Support Forums | Plugins | Tools | Further Resources |
OllyDbg OllyStuph
Various resources for the OllyDbg 32-bit Assembler-Level Debugger developed by Oleh Yuschuk.
Plugins | Top |
File | Name/Description | Source | Author(s) | Released |
FullDisasm v1.63 This plugin replaces the default OllyDbg disassembly routine with an engine which supports MMX, FPU, SSE, SSE2, SSE3, SSSE3, SSE4.1 and SSE4.2 instructions. Displays processor support for these technologies. Allows disassembling globally or only on selected lines in Masm, Nasm or GoAsm syntax. Available as a plugin for OllyDbg or Immunity Debugger 1.00. |
NO | BeatriX | 05.Aug.2007 | |
MemoryDump | MemoryDump Simple plugin allows convenient dumping of a selected number of bytes from Dump window. |
NO | aeon | 08.Jul.2007 |
Conditional Branch Logger | Conditional Branch Logger v1.0 Conditional Branch Logger is a plugin which gives control and logging capabilities for conditional branch instructions over the full user address space of a process. Useful for execution path analysis and finding differences in code flow as a result of changing inputs or conditions. It is also possible to log conditional jumps in system dlls before the Entry Point of the target is reached. Numerous options are available for fine tuning the logging ranges and manipulating breakpoints. |
BCC 5.5 | Blabberer / dELTA / Kayaker | 13.Jun.2007 |
Modified CmdLine | Modified Command Line Plugin Useful new features added to default Cmdline.dll plugin: LOADDLL - load a dll into the context of the debugee. LOADPDB - load PDB symbol files into Olly directly from Microsoft server. LOADPLUGIN - load a plugin dynamically without restarting Olly. Bypasses 32 plugin limit. PRINT - allows multiple expressions to be output to log window per conditional breakpoint. |
BCC 5.5 | anonymouse | 23.Apr.2007 |
StollyStructs | StollyStructs v1.0 A plugin to help visualise and label data structures from within OllyDbg. Approximately 1200 common Windows data structures are defined. |
MASM | jstorme | 19.Jan.2007 |
LCB Plugin | LCB Plugin v0.10 Plugin to export and import labels, comments and breakpoints. Functionally a combination of Labelmaster with improved abilities, and Olly Breakpoint Manager. |
C | scherzo | 30.Dec.2006 |
OllyStepNSearch | OllyStepNSearch v0.6.1 This plugin allows you to search for a given text when automatically stepping through the debugged program. |
BCC 5.5 | Didier Stevens | 13.Nov.2006 |
ModuleBpx |
Olly ModuleBpx |
C++ | David Zimmer | 21.Sep.2006 |
HitTrace | Olly HitTrace Extension of the ModuleBpx code, allows you to set breakpoints and will automatically trace over them logging hitcounts so you can see how often different functions get called. Also supports the use of a logging expression so it can dump runtime data to logwindow on each hit. |
C++ | David Zimmer | 15.Sep.2006 |
Uhooker | Uhooker v1.2 The Universal Hooker is a tool to intercept execution of programs. It enables the user to intercept calls to API calls inside DLLs, and also arbitrary addresses within the executable file in memory. Requires Python interpreter. Zip file includes the online documentation and script examples, but see author link for latest updates. |
Python driven | Core Security | 05.Sep.2006 |
SEHSpy | SEHSpy This plugin shows the context of the debugged process (before an exception) in an Seh Handler. It may be useful for packer analyzing, or generally during an exception. |
No | pnluck | 04.Sep.2006 |
Exception Counter | Exception Counter v0.1 A plugin to automate the process of unpacking with exceptions. (Count the number of exceptions before the app runs and then pass exceptions n-1 times in next restart) |
No | ZeetreX | 25.Aug.2006 |
LoadSome | LoadSome v0.1b Plugin manager of sorts. Allows you to create separate folders for plugins and load/unload them to the Plugins menu. |
Delphi | n1kto | 13.Aug.2006 |
RL!ApiFinder | RL!APIFinder v0.2 Useful API finder, allows for adding new modules, setting breakpoints, browsing exports, autocompletion, goto feature. |
No | ap0x | 04.Jul.2006 |
Apihlp | API Help Assists in finding API addresses and setting breakpoints, includes auto-completion feature. Supports ~120 DLL and ~14000 API. For XPsp2 only! (place aphlp.ahd in main OllyDbg directory) |
No | Phoenix | 26.Jun.2006 |
OllyBonE v0.1 Break-on-Execute for OllyDbg. Unique kernel driver plugin implements PaX-like page protection in order to break on execution of unpacked code at OEP. From the RECON 2006 presentation Semi-Automatic Unpacking on IA-32 Using OllyBonE. PDF of presentation obtained from RECON 2006 - Conference Proceedings at CodeBreakersJournal (http://www.codebreakers-journal.com/index.php) |
VC++ 6 | Joe Stewart | 17.Jun.2006 | |
NonaWrite |
NonaWrite v1.2 |
No | Nonameo | 04.Jun.2006 |
Olly Advanced | Olly Advanced v1.26 Beta 10 A very complete selection of anti-debug settings, bugfixes and additional options for OllyDbg. Includes Help file for v1.26 Beta 5. |
No | MaRKuS TH_DJM | 29.May.2006 |
OllyScript v1.48 Automate OllyDbg by writing scripts in an assembly-like language. Very useful. Check link for latest updates. |
VC++ 6 | SHaG / Epsylon3 | 27.May.2006 | |
Olly ToolBar Manager | Olly ToolBar Manager Plugin which allows you to add up to 50 custom buttons to a docking tool bar. Drag and Drop, Easy Button Management. |
No | arjuns | 25.May.2006 |
CodeRipper | Code Ripper v1.3 Rips selected code from OllyDbg disassembler window and formats according to MASM, C/C++ (inline assembler) or Delphi (inline assembler). Customizable, supports labels, comments, detailed help. |
No | Ziggy | 19.Apr.2006 |
Hide Debugger | Hide Debugger v1.24 This plugin hides OllyDbg from many debugger detection tricks. |
No | Asterix | 19.Apr.2006 |
CommandBar | CommandBar v3.20.110 SoftICE commands in a small bar on the bottom. Macro function support. |
BCC 5.5 | Gigapede | 18.Apr.2006 |
DataRipper | Data Ripper v1.2 Rips any kind of data from an app being debugged with OllyDbg. The ripped data can be formatted and "declared" in the syntax of MASM, C/C++ and Delphi. Data Ripper is useful whenever you need to rip data, tables, etc. out of an app so the data can be used in another compiled program. |
No | Ziggy | 28.Jan.2006 |
CLBPlus! | CLBPlus! v1.0 Extends standard capabilities of conditional log breakpointing, utilizing OllyDbg feature which allows passing commands to plugins from "Set conditional log breakpoint window". Version only supports a DUMP command, but with included source this is great example for creating additional functions. |
MASM | Robert Ayrapetyan | 01.Oct.2005 |
OllyFlow+OllyGraph | OllyFlow v0.71 + OllyGraph v0.1 OllyFlow (henryouly) is an extended version of OllyGraph (Joe Stewart). OllyFlow creates VCG-compatible function and xref graphs similar to IDA. Requires Wingraph32.exe (GPL license). OllyFlow does not include source, but OllyGraph does, so the two plugins are included as a package. |
partial, |
Joe Stewart henryouly |
20.Aug.2005 |
Olly BP Manager | Olly Breakpoint Manager Breakpoint exporting, importing and automatic loading. Allows for exchange of useful breakpoint "sets" between researchers. |
VC++ 7 | Pedram Amini | 13.Jul.2005 |
Olly Heap Vis | Olly Heap Vis Display, search and visualize allocated memory blocks in debugee process. Restores and extends OllyDbg's disabled "Heap" option for Win2K and above. |
VC++ 7 | Pedram Amini | 10.Jun.2005 |
NtGlobalFlag |
NtGlobalFlag v1.1 |
BCC 5.5 | Stingduk | 05.Jun.2005 |
Asm2Clipboard | Asm2Clipboard Copy asm code to clipboard. |
No | fatmike | 08.Apr.2005 |
OllyDump | OllyDump v3.00.110 Dump debuggee process memory and Rebuild IAT. |
BCC 5.5 | Gigapede | 24.Mar.2005 |
PE Dumper | PE Dumper v3.01 PE dumper. Similar to OllyDump by Gigapede but rewritten with added features. |
No | FKMA | 18.Mar.2005 |
