View Full Version : OllyDbg scripting plugin
crassy
February 3rd, 2004, 13:33
Thought you people might want to check this out...
http://ollyscript.apsvans.com
This is a plugin for OllyDbg that allows writing scripts to automate your work. Useful for finding OEPs etc. There are some scripts on the Exetools forum.
Hope I'm not being rude shamelessly advertising SHaGs work!

dELTA
February 3rd, 2004, 16:31
Cool, that could be a great help if used creatively, not to mention when it's developed even more...

SHaG
February 3rd, 2004, 17:34
Great to see the plugin is spreading =)
Quote:
...not to mention when it's developed even more |
I'm really in need of feature suggestions for v0.5!
JMI
February 3rd, 2004, 18:16
Judging from some of our posters general statements, they would prefer a tool which requires absolute no effort, which, upon the mere thought of the tool, would give them a perfectly working version of absolutely any and every piece of software that currently exist or which might be created at anytime in the future.
But then if such a tool were to be created, we would have nothing left to do in reverse engineering and we might actually have to find another hobby to occupy some of our spare time.
Regards,
dELTA
February 3rd, 2004, 19:26
Wrong, we would have just the same amount of things to do, we would just get rid of all posters looking for the easy crack, so please go right ahead and implement that feature SHaG.
Anyway, SHaG, maybe you should ask Oleh to list your plugin (and other cool plugins) on his site? It would probably be beneficial to you both.
Finally, as you most likely already know, Oleh is currently asking for immediate suggestions regarding expanded plugin functionality for the upcoming version 2.0 of OllyDbg. If you have thought about any shortcomings or good ideas whatsoever in the OllyDbg plugin interface while developing this plugin of yours, please tell Oleh about it ASAP, to make sure that version 2.0 will be as great and useful as it possibly can!
Thanks for your nice plugin in any case!
JMI
February 3rd, 2004, 19:43
Now dELTA, if the "new" plug-in could provide "a perfectly working version of absolutely any and every piece of software that currently exist or which might be created at anytime in the future," simply by thinking about the plug-in, what would there be left to do? EVERYTHING would already BE cracked.
I know, we could try to invent a software that it COULDN'T crack and, gasp, WE would become the "new" protectionists. Talk about a role reversal.
Regards,
dELTA
February 3rd, 2004, 21:04
Hmm, if I recall correctly we're supposedly in this for the pure challange and technical knowledge, not for the final result of a cracked program? Or is that just something you recommend us to say when they send those nasty emails trying to take down the server?

JMI
February 3rd, 2004, 22:06
Actually that is a good description of why a great many of us are in this hobby, but it wouldn't change the fact that, as I had defined it, there wouldn't be much left to reverse.
Regards,
CluelessNoob
February 4th, 2004, 00:59
Quote:
[Originally Posted by JMI]imply by thinking about the plug-in, what would there be left to do? EVERYTHING would already BE cracked. |
[exits lurk mode]
This would not be of use to those looking for a quick crack, for it would still require thinking.
[returns to lurk mode]
JMI
February 4th, 2004, 02:04
Ah, yes. Very good point. I hadn't "thought" of that.
Regards,
dELTA
February 4th, 2004, 09:21
I guess he'd just have to add the feature of producing a crack file too then (yes, including a leet nfo file).

SHaG
February 4th, 2004, 09:40
All right, features for the next version:
- Crack anything in an infinitely small ammount of time
- If there is nothing to crack, then write the application
- Produce leet .nfo, rip, pack, pre
- Make coffee by using a espresso machine plugged into USB port
Some time later I will also have to add:
- Write symphonies
- Compute the meaning of life and present it in a pink message box.
dELTA
February 4th, 2004, 09:51
Excellent, let us know when it's done (and don't dare coming back before that).

R@dier
February 4th, 2004, 10:31
Quote:
[Originally Posted by SHaG]
- Compute the meaning of life and present it in a pink message box.
|
umm already done, the answer was 42

altho a pink message box would be cool
gota love douglas adams
R@dier
Kayaker
February 4th, 2004, 12:21
Quote:
[Originally Posted by R@dier]
gota love douglas adams
R@dier |
I love his
5-part trilogy. I've always thought one of the most clever/witty concepts in a storyline is that Dolphins are only visiting this planet and their parting message to us 'intelligent' humans is "So Long and Thanks for All the Fish".

