Locked OllyExt_1.73

[sQuo]

This is the hidden content, please

• Sign In
• or
• Sign Up

 

 

This is the hidden content, please

• Sign In
• or
• Sign Up

changes:

26.02.2014

- NtClose has to return c0000008 fix

 

 

 

[spoiler=ReadME]

OllyExt 1.73

 

Code:

- NtClose has to return c0000008 fix

- Error message appears if breakpoint is in the function which one to hook ( hook will be skipped )

- Protection will be updated if a new module loaded

 

 

OllyExt is a plugin for Olly 2.xx debugger.

 

The main intention of this plugin is to provide the biggest anti-anti debugging features

and bugfixes for Olly 2.xx. Updates will come... :)

 

VMProtect support!

 

The currently available commands are the following:

- Code Rip to Clipboard

- Code Rip to Clipboard Recursive

- Data Rip to Clipboard

 

The currently supported protections are the following:

- IsDebuggerPresent

- NtGlobalFlag

- HeapFlag

- ForceFlag

- CheckRemoteDebuggerPresent

- OutputDebugString

- NtClose

- SeDebugPrivilege

- BlockInput

- ProcessDebugFlags

- ProcessDebugObjectHandle

- TerminateProcess

- NtSetInformationThread

- NtQueryObject

- FindWindow

- NtOpenProcess

- Process32First

- Process32Next

- ParentProcess

- GetTickCount

- timeGetTime

- QueryPerformanceCounter

- ZwGetContextThread

- NtSetContextThread

- KdDebuggerNotPresent

- KdDebuggerEnabled

- NtSetDebugFilterState

- ProtectDRX

- HideDRX

- DbgPrompt

- CreateThread

- NtSystemDebugControl

 

The currently supported bugfixes are the following:

- Caption change

- Kill Anti-Attach ( dll integrity check )

 

Requirements:

- Microsoft Visual C++ 2010 Redistributable Package (x86)

 

OS support:

- Windows XP

- Windows Server 2003 R2

- Windows Server 2008 R2

- Windows 7

- Windows Server 2012

- Windows 8

- Windows Server 2012 R2

- Windows 8.1

 

Limitations:

- Because of missing PDK function data ripping is ONLY on 2.01 latest supported

 

If you have any problem just notify me.

 

About the author:

 

Created by Ferrit

Send your bugreports/comments to [email protected]

 

Enjoy :P