AnalyzeThis! | AnalyzeThis! This plugin allows the OllyDbg analysis function to operate outside of the standard code segment as defined by the PE header. Particularly useful for packed files. |
No | Joe Stewart | 26.Oct.2004 |
MemoryManage | MemoryManage Basic utility for adding Execute/Read/Write memory blocks to a process. Code injection anyone? |
No | playar | 19.Oct.2004 |
GoDup | GoDup v1.2 IDA signature loader/map loader/resource viewer/process info. View dialogs, version info and Delphi/BorlandC forms. |
No | godfather+ | 09.Aug.2004 |
Window Juggler | WindowJuggler v0.06 Enable/disable/click/close windows. |
No | EsseEmme | 26.Jul.2004 |
OllyPad |
OllyPad v1.1 |
No | SHaG | 12.Jun.2004 |
Labelmaster | Labelmaster Import/export user-defined labels and comments. |
BCC 5.5 | Joe Stewart | 13.Jan.2004 |
DeJunk | DeJunk Find/remove junkcode from packers, customizable. |
flyfancy | 16.Oct.2003 | |
ExtraCopy | ExtraCopy v0.9 Copy portions of code inside OllyDbg and to clipboard. |
MSVC | Regon | 01.Jul.2003 |
SV_IsDebug | IsDebuggerPresent v1.4 Hide debugger from IsDebuggerPresent Windows API. |
MASM | SV | 30.Jun.2003 |
MapConv | MapConv v1.4 Imports .map files from SoftiCE or IDA. |
BCB 6.0 | godfather+ TBD SHaG |
10.Jun.2003 |
WindowInfo | WindowInfo Get handle of window based on mouse position. |
No | DDM/FFF | 29.Apr.2003 |
Cleanup Ex | Cleanup Ex v1.12 Deletes all .udd, .bak files. Plugin & udd dir support. |
BCC 5.5 | Gigapede | 11.Mar.2003 |
Labeler | Labeler v1.33 Creates label/structs. Plugin & udd dir support. |
BCC 5.5 | Gigapede | 31.Oct.2004 |
StayOnTop | StayOnTop v1.0 Makes individual MDI client windows to stay on top |
VC++ 6 | matthijsln | 02.Dec.2002 |
TBD_DebugPlugin | DebugPlugin v1.0 Loads OllyDbg and breakpoints on load plugin routine. .For OllyDbg 1.08b ONLY. |
C-- 0.239 | TBD | 28.Nov.2002 |
Hide Caption | Hide Caption v1.00 Hides MDI windows caption to get more space |
BCC 5.5 | Gigapede | 21.Nov.2002 |
Watchman | Watch Man v1.00 Helps in creating watches |
BCC 5.5 | Gigapede | 21.Nov.2002 |
Tools | Top |
File | Name/Description | Source | Author(s) | Released |
xADT_1.2 | xADT eXtensible Anti-Debug Tester v1.2 A unique extensible platform for integrating anti-debugging tricks. This tool is useful to test the hiding features of debugging tools, custom loaders and other reversing tools. |
Partial, mixed | Shub-Nigurrath | 24.Aug.2006 |
LoadDLL v1.1 | LoadDLL v1.1 A modified version of the LoadDLL utility available from the OllyDbg Home Page. This version uses LoadLibraryEx with DONT_RESOLVE_DLL_REFERENCES to load the dll without calling DllMain. |
MASM | UsAr | 14.Jul.2006 |
VB Plugin | VB Plugin Example Article and example on how to write a plugin interface for OllyDbg (or IDA) in Visual Basic. See author link for further resources. |
VB | David Zimmer | 09.Aug.2004 |
Plugin SDK Delphi | OllyDbg Plugin SDK 1.10 for Delphi OllyDbg Plugin SDK 1.10 for Delphi + plugin example |
Delphi | TQN | 10.Jun.2004 |
Plugin SDK MASM | OllyDbg Plugin SDK 1.08 for MASM32 OllyDbg Plugin SDK 1.08 for MASM32 |
MASM32 | Eviloid | 21.Oct.2003 |
Plugin SDK VC | OllyDbg Plugin SDK 1.07 for Visual Studio OllyDbg Plugin SDK 1.07 for Visual Studio |
MS VC | bigglass | 02.Dec.2002 |
Plugin SDK C | OllyDbg Plugin SDK 1.07 for C-- OllyDbg Plugin SDK 1.07 for C-- [link] |
C-- | Gigapede | 02.Dec.2002 |
ASM To HTML | OllyDbg ASM To HTML Converter v2.1 Converts text files generated with the "Copy->File" function to HTML |
LCC | Crick | 25.Nov.2002 |
Further Resources | Top |
Check the following links for further OllyDbg resources |
OllyDbg Home Page - Site
of OllyDbg debugger, Plugin Development Kit, disassembler source, author tutorials,
FAQ, etc.
Mirror - Local mirror
of OllyDbg Home Page site.
A complete archive of the original OllyDbg support forums (Nov 2002 - Feb 2006) is available in CHM format HERE (2.1Mb)
OpenRCE - plugins, Olly scripts
ARTeam - tutorials
Tuts 4 You - plugins, Olly scripts,
tutorials
12377 |