[Guide] Understanding OllyDBg and More

ReaL

New Member
Joined
Apr 13, 2008
Messages
1,244
Reaction score
654
Here is a "little" guide by Chris05, which will help ya understand alot things in Olly! It has images (SSs), better to use with Acrobat Reader!
Here is a little from me - ReaL for the newbies in Hex, AsM (well... im a newbie here ^^), TCP/UDP Ports (so u could stop asking "Why can't i connect to my server", or "My GS can't connect to DataServer"):


1. What is Hex (Hexadecimal)
A link to Wikipedia, helping u understand what Hex is...
So for basic, Hex starts from 1, 2, 3, 4, 5, 6, 7, 8, 9 and then continues from A, B, C, D, E, F and then 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 1A, 1B, 1C, ... (those are the numbers from 1 to 29 in Hex)

Here is the Hexadecimal Multiplication Table (HMT):
http://upload.wikimedia.org/wikipedia/commons/e/eb/Hexadecimal_multiplication_table.svg


2. What is AsM (Assembly) [Wikipedia] [Fasm - so u could learn basic things and use the program, called flat assembler]
Links to Wikipedia and Fasm, helping u to understand what Assembly is...
Assembly is a low level language for programming. It implements a symbolic representation of the numeric machine codes and other constants needed to program a particular CPU architecture. So we got the value:
Binary: 10110000 01100001 (Hexadecimal: B0 61)
and in assembly (Intel syntax):
mov al, 61h
It means --> Move the value 61h (h means hexadecimal) into the processor register named "al".
It's actualy not that hard to learn assembly, in the beggining, yes it's very hard to understand, but all u need is time ;)


3. What are TCP & UDP Ports
Links to Wikipedia, helping u to understand what TCP (Transmission Control Protocol) and UDP (User Datagram Protocol) are for (that would help ya with your MuServer , like the connection between GS and DS, GS and JS, and even to learn and understand which ports to protect)

