebuild option (check rewrite range)
  • Improve: Always round up PE header size to 0x1000 (ImportRec not extend itself)
  • Bugfix: TLS Data Directory ignored
- v0.70 / 2011-07-01
  • Add: Support Immunity Debugger version 1.7x or lower
  • Improve: Data Directory rebuild option (support ImportTable)
  • Improve: Image Base Address alignment checking
  • Improve: Virtual Offset Address alignment checking
Attached Files
File Type: rar OllyDumpEx v0.90.rar (53.7 KB, 40 views)
Reply With Quote
The Following 7 Users Gave Reputation+1 to JeRRy For This Useful Post:
alekine322 (09-18-2011), chessgod101 (09-18-2011), emo (09-18-2011), giv (09-18-2011), uel888 (09-18-2011), _Servil_ (09-18-2011)