Didier Stevens

Friday 30 May 2025

Update: oledump.py Version 0.0.82

Filed under: My Software,Update — Didier Stevens @ 0:00

This oledump update brings option –trimnull and updates plugin_vba_dir with option -f (–force).

oledump_V0_0_82.zip (http)
MD5: 9133DB7CF8F4B69458842518CEAC6F88
SHA256: 7F634930C9B5986EFDC6016B05F67A3058B1B3710D0F3DB052C7FC993A859CB4

Thursday 29 May 2025

Update: process-binary-file.py Version 0.0.11

Filed under: My Software,Update — Didier Stevens @ 0:00

Option –jsonoutput was added to produce MyJSON data for the files that are read.

python-templates_V0_0_13.zip (http)
MD5: 92977C70DAA8E83BB005A9B6A124129B
SHA256: EB32C86A5F1205B9CC919499BB21171B23A8A365866CF7C3C253BB3600E53A70

Friday 9 May 2025

Update: oledump.py Version 0.0.81

Filed under: My Software,Update — Didier Stevens @ 0:00

This version brings a new plugin to extract clickable links from Word documents (.doc): plugin_hyperlink.py

oledump_V0_0_81.zip (http)
MD5: CEC519186C49CEA82811491DD0055D94
SHA256: 1F990AC30E6D5992D6888F0CAD6FAECE568DB5C32F54554E3BEA89542481658A

Thursday 8 May 2025

Update: myjson-filter.py Version 0.0.7

Filed under: My Software,Update — Didier Stevens @ 0:00

This new version of myjson-filter brings:

  • option -r (–process) to launch a process per item and pass the content of the item via stdin
  • option -P (–pythonfilter) to filter using a Python function
  • added support for plugins

Plugin plugin_ooxml_url.py is a plugin that extracts clickable links from OOXML documents:

myjson-filter_V0_0_7.zip (http)
MD5: E168A38CBC349F972EDD830A56C949BE
SHA256: AD09A5C50310E9684561FC33AE98C5F8928D6F3B30F8723CF44A3C912590C5AD

Friday 2 May 2025

Update: xorsearch.py Version 0.0.5

Filed under: My Software,Update — Didier Stevens @ 0:00

This version fixes a bug in IsPrintable and adds option -D.

xorsearch_v0_0_5.zip (http)
MD5: 97621F1FCDED7B1B73091112C3C9FFD5
SHA256: 67D5E89A9F3057FF51ADD1C9F66E13D110AA92A64AA2A071828871067AF42241

Wednesday 30 April 2025

Update: re-search.py Version 0.0.23

Filed under: My Software,Update — Didier Stevens @ 0:00

I added support for TAB separator and added options –recursedir, –literalfilenames and –checkfilenames.

re-search_V0_0_23.zip (http)
MD5: 2FCFBAC31302EAC4F9863C6945A2A2D5
SHA256: F1707FC8E6CDFEEBA85C332C0F5C278CAA80DB6ADF6C53F4FF4C27F4E086658B

Tuesday 29 April 2025

Update: pdf-parser.py Version 0.7.2

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a YARA bug fix version.

pdf-parser_V0_7_12.zip (http)
MD5: 0FF2CF1888E633DA3B153B0F737EDAA3
SHA256: E3CA6B62A38EBB783CCBD622EB274DE985B4B6B43584B238314662475A23C34F

Monday 28 April 2025

Update: oledump.py Version 0.0.80

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a YARA bug fix version.

oledump_V0_0_80.zip (http)
MD5: E48706848C1F7C008A98369E69CDBE5C
SHA256: 3EB5835CD5F41ABE16CD97852B6321C20CE1077CE56F4FFA1398CC154E239151

Sunday 27 April 2025

Update: zipdump.py Version 0.0.32

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a YARA bug fix version.

zipdump_v0_0_32.zip (http)
MD5: BBA5F10230A1E2E27EDD7578E947EB6C
SHA256: 5E012F5F06049AD3C9A8CB0AD16F90C2EB255AFFA68E124B9E656EEE9A131774

Saturday 26 April 2025

Update: rtfdump.py Version 0.0.13

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a YARA bug fix version.

rtfdump_V0_0_13.zip (http)
MD5: 0D8C3D74449C409332FD8DB9E0CBD39F
SHA256: 640C557DF98B0B80BD0647264E049BF26D68ED93E51222FCAA893025C2EEDC0C

« Previous Page — Next Page »

Blog at WordPress.com.