Here are some TCP/UDP Ports (sorry if the page gets too big...):
Code:
0/TCP,UDP 	Reserved; do not use (but is a permissible source port value if the sending process does not expect messages in response) 	Official
1/TCP,UDP 	TCPMUX (TCP port service multiplexer) 	Official
5/TCP,UDP 	RJE (Remote Job Entry) 	Official
7/TCP,UDP 	ECHO protocol 	Official
9/TCP,UDP 	DISCARD protocol 	Official
11/TCP,UDP 	SYSTAT protocol 	Official
13/TCP,UDP 	DAYTIME protocol 	Official
15/TCP,UDP 	NETSTAT protocol 	Official
17/TCP,UDP 	QOTD (Quote of the Day) protocol 	Official
18/TCP,UDP 	Message Send Protocol (MSP) 	Official
19/TCP,UDP 	CHARGEN (Character Generator) protocol 	Official
20/TCP 	FTP - data port 	Official
21/TCP 	FTP - control (command) port 	Official
22/TCP,UDP 	SSH (Secure Shell) - used for secure logins, file transfers (scp, sftp) and port forwarding 	Official
23/TCP,UDP 	TELNET protocol - unencrypted text communications 	Official
25/TCP,UDP 	SMTP - used for e-mail routing between mailservers E-mails 	Official
26/TCP,UDP 	RSFTP - A simple FTP-like protocol 	Unofficial
35/TCP,UDP 	Any private printer server protocol 	Official
35/TCP,UDP 	QMS Magicolor 2 printer server protocol 	Unofficial
37/TCP,UDP 	TIME protocol 	Official
39/TCP,UDP 	Resource Location Protocol[2] (RLP) - used for determining the location of higher level services from hosts on a network 	Official
41/TCP,UDP 	Graphics 	Official
42/TCP,UDP 	nameserver, ARPA Host Name Server Protocol 	Official
42/TCP,UDP 	WINS 	Unofficial
43/TCP 	WHOIS protocol 	Official
49/TCP,UDP 	TACACS Login Host protocol 	Official
52/TCP,UDP 	XNS (Xerox Network Services) Time Protocol 	Official
53/TCP,UDP 	DNS (Domain Name Server) 	Official
54/TCP,UDP 	XNS (Xerox Network Services) Clearinghouse 	Official
56/TCP,UDP 	XNS (Xerox Network Services) Authentication 	Official
56/TCP,UDP 	RAP (Route Access Protocol)[3] 	Unofficial
57/TCP 	MTP, Mail Transfer Protocol 	Unofficial
58/TCP,UDP 	XNS (Xerox Network Services) Mail 	Official
67/UDP 	BOOTP (BootStrap Protocol) server; also used by DHCP (Dynamic Host Configuration Protocol) 	Official
68/UDP 	BOOTP client; also used by DHCP 	Official
69/UDP 	TFTP (Trivial File Transfer Protocol) 	Official
70/TCP 	Gopher protocol 	Official
79/TCP 	Finger protocol 	Official
80/TCP 	HTTP (HyperText Transfer Protocol), default web server port, could be anything (even Skype's basic port) 	Official
81/TCP 	Torpark - Onion routing ORport 	Unofficial
82/UDP 	Torpark - Control Port 	Unofficial
83/TCP 	MIT ML Device 	Official
88/TCP 	Kerberos - authenticating agent 	Official
90/TCP,UDP 	dnsix (DoD Network Security for Information Exchange) Securit Attribute Token Map 	Official
90/TCP,UDP 	Pointcast 	Unofficial
101/TCP 	NIC host name 	Official
102/TCP 	ISO-TSAP (Transport Service Access Point) Class 0 protocol[4] 	Official
107/TCP 	Remote TELNET Service[5] protocol 	Official
109/TCP 	POP2, Post Office Protocol, version 2 	Official
110/TCP 	POP3, Post Office Protocol, version 3 	Official
111/TCP,UDP 	Sun Remote Procedure Call protocol 	Official
113/TCP 	ident - old server identification system, still used by IRC servers to identify its users 	Official
115/TCP 	SFTP, Simple File Transfer Protocol 	Official
117/TCP 	UUCP Path Service 	Official
118/TCP,UDP 	SQL (Structured Query Language) Services 	Official
119/TCP 	NNTP (Network News Transfer Protocol) - used for retrieving newsgroups messages 	Official
123/UDP 	NTP (Network Time Protocol) - used for time synchronization 	Official
135/TCP,UDP 	DCE endpoint resolution 	Official
135/TCP,UDP 	Microsoft EPMAP (End Point Mapper), also known as DCE/RPC Locator service[6], used to to remotely manage services including DHCP server, DNS server and WINS 	Unofficial
137/TCP,UDP 	NetBIOS NetBIOS Name Service 	Official
138/TCP,UDP 	NetBIOS NetBIOS Datagram Service 	Official
139/TCP,UDP 	NetBIOS NetBIOS Session Service 	Official
143/TCP,UDP 	IMAP4 (Internet Message Access Protocol 4) - used for retrieving E-mails 	Official
152/TCP,UDP 	Background File Transfer Program (BFTP)[7] 	Official
153/TCP,UDP 	SGMP, Simple Gateway Monitoring Protocol 	Official
156/TCP,UDP 	SQL Service 	Official
158/TCP,UDP 	DMSP, Distributed Mail Service Protocol 	Unofficial
161/TCP,UDP 	SNMP (Simple Network Management Protocol) 	Official
