Here is an overview of content I published in March:
Blog posts:
- Even More Obfuscated MIME Type Files
- Update: oledump.py Version 0.0.23
- YARA Rule To Detect VBE Scripts
- Decoding VBE
SANS ISC Diary entries:
Sunday 17 April 2016
Overview of Content Published In March
Tuesday 29 March 2016
Overview of Content Published In February
Here is an overview of content I published in February:
Blog posts:
- Update: numbers-to-hex.py Version 0.0.2
- Create Your Own CMD.XLS
- Update: translate.py Version 2.2.0 for Locky JavaScript Deobfuscation
- More Obfuscated MIME Type Files
SANS ISC Diary entries:
Tuesday 9 February 2016
Overview of Content Published In January
Here is an overview of content I published in January:
Blog posts:
- BlackEnergy .XLS Dropper Puzzle
- Update: base64dump.py Version 0.0.4
- Update: emldump.py Version 0.0.6
- Update: xor-kpa.py Version 0.0.2
- Update: cut-bytes.py Version 0.0.3
YouTube Videos:
- xor-kpa.py: XOR Known-Plaintext Attack
- Creating CMD.XLS
- CMD.DLL: From DLL To VBA
- BlackEnergy .XLS Dropper
SANS ISC Diary entries:
Wednesday 20 January 2016
Overview of Content Published In December
Here is an overview of content I published in December:
Blog posts:
- Windows Backup Privilege: CMD.EXE
- BruCON Spring Training 2016: Analysing Malicious Documents
- Update: oledump.py Version 0.0.22
- MIME File With “Header”
- Maldoc GET Range
- SHA256 Code Signing and Microsoft
YouTube videos:
Videoblog posts:
SANS ISC Diary entries:
Monday 14 December 2015
BruCON Spring Training 2016: Analysing Malicious Documents
I teach a class on analyzing malicious documents at BruCON Spring Training 2016.
First day covers PDF, second day covers MS Office documents. When you attend, you also get my PDF and MS Office workshop videos.
Early bird registration till the end of the year.
Friday 11 December 2015
Overview of Content Published In November
Here is an overview of content I published in November:
Blog posts:
- Analysis Of An Office Maldoc With Encrypted Payload (Quick And Dirty)
- Analysis Of An Office Maldoc With Encrypted Payload (Slow And Clean)
- Analysis Of An Office Maldoc With Encrypted Payload: oledump plugin
- Update: translate.py V2.1.0
- byte-stats.py
- Update: oledump V0.0.20
- Update: emldump.py Version 0.0.4
- Update: cut-bytes.py Version 0.0.2
- Update: find-file-in-file.py Version 0.0.5
- Maldoc Social Engineering Trick
- Update: nsrl.py Version 0.0.2
- Update: emldump.py Version 0.0.5
- Authenticode And Timestamping And sha256
- Update: virustotal-search.py Version 0.1.3
- Update: oledump.py Version 0.0.21
- Update: Authenticode Tools
YouTube videos:
- byte-stats.py
- oledump.py –extra
- Maldoc Social Engineering Trick
- CMD.EXE: Backup Privilege
- SpiderMonkey: Dump
Videoblog posts:
SANS ISC Diary entries:
Wednesday 4 November 2015
Overview of Content Published In October
Here is an overview of content I published in October:
Blog posts:
- Update: base64dump.py Version 0.0.3
- Release: emldump.py Version 0.0.3
- cut-bytes.py
- New workshop videos: Malicious Office Documents Part 1
Videoblog posts:
SANS ISC Diary entries:
Monday 19 October 2015
New workshop videos: Malicious Office Documents Part 1
This week I will teach my Malicious Office Documents workshop at hack.lu, explaining how to use my oledump tool.
If you can not attend and are interested, I sell videos for this new workshop. And I also do a promo: if you buy my bundle of 3 workshops, you get the new Malicious Office Documents Part 1 workshop for free. In a nutshell: you pay €60 for 4 workshops in stead of €100.
Wednesday 22 July 2015
Friday 26 December 2014
YouTube Video Promo
I produced 21 technical videos this year. You can find them on YouTube and my video blog (sometimes I also post beta versions of my new tools along with the video on my video blog).
I decided to run a promo for my Didier Stevens Labs videos: If you buy one of my products, you get to download the original MP4 files I uploaded to my free YouTube channel. This offer is also valid for existing clients.
Didier Stevens 