JMI
February 4th, 2004, 13:47
You are now entering the "Twilight Zone." Doo Dee Doo Daa, Doo Dee Doo Daa.
Regards,
SHaG
February 7th, 2004, 21:24
Ollyscript v0.5 can now be downloaded at:
http://ollyscript.apsvans.com
New features like API breakpoints, run-to-return, module info etc. are implemented.
From readme.txt:
+ New commands:
CMT, GMI, GPA, LBL, RTR, RTU
+ New example script - tElock 0.98 OEP finder.
- Still no pink message boxes... :P
Comments please!!! =)
dELTA
February 9th, 2004, 20:37
Very nice, really cool to be able to script OllyDbg itself for such relatively complex tasks as OEP finding and other unpacking operations! It also has the benefit that OllyDbg is quite likely to stick around and be updated for a while, unlike several other "scriptable tracers" in the past that has come and gone, not to mention how much more cool stuff one can do with a scripted Olly than a scripted "tracer only". Keep up the good work!

JMI
February 9th, 2004, 21:05
Version 0.51 was released by SHaG and is available on his site, listed above.
I simply do not know who started that vicious lie that this is just a "f*ks-up fixer-upper" update

, but the continued efforts are appreciated by those who realizes how good this really is.
Regards,
SHaG
February 10th, 2004, 06:29
Ummm... Doesn't seem like my best week this week...
Another bug found and destroyed. v0.52 is available now. =)
JMI
February 10th, 2004, 14:04
Don't worry, our agents are out cruising the net and destroying
anything which even hints there could possible have been a "b*g" in your fine program. So if you would kindly stop "falsely" confessing all over the place that these are anything other that "brilliant improvements," it would give them alot less work to do.
Regards,
SHaG
February 14th, 2004, 07:44
Web site updated with 16 scripts for Ollyscript.
hxxp://ollyscript.apsvans.com
dELTA
February 14th, 2004, 11:57
Cool! Like I said before, this will most likely become a quite famous Olly plugin...

SHaG
February 15th, 2004, 04:22
Quote:
[Originally Posted by dELTA]Cool! Like I said before, this will most likely become a quite famous Olly plugin...  |
Well, it looks like soon OllyScript is going to be blown out of the water by this:
hxxp://mars.walagata.com/w/focht/ASDevEnv.JPG =) Well, i don't complain - it seems to be the most advanced plugin for OllyDbg EVER.
Ricardo Narvaja
February 15th, 2004, 09:09
Ollyscript is a good job, and is easy write scripts with it, despite the new plugin you continue with your work, is good, easy for work, and if the new plugin is better in same points, will be more complex sure, the simplicity of ollyscript for work is a good point to continue working on it.
Ricardo
Quote:
[Originally Posted by SHaG]Well, it looks like soon OllyScript is going to be blown out of the water by this:
hxxp://mars.walagata.com/w/focht/ASDevEnv.JPG =) Well, i don't complain - it seems to be the most advanced plugin for OllyDbg EVER. |
Js
February 15th, 2004, 10:21
yes I agree with Ricardo, hope you continue Ollyscript its the ida vs wda situation, I don't always feel like having a kip while I wait for ida when wda will do the job.
dELTA
February 15th, 2004, 18:39
I agree too, the first thing I thought when seeing those screenshots of the other plugin was "bloat"...