162/TCP,UDP 	SNMPTRAP[8] protocol 	Official
170/TCP 	Print-srv, Network PostScript 	Official
179/TCP 	BGP (Border Gateway Protocol) 	Official
194/TCP 	IRC (Internet Relay Chat) 	Official
201/TCP,UDP 	AppleTalk Routing Maintenance 	Official
209/TCP,UDP 	The Quick Mail Transfer Protocol 	Official
213/TCP,UDP 	IPX 	Official
218/TCP,UDP 	MPP, Message Posting Protocol 	Official
220/TCP,UDP 	IMAP, Interactive Mail Access Protocol, version 3 	Official
259/TCP,UDP 	ESRO, Efficient Short Remote Operations 	Official
264/TCP,UDP 	BGMP, Border Gateway Multicast Protocol 	Official
311/TCP 	AppleShare Admin-Tool, Workgroup-Manager-Tool 	Official
308/TCP 	Novastor Online Backup 	Official
318/TCP,UDP 	PKIX TSP, Time Stamp Protocol 	Official
323/TCP,UDP 	IMMP, Internet Message Mapping Protocol 	Unofficial
366/TCP,UDP 	ODMR, On-Demand Mail Relay 	Official
369/TCP,UDP 	Rpc2portmap 	Official
371/TCP,UDP 	ClearCase albd 	Official
383/TCP,UDP 	HP data alarm manager 	Official
384/TCP,UDP 	A Remote Network Server System 	Official
387/TCP,UDP 	AURP, AppleTalk Update-based Routing Protocol 	Official
389/TCP,UDP 	LDAP (Lightweight Directory Access Protocol) 	Official
401/TCP,UDP 	UPS Uninterruptible Power Supply 	Official
411/TCP 	Direct Connect Hub port 	Unofficial
412/TCP 	Direct Connect Client-To-Client port 	Unofficial
427/TCP,UDP 	SLP (Service Location Protocol) 	Official
443/TCP 	HTTPS - HTTP Protocol over TLS/SSL (encrypted transmission) and it could be Skype Extras 	Official
444/TCP,UDP 	SNPP, Simple Network Paging Protocol 	Official
445/TCP 	Microsoft-DS Active Directory, Windows shares 	Official
445/UDP 	Microsoft-DS SMB file sharing 	Official
464/TCP,UDP 	Kerberos Change/Set password 	Official
465/TCP 	Cisco protocol 	Unofficial
465/TCP 	SMTP over SSL 	Unofficial
475/TCP 	tcpnethaspsrv (Hasp services, TCP/IP version) 	Official
497/TCP 	dantz backup service 	Official
500/UDP 	ISAKMP, IKE-Internet Key Exchange 	Official
502/TCP,UDP 	Modbus, Protocol 	Unofficial
512/TCP 	exec, Remote Process Execution 	Official
512/UDP 	comsat, together with biff 	Official
513/TCP 	Login 	Official
513/UDP 	Who 	Official
514/TCP 	rsh protocol - used to execute non-interactive commandline commands on a remote system 	Official
514/UDP 	syslog protocol - used for system logging 	Official
515/TCP 	Line Printer Daemon protocol - used in LPD printer servers 	Official
517/UDP 	Talk 	Official
518/UDP 	NTalk 	Official
520/TCP 	efs, extended file name server 	Official
520/UDP 	Routing - RIP 	Official
524/TCP,UDP 	NCP (NetWare Core Protocol) is used for a variety things such as access to primary NetWare server resources, Time Synchronization, etc. 	Official
525/UDP 	Timed, Timeserver 	Official
530/TCP,UDP 	RPC 	Official
531/TCP,UDP 	AOL Instant Messenger, IRC 	Unofficial
532/TCP 	netnews 	Official
533/UDP 	netwall, For Emergency Broadcasts 	Official
540/TCP 	UUCP (Unix-to-Unix Copy Protocol) 	Official
542/TCP,UDP 	commerce (Commerce Applications) 	Official
543/TCP 	klogin, Kerberos login 	Official
544/TCP 	kshell, Kerberos Remote shell 	Official
546/TCP,UDP 	DHCPv6 client 	Official
547/TCP,UDP 	DHCPv6 server 	Official
548/TCP 	AFP (Apple Filing Protocol) 	Official
550/UDP 	new-rwho, new-who 	Official
554/TCP,UDP 	RTSP (Real Time Streaming Protocol) 	Official
556/TCP 	Remotefs, RFS, rfs_server 	Official
560/UDP 	rmonitor, Remote Monitor 	Official
561/UDP 	monitor 	Official
563/TCP,UDP 	NNTP protocol over TLS/SSL (NNTPS) 	Official
587/TCP 	email message submission (SMTP) (RFC 2476) 	Official
591/TCP 	FileMaker 6.0 (and later) Web Sharing (HTTP Alternate, also see port 80) 	Official
593/TCP,UDP 	HTTP RPC Ep Map, Remote procedure call over Hypertext Transfer Protocol, often used by Distributed Component Object Model services and Microsoft Exchange Server 	Official
604/TCP 	TUNNEL profile[9], a protocol for BEEP peers to form an application layer tunnel 	Official
631/TCP,UDP 	IPP (Internet Printing Protocol) 	Official
636/TCP,UDP 	LDAP over SSL (encrypted transmission, also known as LDAPS) 	Official
639/TCP,UDP 	MSDP, Multicast Source Discovery Protocol 	Official
646/TCP 	LDP, Label Distribution Protocol, a routing protocol used in MPLS networks 	Official
647/TCP 	DHCP Failover protocol[10] 	Official
648/TCP 	RRP (Registry Registrar Protocol)[11] 	Official
652/TCP 	DTCP, Dynamic Tunnel Configuration Protocol 	Unofficial
654/TCP 	AODV (Ad-hoc On-demand Distance Vector) 	Official
655/TCP 	IEEE MMS (IEEE Media Management System)[12][13] 	Official
657/TCP,UDP 	IBM RMC (Remote monitoring and Control) protocol, used by System p5 AIX Integrated Virtualization Manager (IVM)[14] and Hardware Management Console to connect managed logical partitions (LPAR) to enable dynamic partition reconfiguration 	Official
665/TCP 	sun-dr, Remote Dynamic Reconfiguration 	Unofficial
666/UDP 	Doom, first online first-person shooter 	Official
674/TCP 	ACAP (Application Configuration Access Protocol) 	Official
691/TCP 	MS Exchange Routing 	Official
692/TCP 	Hyperwave-ISP 	Official
694/UDP 	Linux-HA High availability Heartbeat port 	Unofficial
695/TCP 	IEEE-MMS-SSL (IEEE Media Management System over SSL)[15] 	Official
698/UDP 	OLSR (Optimized Link State Routing) 	Official
699/TCP 	Access Network 	Official
700/TCP 	EPP (Extensible Provisioning Protocol), a protocol for communication between domain name registries and registrars 	Official
701/TCP 	LMP (Link Management Protocol (Internet))[16], a protocol that runs between a pair of nodes and is used to manage traffic engineering (TE) links 	Official
702/TCP 	IRIS[17][18] (Internet Registry Information Service) over BEEP (Blocks Extensible Exchange Protocol)[19] 	Official
706/TCP 	SILC, Secure Internet Live Conferencing 	Official
711/TCP 	Cisco TDP, Tag Distribution Protocol[20][21][22] - being replaced by the MPLS Label Distribution Protocol[23] 	Official
712/TCP 	TBRPF, Topology Broadcast based on Reverse-Path Forwarding routing protocol 	Official
712/UDP 	Promise RAID Controller 	Unofficial
720/TCP 	SMQP, Simple Message Queue Protocol 	Unofficial
749/TCP,UDP 	kerberos-adm, Kerberos administration 	Official
750/TCP 	rfile 	Official
750/UDP 	loadav 	Official
750/UDP 	kerberos-iv, Kerberos version IV 	Official
751/TCP,UDP 	pump 	Official
751/TCP,UDP 	kerberos_master, Kerberos authentication 	Unofficial
752/TCP 	qrh 	Official
752/UDP 	qrh 	Official
752/UDP 	userreg_server, Kerberos Password (kpasswd) server 	Unofficial
753/TCP 	Reverse Routing Header (rrh)[24] 	Official
753/UDP 	Reverse Routing Header (rrh) 	Official
753/UDP 	passwd_server, Kerberos userreg server 	Unofficial
754/TCP 	tell send 	Official
754/TCP 	krb5_prop, Kerberos v5 slave propagation 	Unofficial
754/UDP 	tell send 	Official
760/TCP,UDP 	ns 	Official
760/TCP,UDP 	krbupdate [kreg], Kerberos registration 	Unofficial
782/TCP 	Conserver serial-console management server 	Unofficial
829/TCP 	CMP (Certificate Management Protocol) 	Unofficial
860/TCP 	iSCSI 	Official
873/TCP 	rsync file synchronisation protocol default port 	Official
888/tcp 	cddbp, CD DataBase (CDDB) protocol (CDDBP) - unassigned but widespread use 	Unofficial
901/TCP 	Samba Web Administration Tool (SWAT) 	Unofficial
902/TCP 	VMware Server Console[25] 	Unofficial
904/TCP 	VMware Server Alternate (if 902 is in use - i.e. SUSE linux) 	Unofficial
911/TCP 	Network Console on Acid (NCA) - local tty redirection over OpenSSH 	Unofficial
981/TCP 	SofaWare Technologies Remote HTTPS management for firewall devices running embedded Check Point FireWall-1 software 	Unofficial
989/TCP,UDP 	FTP Protocol (data) over TLS/SSL 	Official
990/TCP,UDP 	FTP Protocol (control) over TLS/SSL 	Official
991/TCP,UDP 	NAS (Netnews Administration System) 	Official
992/TCP,UDP 	TELNET protocol over TLS/SSL 	Official
993/TCP 	IMAP4 over SSL (encrypted transmission) 	Official
995/TCP 	POP3 over SSL (encrypted transmission) 	Official
1023/TCP,UDP 	IANA Reserved 	Official

4. And finaly, the Guide, helping ya alot to understand OllyDBg:
DoWnLoaD [FileFront]


Credits:
-Chris05 for the Guide for Olly
-[DarksTeam]ReaL for the Guides, helping ya understand Hex, Asm, TCP & UDP Ports!


Post mirrors to help others download the guide, if they can't from FF! Learn to help others and not to eat from your buddy's plate...
Good Luck and i hope i helped! :bigsmile:
 
Last edited:
  • Like
Reactions: Holder and Security

hamlet

New Member
Joined
Dec 20, 2009
Messages
888
Reaction score
91
не само Българи посещават форума...и не ти е длъжен..
 

Similar threads