Here is an overview of content I published in April:
Blog posts:
- Quickpost: Using My Bash Bunny To “Snag Creds From A Locked Machine”
- Quickpost: Infinite Control For Bash Bunny
- Quickpost: Bash Bunny & Keyboard Layouts
- Update: re-search.py Version 0.0.4
- CVE-2017-0199
- Malicious Documents: The Matryoshka Edition
- New Tool: python-per-line
- Bash Bunny PDF Dropper
YouTube videos:
- Bash Bunny & QuickCreds
- CVE-2017-0199 Demo
- CVE-2017-0199 & Metasploit – Analysis
- Bash Bunny Dropping PDF Via HID
- Malicious Documents: The Matryoshka Edition
Videoblog posts:
- Maldoc Deobfuscation: Plugin sub-str
- oledump & YARA
- Bash Bunny & QuickCreds
- CVE-2017-0199 Demo
- CVE-2017-0199 & Metasploit – Analysis
- Bash Bunny Dropping PDF Via HID
- Malicious Documents: The Matryoshka Edition
SANS ISC Diary entries:
- Domain Whitelisting With Alexa and Umbrella Lists
- Domain Whitelisting With Alexa and Umbrella Lists – update
- Password History: Insights Shared by a Reader
- Malicious Documents: A Bit Of News
NVISO Labs blog posts:
NVISO YouTube videos:
Didier Stevens 
Leave a Reply (comments are moderated)