well this will be useful for you I know :)
http://packetstorm.linuxsecurity.com/Wi ... ap_vis.zip (http://packetstorm.linuxsecurity.com/Win/olly_heap_vis.zip)
it seems that iDefense is trying to be nice another time !

it is not bad to mention other useful olly plugins :
the most useful one is ollyuni believe me :) it does as findjmp does + it searchs for unicode useful addresses :)
http://www.phenoelit.de/win/OllyUni_0.10.zip

another plugin I am using is Olly Sync , are you an IDA user ? just found out about olly ? cant forget about IDA ? then use them together with this plugin !
https://www.openrce.org/downloads/details/169

wow openrce . pedram amini's site , security site of month !
hi country mate . respects :)

I would be happy if you continue this topic , introducing olly plugins :)

cheers

yeah OllyUni.dll is useful , was mirroring it on the old website, I use mostly only olly :)

btw findjmp2 helps to bypass some stack protections with popopret feature

http://hat-squad.com/~class101/security/

for finding ppr yeap findjmp2 by class101 is the best :P
for an specefic dll offset searching findjmp rulz too ,
anyway I just wanted to talk about useful olly plugins :)

If jmpesp2.c adding find some address that can pass unicode filters will be more better! ;p

Has wrtten stacks of olly plugins.. look him up on google.. neil/hairy-bits ... has some good stuff there.. is also linked in to now morphine ;'(

Has wrtten stacks of olly plugins.. look him up on google.. neil/hairy-bits ... has some good stuff there.. is also linked in to now morphine ;'(


hi~ no flamme the reply i post. i just try to add some todos.

also if loadl .dll only may miss some thing we seek

for example i see some guys use xxxx.nls image ...etc

ps olly_vis use heap32...(), it will lead deadlock while loader
load .dll with DLL_PROCESS_ATTACH event. Any idea excep wallking by lame walking by PEB?

Thanks for these plugins, I already had this tool but not all these plugins! Gonna try it! :lol:

Is everything like this these days?:lol: