This is a fix for option –yarastrings.
pecheck-v0_7_20.zip (http)MD5: DB34684DA9A5DEC0E94746328318FFE1
SHA256: F6B702206E4DAE3971778263F4B234F7E77BA91A3A1F59419D12CA312316CA96
Wednesday 11 March 2026
Update: pecheck.py Version 0.7.20
MD5: DB34684DA9A5DEC0E94746328318FFE1
SHA256: F6B702206E4DAE3971778263F4B234F7E77BA91A3A1F59419D12CA312316CA96
Tuesday 10 March 2026
Update: search-for-compression.py 0.0.6
This is a fix for option –yarastrings in search-for-compression.py.
Monday 9 March 2026
Update: emldump.py Version 0.0.16
This is a fix for option –yarastrings.
emldump_V0_0_16.zip (http)MD5: FF80F7768800EB5AB3A77FEF3E162285
SHA256: 87A33A9345C927B56377CBEC04811826930866C181885A6793F70C53A3418426
Sunday 8 March 2026
Update: base64dump.py Version 0.0.29
This is a fix for option –yarastrings.
base64dump_V0_0_29.zip (http)MD5: CA3FD00D6AD8B6C0CD091526E3D45D72
SHA256: 2B203BF336D4D7971E4277CE9438D271E9F002E75A2386B97BA61C543D712964
Monday 2 March 2026
Overview of Content Published in February
Here is an overview of content I published in February:
Blog posts:
SANS ISC Diary entries:
Saturday 21 February 2026
Update: rtfdump.py Version 0.0.15
This is a fix for option –yarastrings.
rtfdump_V0_0_15.zip (http)MD5: C70F327DDC11B549A399B2F85B2B9607
SHA256: 9EFDEB5978372BD93065BCDAB6486DAECA4CB7E2EDA15DD5BD4C98AF69FB19A7
Friday 20 February 2026
Update: rtfdump.py Version 0.0.14
This update adds option -C (–combinations). When this option is used together with -j (–jsonoutput), 2 extra versions of each stream are added. One with option -H enabled, and one with option -H and -S enabled.
rtfdump_V0_0_14.zip (http)MD5: D9BBA8F83E04D4FD25268E7A2BB4653E
SHA256: DB852CEDA1AE368FF32C1D12951A02BD7A4E36C74632D0D1F790C700FB298689
Sunday 1 February 2026
Overview of Content Published in January
Here is an overview of content I published in January:
Blog posts:
SANS ISC Diary entries:
Sunday 18 January 2026
Update: zipdump.py Version 0.0.33
This update adds pseudo-field sha256 which can be used to calculate the sha256 hash of the content (compressed or decompressed):
-E sha256:data
-E sha256:data:decompress
-E sha256:decompress
-E sha256:extra
MD5: ABF2AC037D2CB7E26664D28B109E9293
SHA256: A80E956072E9C4E3051992EA3E551444585854747EFE2A997A232E6F5B94E8E4
Saturday 17 January 2026
Update: hash.py Version 0.0.14
This is a bug fix version.
hash_V0_0_14.zip (http)MD5: 66A205915A280CC474541053739B8EDD
SHA256: C459B75F132BB4AA394D8EA27A79F409C446AAA67536946673EC824EA9219F9F
Didier Stevens 