PDA

View Full Version : OllyDbg, a new cool looking debugger!


Jueteng Lord
November 23rd, 2000, 01:17
http://home.t-online.de/home/Ollydbg

OllyDbg is a 32-bit code level debugger for Microsoft®
Windows®. Emphasis on binary code analysis makes
it particularly useful in cases where source is unavailable. OllyDbg is
a shareware, but you can download and use it
for
free. Special highlights are:

Code analysis - recognizes procedures, API calls,
switches, tables, constants and strings
Object file scanning - locates routines from object
files and libraries
You can add your own labels and comments
You can send your patches directly to executable
file
No installation - no thrash in registry and system
directories
With OllyDbg you can also:

Debug multithread applications
Attach to running programs
Display code either in MASM or IDEAL format
Decode and assemble MMX and 3DNow! instructions, including Athlon extensions
Dynamically recognize ASCII and UNICODE strings
Recognize weird code constructs, like call to jump to procedure
Decode calls to more than 1000 standard API functions, add custom functions
Show fixups
Dynamically trace stack frames
Search for imprecise commands and masked binary sequences
Search in the whole allocated memory
Find references to constant or address range
Set conditional, logging, memory and hardware breakpoints
Examine and modify memory, set breakpoints and pause program on-the-fly
Assemble commands into the shortest binary form
Automatically correct fixups when copying patches to executable file
Start OllyDbg from the floppy disk
and much, much more!

xOptiMus
November 24th, 2000, 10:13
Hello reversers

Hey, why is no one commenting on this new debugger. I'm a newbie, and would be very interested to hear the oppinions of some of the more experienced reversers here regarding this debugger - it looks very good, but then I'm no expert on debuggers.

Come on people, what do you think eh?

xOptiMus

NchantA
November 25th, 2000, 07:17
hello all

hrmm, it has nice syntax colouring ;D hehe and pretty kewl dissembling ect. it could be usefull tool but i dont know how to set a breakpoint without specifying an address ;(

if anyone knows how to do this plz post!

NchantA

tsehp
November 25th, 2000, 08:21
I didn't spoke about it :
no way to put a bpx on showwindow without guessing the api address.
try it on a app with a lea eax, eax , this debugger stops and can't trace the program. Too much easy to defeat with anti debug/disass measures.
So, this product seems promising, but not ready yet for serious rce.
But it's free

Tsehp