OllyExt 0.2 - Plugin for the debugger OllyDbg 2

Hmily

This plugin helps you to debug the program with a simple protection against debugging. Because the second version of OllyDbg does not support plug-ins, you have to implement the code in the debugger to load the plugin. The archive has already patched exe version 2.01 (Alfa 2). When you start the debugger plug-in adds a menu Options -> OllyExt, where there is scarce (yet) settings.

* Hide from PEB - PEB flags are reset at BeingDebugged and NtGlobalFlag
* Protect debug registers - hides and protects against modification of debug registers by SEH and Get / SetThreadContext

http://rghost.ru/download/6469701/cb27ac09daa6f6d92e4589b474e2f33c4cf4cfc1/691405240681328ddaff3b76565f88c073e9ed8e/OllyExt201c.zip

obelix

对现在的我，这绝对是天书啊！看的不是很懂啊

Alar30

OD2的反调试插件
目前还是等直接支持
呵呵

l565408933

楼主！我有一个朋友，他是电脑高手，你能邀请他加入吾爱吗？我现在没权限邀请好友！谢谢你了！他的邮箱是545067188@qq.com，谢谢你了，不要怪我灌水哈

l565408933

你把邀请码发到他的邮箱，我先谢谢楼主了，

xu5902

看的不是很懂

hxsoft

呵呵，od2.0的插件还是出来了。

swlubiao

謝謝分享！！

Hmily

OllyExt 0.5 by Ferrit

OllyExt is a plugin for Olly 2.xx debugger.

The main intention of this plugin is to provide the biggest anti-anti debugging features and bugfixes for Olly 2.xx. Updates will come...

The currently supported protections are the following:
- IsDebuggerPresent
- NtGlobalFlag
- HeapFlag
- ForceFlag
- CheckRemoteDebuggerPresent
- OutputDebugString
- CloseHandle
- SeDebugPrivilege
- BlockInput
- ProcessDebugFlags
- ProcessDebugObjectHandle
- TerminateProcess
- NtSetInformationThread
- NtQueryObject
- FindWindow
- NtOpenProcess
- Process32Next

The currently supported bugfixes are the following:
- Caption change

OS support:

Only Win7 Professional 32-bit Version 6.1.7601 tested. If you have problem with another version just notify me.

Tested with OllyDBG v2.01f.

XXXX

都是英文。。。看不懂