PDA

View Full Version : Plugin Request - Memory Searcher


Aquatic
June 20th, 2006, 21:59
It would be nice to have a memory searcher plugin. It would scan RAM for the value that you specify, and then tell you the RAM address of the value.

Obviously in most cases there will be more than one instance of a given value in RAM, so there will need to be sub-searches that will let you filter existing found values. (The initial search would find all addresses in RAM that hold the value that you specify). If the relevant value gets changed in the process, you can then search for what that value changed to, and that should filter out most of the addresses with irrelevant values.

There are many memory searchers out there already, but to have one integrated into OllyDbg would be cool. Also maybe include the ability to set a memory BP on the RAM address of the value that you find.

Does this sound like a worthwhile plugin for someone to make? I think it would be very useful.

Shub-nigurrath
June 21st, 2006, 02:33
WinHex already does this, you can use it 'till someone will do some 4 free..

LLXX
June 21st, 2006, 03:24
...OllyDbg already has a search function built-in!

Memory Breakpoint -> On Access is also there!

RTFM!

Aquatic
June 21st, 2006, 04:03
Quote:
[Originally Posted by LLXX]...OllyDbg already has a search function built-in!

Memory Breakpoint -> On Access is also there!

RTFM!


I mean a memory searcher that finds all RAM addresses that hold a value specified by the user, and then lets you do sub-searches to filter out the irrelevant values. Does the OllyDbg RAM searcher do this? Not as far as I know.

Aquatic
June 21st, 2006, 04:05
Search for values in RAM using this program: http://www.memoryhacking.com

Then you will understand what I mean by "memory searcher".

blabberer
June 21st, 2006, 09:04
alt+m -> right click -> search for -> searches and displays result either as ascii , unicode,or hex, in a seperate mdi window

you want some more functionality added to that ?