SHaG
February 24th, 2004, 10:32
OllyScript v0.6 is now available for download at
hxxp://ollyscript.apsvans.com.
Here is an except from the readme:
2.1 What's new?
---------------
The internal architecture of the plugin totally redone and object-oriented
(its not perfect OO, but bear with it). Because of this rewrite, bugs are
likely to appear. Please report them to me ASAP!
Bugs with script processing are fixed, parts of code are redone etc.
+ New commands:
BPCND, BC, BPMC, JA, JB, JAE, JBE, AI, AO, TI, TO
+ Conditional breakpoints
+ Breakpoint clearing (even memory)
+ Tracing and animation
+ More jumps
+ Stepping through script
# BP behaviour fixed (it now SETS breakpoint, instead of TOGGLEING it).
# Bugs in script processing fixed (thanks s0nkite).
# LOG now logs things like strings that are referenced by the address,
referenced function addresses etc. Try it, its cool!
# "Thanks" section of readme updated. =)
------------------------------
Hope you like it! =)
cooper
February 27th, 2004, 10:46
SHaG:
hi!
just foun out about your plugin but have a problem wiht it
i dont see it in plugins menu section, the dll itself is in the plugins
folder so can you help me here? im using OllyDbg v1.09d(step 4)
and OllyScript v0.6
R@dier
February 27th, 2004, 10:54
Quote:
[Originally Posted by cooper]SHaG:
hi!
just foun out about your plugin but have a problem wiht it
i dont see it in plugins menu section, the dll itself is in the plugins
folder so can you help me here? im using OllyDbg v1.09d(step 4)
and OllyScript v0.6 |
from the Authors Site
OllyScript v0.6 is now available! Requires OllyDbg v1.10.
/* it may also pay to re-check your plugin dir is correct */
Best Wishes
R@dier
cooper
February 27th, 2004, 18:08
R@dier
downloading beta 1.10 solved this problem
thank you

SHaG
March 4th, 2004, 12:26
OllyScript v0.62 posted.
* Breakpoint bug fixed (again).
* EFLAGS can be changed.
Damned bugs...
charlieC
April 1st, 2004, 09:56
SHaG, you're swedish, right?
Kul med svenskar iaf
A generic logging feature would nice. Not just for executed instructions.
Anyways, been waiting for a plugin like this. Thanks!
dELTA
April 1st, 2004, 12:40
Ok killar, det finns faktiskt åtminstone ett par personer här som inte förstår svenska, så håll er till engelska!

SHaG
April 1st, 2004, 19:59
Hur kunde ni gissa? Kan det vara "apsvans"? =)
Generic logging? Humm... What exactly do you want logged?
charlieC
April 2nd, 2004, 06:45
Apsvans, yes! Hehe
Anything! For example, I want to log the text "OEP found!" when my script finds it.
Maybe it's not useful for everyone, but I think it would be a nice feature.
crassy
April 2nd, 2004, 07:13
You can do it even now...
log "OEP found"
charlieC
April 2nd, 2004, 08:25
Quote:
[Originally Posted by crassy]You can do it even now...
log "OEP found" |
But that logs it to the window in OllyDbg?
If you need to log lots of information, logging to a file might be nice.
Harding
April 2nd, 2004, 17:22
Quote:
[Originally Posted by charlieC]But that logs it to the window in OllyDbg?
If you need to log lots of information, logging to a file might be nice. |
You can do that in OllyDbg. Just right-click in the log window and choose
"Log to file"
JMI
April 2nd, 2004, 17:29
Now there you've gone and given away the secret.
Regards,
Harding
April 5th, 2004, 07:21
Quote:
[Originally Posted by JMI]Now there you've gone and given away the secret. |
Well I wanted to say "READ THE FAQ!" as all the cool guys do but I can't remember that I've seen that in the FAQ.

SHaG
April 11th, 2004, 14:38
New version of OllyScript is available for download.
Grab it at
http://ollyscript.apsvans.com
Changes in v0.7:
+ New commands: #INC, #LOG, DM, FIND, GO, MSGYN
+ Possibility to call OllyScript from other plugins
# Wildcard search for the FINDOP command
- Source code not included in distribution archive (available on request)
OllyScript v0.8 is now available!
Changes in v0.8:
+ New commands: DBH, DBS, DPE, FILL
+ PE dumper
+ Debugger hiding
# FIND now accepts wildcards
Powered by vBulletin® Version 4.2.2 Copyright © 2019 vBulletin Solutions, Inc. All rights reserved.