Overview

This plugin make it possible to pass debuggee to another debugger without restarting. (like VM live migration)
Each debuggers have both strong and weak points compared with others.
We can get only strong point of each debuggers by debuggee migration, e.g. Using OllyDbg to bypass
antidebug and detect OEP, after that using Immunity Debugger to fix obfuscated import table.

Very simple overview:
OllyMigrate = Debuggee live migration plugin

Features
  • Various debuggers supported
  • Migrate debuggee between each debuggers
  • Multi thread and suspended thread aware (running state not required)
  • Migrate software breakpoint settings (keep enabled/disabled status)
  • Migrate selected address of disassemble, memory and stack window

Screenshot
OllyMigrate_Od_Options OllyMigrate_Od_Send OllyMigrate_Imm_Receive OllyMigrate_Wd_Receive OllyMigrate_Ida_Receive

Supported Debugger

  • OllyDbg version 1.10 (tested 1.10)
  • OllyDbg version 2.01 (tested 2.01)
  • Immunity Debugger version 1.8x or higher (tested 1.85)
  • IDA Pro 32bit build version 5.0 or higher (tested 6.9)
  • IDA Pro 64bit build version 7.0 or higher (tested 8.0)
  • IDA Freeware 64bit build version 7.6 or higher (tested 8.0, use IDA Pro 64bit build plugin)
  • WinDbg version 6.x or higher (tested 10.0)
  • x64dbg (tested 20220903 snapshot)

Download

This archive file contains plugin DLLs for each debuggers.
Latest OllyMigrate.zip
Version: v1.10
MD5 : 14717f439ac34dda33b37eec190b9f4c
SHA1 : 1c9b71525084e89697ca3582ebbd73e860407055
SHA256: 809d1cefbcb2536589581443d3a380fe12fc289e4bf73d4014d9c4f322722aa6

Recent Changes & Archives

- v1.10 / 2022-09-07
  • Improve: Properly handle 32bit process on ida64 (IDA)
  • Improve: Improve migration stability on windbg debugger backend (IDA)
  • Improve: Change build environment and fix compatibility problem
  • Improve: Enable HIGHENTROPYVA for 64bit plugin binaries
  • Del: Drop old version of IDA Freeware support (5.0/7.0-7.5)
- v1.08 / 2021-01-11
  • Improve: Adjust UI layout for high DPI setting
  • Improve: Focus change automatically after choose file to reduce wrong operation
  • Bugfix: High memory address is not handled properly (IDA, WinDbg, x64dbg)
- v1.06 / 2019-03-14
  • Improve: Support IDA Freeware with debugger version 7.0.190307
- v1.04 / 2018-05-10
  • Improve: Follow IDA 7.1 changes which break callui backward compatibility layer
  • Add: Support IDA Freeware version 7.0 but not confirmed due to no debugger plugin (EXPERIMENTAL)
- v1.02 / 2017-11-16
  • Improve: Improve migration stability (IDA, x64dbg)
  • Improve: Keep plugin debug setting after migration for troubleshooting
- v1.00 / 2017-09-19
  • Add: FileArg button on Send Debuggee dialog for dropfile unusable debugger
  • Add: Support IDA Pro 64bit build plugin interface (7.0)
  • Improve: Detection of dumpview and stackview current state when sending (IDA Pro)
  • Improve: Max debugger config entry count increased
- v0.91 / 2016-08-29
  • Improve: Support recent version of x64dbg (v25)
  • Del: Drop old version of Immunity Debugger support (1.7x)
- v0.90 / 2014-12-17
  • Add: Support x64dbg plugin interface
  • Add: Support native 64bit process migration (IDA Pro, WinDbg, x64dbg)
- v0.80 / 2013-06-22
  • Add: Support IDA Pro with WinDbg debugger backend
  • Add: Support WinDbg plugin interface
  • Improve: Migrate cpu window state (disassemble, dump, stack)
  • Improve: Remove button behavior and add Up/Down button on options dialog
  • Improve: Debugger args editable when sending (for append idb file path)
  • Improve: Improve migration stability (OllyDbg1, Immunity)
  • Bugfix: Exit debugger option not work (recent version of IDA Pro)
- v0.70 / 2013-04-30
  • Add: Support IDA Pro plugin interface (both Retail and Freeware version)
  • Add: Exit debugger option (OllyDbg2 and IDA Pro only)
  • Improve: Enter key behavior on options dialog
  • Improve: Debugger arguments auto detect
  • Improve: Change dialog position to center of parent window
  • Improve: Add debug toggle menu to dialog system menu
  • Bugfix: Empty arguments rejected
- v0.60 / 2013-04-13
  • Public release version