I added a new option to my different dump tools (oledump, emldump, base64dump, zipdump and the new rtfdump): the cut option. And I will also release a standalone cut tool.
This option allows you to cut out a part of a data stream. For example to extract a PE file hidden in a byte stream.
The first updated tool to get published is oledump:
oledump_V0_0_18.zip (https)
MD5: 88C9999726C0157267E2FF31E137D66C
SHA256: 1FC9EE7A0BB5A016339C73CBE5DE2F2C0A9C006BC924A5F9346F9F4EDE060939
Here I demo the –cut option in a new video:
Didier Stevens 