Results 1 to 14 of 14

Thread: DebugActiveProcessStop Plugin for OllyDbg

  1. #1
    Teerayoot
    Guest

    DebugActiveProcessStop Plugin for OllyDbg

    DebugActiveProcessStop Plugin for OllyDbg
    ==========================
    [Stop debug target and let's target running]

    Date: 08.12.2004
    Author: Teerayoot <Teerayoot@bugsgroup.com>

    Download

    http://www.intechhosting.com/~access/Teerayoot/Download/DebugActivePro cessStop.zip


    Feature
    ---------
    -Stop Ollydbg debugger and victim still running
    usefull when debug critical system process.


    Works on
    --------
    -WindowXp


    Installation
    ------------
    -Copy the DebugActiveProcessStop.dll into OllyDbg's plugin directory. Make sure that if you have an entry
    named "Plugin Path=" in your ollydbg.ini it points to the directory you just
    dropped DebugActiveProcessStop.dll in.


    Usage
    -----
    -when CPU windows open on main thread just click on Stop plugin menu.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    psyCK0
    Guest

    DebugActiveProcessStop Plugin for OllyDbg

    Great work Teerayoot! Maybe you can include the source?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3

    DebugActiveProcessStop Plugin for OllyDbg

    Well sorry i understand this is a great job and you have a hard work making programs and plugins but i need say if there are a trouble, sorry.
    This plugin only work partially.
    If i open a crackme in OLLYDBG and the crackme is paused in the OEP, when i press STOP in the plugin, the crackme try to run and the screen of olly is empty, but the crackme crash in the entry point, and stop in a error, if i have OLLY how JIT opens other OLLY and the crackme is in the EP again sttoped.
    For me only plugin works if i make a EB FE infinite loop in the EP, and put RUNNING the crackme looping, next i press STOP in the plugin, and crackme don't report errors, go to pupe, replace EB FE with original bytes and crackme continue running perfect.

    Ricardo Narvaja

  4. #4
    Teerayoot
    Guest

    DebugActiveProcessStop Plugin for OllyDbg

    psyCK0
    Great work Teerayoot! Maybe you can include the source?
    Well,the source is in Bcb 6.0 and also i using Madkernel
    just 2 line of code in Stop command

    Anyway ,i already included source can download on first post,may be my plugin can stay on the stubh page


    Ricado.
    For me when i try to stop on OEP the exception occur because olly set "CC" instruction there and show message box about exception we can click cancel to debug it again.


    If want to detach debugged process just Hit F9 and click "Stop" on plugin menu,the target will running well.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  5. #5

    DebugActiveProcessStop Plugin for OllyDbg

    well i press F9 and put the program running and nexy press stop in the plugin and the program execute till y press the menu plugin-stop, varios lines, and in this lines maybe the program can detect the debugger and close.
    Is not posible the same plugin put the program run and next detach when i press STOP, this was more quickly if i press by hand.

    Ricardo Narvaja

  6. #6

    DebugActiveProcessStop Plugin for OllyDbg

    Well if I press F9 and put the program running and next I press stop in the plugin, the program execute till I press the menu plugin-stop, various lines, and in this lines maybe the program can detect the debugger and close.
    Is not posible the same plugin put the program run and next detach when i press STOP, this was more quickly if i press by hand.

    Ricardo Narvaja

  7. #7

    DebugActiveProcessStop Plugin for OllyDbg

    Teerayoot can you send me the plugin to put on the Stuph page as I cannot download it from your post (404)

  8. #8
    Moonbaby
    Guest

    DebugActiveProcessStop Plugin for OllyDbg

    Very sorry Teerayoot, could you check your link ?

    I can't load thast file .

    Thank.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  9. #9
    Teerayoot
    Guest

    DebugActiveProcessStop Plugin for OllyDbg

    I already mail to TBD,if he can get it ,i think it will be avail for download in Stuph page.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  10. #10
    jrs13579
    Guest

    DebugActiveProcessStop Plugin for OllyDbg

    I can not download it,will you please send me one? jinrs@163.com
    Thanks a lot!
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  11. #11
    Teerayoot
    Guest

    DebugActiveProcessStop Plugin for OllyDbg

    My plugin is so lame ,TBD not decide to put on Stuph page maybe because of i using Madkernel .

    Just 2 lines of code implement on stop process
    Anyway i got real pain when try to get PID from thread id using "ZwQueryInformationThread" ,No succeed(WHO CAN HELP)?.
    .
    Look USEFULL PLUGIN but Not Powerfull Source included!

    Try this locations mate http://www.johnwebsite.com/teerayoot/DebugActiveProcessStop.zip
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  12. #12
    focht
    Guest

    DebugActiveProcessStop Plugin for OllyDbg

    Hi,

    why dont you use the debuggee PID supplied by Ollydbg plugin api?

    Plugingetvalue( VAL_PROCESSID) should give you the desired information.

    Regards
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  13. #13
    Teerayoot
    Guest

    DebugActiveProcessStop Plugin for OllyDbg

    Ok ,thank q focht.

    I re written in pure cpp for small in size & faster download
    can be Download at

    http://intechhosting.com/~access/forums/index.php?act=Attach&type=post &id=83




    source included.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  14. #14
    heishadow
    Guest

    DebugActiveProcessStop Plugin for OllyDbg

    3ks!I`ll Try
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Replies: 10
    Last Post: August 31st, 2012, 18:58
  2. Replies: 14
    Last Post: March 11th, 2012, 08:29
  3. Plugin OllyDbg : FullDisasm
    By BeatriX in forum Plugins (General)
    Replies: 48
    Last Post: May 8th, 2010, 15:12
  4. Plugin OllyDbg problem
    By OllyView in forum Plugins (General)
    Replies: 3
    Last Post: October 3rd, 2004, 10:19
  5. Need help with IDA Plugin
    By Polaris in forum Tools of Our Trade (TOT) Messageboard
    Replies: 0
    Last Post: November 29th, 2001, 17:18

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •