공존이 블로그

Make your OllyDbg Strong! This plug-in provides three kinds of ways to initiate the process: 1, Normal - And the same manner as the original start, the STARTUPINFO inside unclean data 2, CreateAsUser - User with a mandate to initiate the process of the user, so that the process running under the purview of the User, unable to establish the process Admin operation. Running is such a need in the l..

올리 디버거 스크립트 편집기로 편집&수정을 하는 도구입니다.

Sometimes we want to find out where in a module the code parsing is done. In the example below, we want to find the code that parses the QuickTime video codecs that are in Windows media player. We know that the codecs support the raw, rle, jpeg, mjpb, and rpza tags, so all we need to do is to search for those tags in our module--in this case, the "quartz.dll" module. The OllyEye hunter knows tha..