Didier Stevens

Wednesday 11 March 2026

Update: zipdump.py Version 0.0.34

Filed under: My Software,Update — Didier Stevens @ 9:22

This is a fix for option –yarastrings.

zipdump_v0_0_34.zip (http)
MD5: F2BB1DF9A4E1BA323D85C3F8F71B5E69
SHA256: 2455A026DB2BE1678AD8F1AAC2D148D40A7AB7412CCE180C3E9E1FC4B39B9378

Update: pecheck.py Version 0.7.20

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a fix for option –yarastrings.

pecheck-v0_7_20.zip (http)
MD5: DB34684DA9A5DEC0E94746328318FFE1
SHA256: F6B702206E4DAE3971778263F4B234F7E77BA91A3A1F59419D12CA312316CA96

Tuesday 10 March 2026

Update: search-for-compression.py 0.0.6

Filed under: Beta,My Software,Update — Didier Stevens @ 0:00

This is a fix for option –yarastrings in search-for-compression.py.

Monday 9 March 2026

Update: emldump.py Version 0.0.16

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a fix for option –yarastrings.

emldump_V0_0_16.zip (http)
MD5: FF80F7768800EB5AB3A77FEF3E162285
SHA256: 87A33A9345C927B56377CBEC04811826930866C181885A6793F70C53A3418426

Sunday 8 March 2026

Update: base64dump.py Version 0.0.29

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a fix for option –yarastrings.

base64dump_V0_0_29.zip (http)
MD5: CA3FD00D6AD8B6C0CD091526E3D45D72
SHA256: 2B203BF336D4D7971E4277CE9438D271E9F002E75A2386B97BA61C543D712964

Monday 2 March 2026

Overview of Content Published in February

Filed under: Announcement — Didier Stevens @ 9:06
Here is an overview of content I published in February:

Blog posts:
SANS ISC Diary entries:

Saturday 21 February 2026

Update: rtfdump.py Version 0.0.15

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a fix for option –yarastrings.

rtfdump_V0_0_15.zip (http)
MD5: C70F327DDC11B549A399B2F85B2B9607
SHA256: 9EFDEB5978372BD93065BCDAB6486DAECA4CB7E2EDA15DD5BD4C98AF69FB19A7

Friday 20 February 2026

Update: rtfdump.py Version 0.0.14

Filed under: My Software,Update — Didier Stevens @ 0:00

This update adds option -C (–combinations). When this option is used together with -j (–jsonoutput), 2 extra versions of each stream are added. One with option -H enabled, and one with option -H and -S enabled.

rtfdump_V0_0_14.zip (http)
MD5: D9BBA8F83E04D4FD25268E7A2BB4653E
SHA256: DB852CEDA1AE368FF32C1D12951A02BD7A4E36C74632D0D1F790C700FB298689

Sunday 1 February 2026

Overview of Content Published in January

Filed under: Announcement — Didier Stevens @ 10:24
Here is an overview of content I published in January:

Blog posts:
SANS ISC Diary entries:

Sunday 18 January 2026

Update: zipdump.py Version 0.0.33

Filed under: My Software,Update — Didier Stevens @ 0:00

This update adds pseudo-field sha256 which can be used to calculate the sha256 hash of the content (compressed or decompressed):
-E sha256:data
-E sha256:data:decompress
-E sha256:decompress
-E sha256:extra

zipdump_v0_0_33.zip (http)
MD5: ABF2AC037D2CB7E26664D28B109E9293
SHA256: A80E956072E9C4E3051992EA3E551444585854747EFE2A997A232E6F5B94E8E4
Next Page »

Blog at WordPress.com.