Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 04-22-2004, 13:06
Rhodium
 
Posts: n/a
Why use Softice over Olly?

Apart from debugging low level stuff, what advantages does Softice have over Olly?

I love Olly, but I am more comfortable with Softice now.
Reply With Quote
  #2  
Old 04-22-2004, 14:58
zEr0 zEr0 is offline
Friend
 
Join Date: Mar 2002
Posts: 27
Rept. Given: 1
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 2
Thanks Rcvd at 0 Times in 0 Posts
zEr0 Reputation: 1
hehe OK

so can you tell me how you wold debug low level windows NT driver and services in Olly? Olly is only Ring3 debugger so you can't debug it in Olly

http://www.exetools.com/forum/showthread.php?t=3981

and

small crackme to show advantages SICE

http://picasso.poupe.net/vbulletin/showthread.php?s=&threadid=562



with Olly you can debug only part of this crackme
Reply With Quote
  #3  
Old 04-22-2004, 16:49
SIce
 
Posts: n/a
Thumbs up because

ollydebuger work better then softice
Reply With Quote
  #4  
Old 04-22-2004, 17:29
Kameo Kameo is offline
Friend
 
Join Date: Mar 2004
Posts: 87
Rept. Given: 3
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 12
Thanks Rcvd at 1 Time in 1 Post
Kameo Reputation: 1
i like olly coz i use it only when needed, contrary to SIce which is always there
Reply With Quote
  #5  
Old 04-22-2004, 20:11
qwerty3
 
Posts: n/a
Same programs contain SOFTICE anti-debug detection => then use other debugger, for example Olly.
Reply With Quote
  #6  
Old 04-22-2004, 21:49
mc707
 
Posts: n/a
OllyDbg rulez
Reply With Quote
  #7  
Old 04-22-2004, 22:14
Friky
 
Posts: n/a
OllyDbg is pretty fine (by me), but, i personally use SoftICE most of the time.

Quote from Fravia RCE FAQ :
"Is it better to use Softice or Ollydbg?
Even if Softice is more powerfull than Ollydbg, Ollydbg works well on most applications; the main difference is that Softice is kernel-mode and Ollydbg is user-mode... make your choice.
"

From my expirience, there is much more 'anti protection' for SoftICE cuz it's more spread thru the crackers...

But, as advanced reverser, you should know how to use both of them, same as u use IDA and W32Dasm for disassembling ...

Hope this helps

-
Fr1c [F8]
Reply With Quote
  #8  
Old 04-22-2004, 23:31
D4M4G3_C453
 
Posts: n/a
I prefer using Olly coz I think it is more comfortable than SICE, but sometimes I have to use SICE coz it's more powerfull (obvious), but software manufacturers use Anti-SICE tricks too much now.
So I think you should be able to use both debuggers. Just choose your favorite one and use it in most cases and the second one will be an alternative tool.
Reply With Quote
  #9  
Old 04-23-2004, 11:45
TQN TQN is offline
VIP
 
Join Date: Apr 2003
Location: Vietnam
Posts: 358
Rept. Given: 143
Rept. Rcvd 24 Times in 13 Posts
Thanks Given: 196
Thanks Rcvd at 168 Times in 51 Posts
TQN Reputation: 24
With OllyDbg, we can write a plugin for it. Write a "plugin" for SoftIce is hard, we need to write a KMD (IceDump, IceExt) or a WinDbg extension. Not many people can do it. And with OllyScript, we can automatic do many jobs.
The current version of OllyDbg can not load .pdb file from symbols path. I have mailed to Olek this problem. Hope he will fix it. If he not, I plan to write a plugin to load .pdb files of system DLLs and a plugin to invoke the MSDN from OllyDbg. I need more times.
Reply With Quote
  #10  
Old 04-23-2004, 14:32
zEr0 zEr0 is offline
Friend
 
Join Date: Mar 2002
Posts: 27
Rept. Given: 1
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 2
Thanks Rcvd at 0 Times in 0 Posts
zEr0 Reputation: 1
yes

i have the same opinion as many of us here

it's very very necessary to have many various tools, so it's good to have both of this debugger

then you can choose

i agree that olly is more comfortable than SICE and is much less anti Olly tricks than SICE antidebug
Reply With Quote
  #11  
Old 04-23-2004, 20:46
ManSun
 
Posts: n/a
Good!

SI is good & Olly is good,but run on problem
Reply With Quote
  #12  
Old 04-23-2004, 22:19
iwill
 
Posts: n/a
olly is better than Sice, it's much easier to use.
Reply With Quote
  #13  
Old 04-23-2004, 22:24
CoolWolF
 
Posts: n/a
olly works in ring3 and si works in ring0
Reply With Quote
  #14  
Old 04-24-2004, 07:54
Y0KK3N
 
Posts: n/a
I can't even get SoftICE to work, so I really don't know the difference.
Reply With Quote
  #15  
Old 04-25-2004, 05:07
doskey
 
Posts: n/a
OllyDbg is working in USER MODE, and S-ICE is working in Kernel MODE(RING3 and RING0).
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
WinXP + Loaded SoftICE (NuMega DS 2.6 || SoftICE Suite 2.6) NOT SHOTDOWNING... sky General Discussion 0 08-23-2002 06:24


All times are GMT +8. The time now is 00:22.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )