Didier Stevens

Thursday 1 October 2026

Overview of Content Published in September

Filed under: Announcement — Didier Stevens @ 18:45
Here is an overview of content I published in September:

Blog posts:
SANS ISC Diary entries:

Wednesday 30 September 2026

Update: search-for-compression.py Version 0.0.8

Filed under: My Software,Update — Didier Stevens @ 7:33

I’ve noticed when a zlib compressed chunk of data is followed by other data, search-for-compression.py will not always be able to detect the compressed chunk. This is caused by the fact that the other data generates a decompression error, and the complete chunk is disregarded.

I’ve added a new option to try to solve this: -S

Option -S takes a value, a positive number. It’s the size of the decompression buffer. By default, its value is 0.

When you try -S 100 for example, search-for-compression.py will try to decompress up to 100 bytes. If that succeeds, then we assume that we found compressed data, and search-for-compression.py will try to decompress the remainder of the data until either a decompression error occurs, or there is no more data. But when an error occurs, search-for-compression.py will revert to the last decompression without error, and report that.

search-for-compression.py is still in my beta repository.

Tuesday 1 September 2026

Overview of Content Published in August

Filed under: Announcement — Didier Stevens @ 8:33
Here is an overview of content I published in August:

Blog posts:
SANS ISC Diary entries:

Sunday 23 August 2026

Update: base64dump.py Version 0.0.31

Filed under: My Software,Update — Didier Stevens @ 17:44

More info on this update: “zipdump.py: Metadata Encoding“.

base64dump_V0_0_31.zip (http)
MD5: E54FFB4F618E47FAA724C9F16CF21E7A
SHA256: 9475E4184790583265106CBA0FBD04546A7BF4B1B67A569F2B96D432E6F16E2D

Saturday 1 August 2026

Overview of Content Published in July

Filed under: Uncategorized — Didier Stevens @ 10:44
Here is an overview of content I published in July:

SANS ISC Diary entries:

Wednesday 1 July 2026

Overview of Content Published in June

Filed under: Announcement — Didier Stevens @ 9:04
Here is an overview of content I published in June:

Blog posts:
SANS ISC Diary entries:

Tuesday 30 June 2026

Update: base64dump.py Version 0.0.30

Filed under: My Software,Update — Didier Stevens @ 19:12

This new version adds option –stats. For more details, take a look at SANS Internet Storm Center diary entry “Evil MSI Background: BASE64 Statistical Analysis“.

base64dump_V0_0_30.zip (http)
MD5: E54FFB4F618E47FAA724C9F16CF21E7A
SHA256: 9475E4184790583265106CBA0FBD04546A7BF4B1B67A569F2B96D432E6F16E2D

Monday 1 June 2026

Overview of Content Published in May

Filed under: Announcement,Uncategorized — Didier Stevens @ 7:33
Here is an overview of content I published in May:

Blog posts:
SANS ISC Diary entries:

Saturday 23 May 2026

Update: search-for-compression.py Version 0.0.7

Filed under: My Software,Update — Didier Stevens @ 11:46

This is a small bug fix for search-for-compression.py, and I’m also taking it out of the beta repository and putting it into the DidierStevensSuite repository.

search-for-compression_V0_0_7.zip (http)
MD5: DD113FF41851A562D271804E4558EA08
SHA256: 6E663316F774BA5B373704E7FE41B8266F5D1ADC618327F9F2C4C4C830A1B3DE

Friday 1 May 2026

Overview of Content Published in April

Filed under: Announcement — Didier Stevens @ 9:28
Here is an overview of content I published in April:

Blog posts:
SANS ISC Diary entries:

Next Page »

Blog at WordPress.com.