I was a bit too quick with my release for –jsonoutput, I made yet some more changes in version 0.0.36 now.
oledump_V0_0_36.zip (https)
MD5: D8C9FBFD1AA2238D6EB3CA164EE91A65
SHA256: BE609FD0D976984A8856939B76D7DF54AB5ED4934F58F7AD47E4D6E42CDFCCBF
Sunday 8 July 2018
Update: oledump.py Version 0.0.36
Update: zipdump.py Version 0.0.14
I was a bit too quick with my release for –jsonoutput, I made yet some more changes in version 0.0.14 now.
zipdump_v0_0_14.zip (https)
MD5: FB7D1A9F90E8453DF7F3154EC52AF4E7
SHA256: ADFF99677DB512A27EBDEBBAC77FA08FFF8B180EF620CB6F9725C06511FC38BF
Saturday 7 July 2018
Update: zipdump.py Version 0.0.13
This update introduces option -j (–jsonoutput) to zipdump.py. Soon I will explain how to use this option together with a new tool I will release soon.
zipdump_v0_0_13.zip (https)
MD5: 264D32D0DC863FC29FED161D4A73560F
SHA256: 14D11D5244973A484E5754F20747D4B544C228AC951C885FE8B9FC6D26C86088
Tuesday 3 July 2018
Update: oledump.py Version 0.0.35
This updated brings some changes to option -j (–jsonoutput), an option introduced with version 0.0.33. Soon I will explain how to use this option together with a new tool I will release soon.
oledump_V0_0_35.zip (https)
MD5: 2089AFC496FFE2E44F67CF9C44EB101B
SHA256: C232282BD8AE050EECA1455E6A58EAB8D5CBBDF0D61E9FE2077CDA3DEB15D325
Monday 2 July 2018
Overview of Content Published in June
Here is an overview of content I published in June:
Blog posts:
- Quickpost: John & Dummy Hashes
- Encrypted OOXML Documents
- Update: pecheck.py Version 0.7.3
- “Here Files” and my Tools
- Update: jpegdump.py Version 0.0.5
- Update: translate.py Version 2.5.4
- Update: cut-bytes.py Version 0.0.7
- Update: hash.py version 0.0.5
- Validating Your Downloads
- Update: jpegdump.py Version 0.0.6
- Update: zipdump.py Version 0.0.12
- Quickpost: Decoding Certutil Encoded Files
- Update: re-search.py Version 0.0.10
YouTube videos:
Videoblog posts:
- Fileless Input Options
- New Output Options
- PDF: April 1st 2018
- SpiderMonkey Output Options
- VBA Maldoc: Form-Embedded PE File
- VirusTotal Upload
- Wireshark comments
- .xlsm: Button & VBA & PowerShell & EXE
- Analyzing XPS Files
SANS ISC Diary entries:
Sunday 1 July 2018
Update: re-search.py Version 0.0.11
This new version of re-search.py comes with a new option: -e. This option instructs re-search to read its input as a binary file and extract strings from it, to be matched with the chosen regular expression. This allows, for example, the processing of UNICODE strings.
re-search_V0_0_11.zip (https)
MD5: 72F160A83E214351162704EB4B94EB9E
SHA256: 624E2864738008F6A63CC4E3F7B5FCB3738389DBC7E6EF29BC8C2F749ABAD9DE
Didier Stevens 