Didier Stevens

Monday 28 April 2025

Update: oledump.py Version 0.0.80

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a YARA bug fix version.

oledump_V0_0_80.zip (http)
MD5: E48706848C1F7C008A98369E69CDBE5C
SHA256: 3EB5835CD5F41ABE16CD97852B6321C20CE1077CE56F4FFA1398CC154E239151

Sunday 27 April 2025

Update: zipdump.py Version 0.0.32

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a YARA bug fix version.

zipdump_v0_0_32.zip (http)
MD5: BBA5F10230A1E2E27EDD7578E947EB6C
SHA256: 5E012F5F06049AD3C9A8CB0AD16F90C2EB255AFFA68E124B9E656EEE9A131774

Saturday 26 April 2025

Update: rtfdump.py Version 0.0.13

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a YARA bug fix version.

rtfdump_V0_0_13.zip (http)
MD5: 0D8C3D74449C409332FD8DB9E0CBD39F
SHA256: 640C557DF98B0B80BD0647264E049BF26D68ED93E51222FCAA893025C2EEDC0C

Friday 25 April 2025

Update: pecheck.py Version 0.7.17

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a YARA bug fix version.

pecheck-v0_7_17.zip (http)
MD5: 2C1AEC3183C2E3A3FC45BD642C89716A
SHA256: C4884736955BBE579A6EA0D9A0FB8B7D6457D031593FDF3E89B31CB88CDABFE0

Thursday 24 April 2025

Update: emldump.py Version 0.0.15

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a YARA bug fix version.

emldump_V0_0_15.zip (http)
MD5: 6D329CFCF3417518870D7096E51277E7
SHA256: 5754B5F22D0BD10CBB29727C7CC4EC98407DDC920AD9F846587DE4F269279ABE

Wednesday 23 April 2025

Update: basedump64.py Version 0.0.28

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a YARA bug fix version.

base64dump_V0_0_28.zip (http)
MD5: 19B560408531D0BCE4D90C4CF94FE6A6
SHA256: 9A3734410A2054B8F93CB693C23F7AE475B3B79877FA2B9EC5E6DBCD05682D40

Tuesday 22 April 2025

Update: xorsearch.py Version 0.0.4

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a YARA bug fix version.

xorsearch_v0_0_4.zip (http)
MD5: 762F589E29847BF0CFE31FF0D38259BF
SHA256: 52EFA3EC74A4F79081E320C572793153CD300501BE48760A28194F9624EAE053

Tuesday 15 April 2025

Update: xorsearch.py Version 0.0.3

Filed under: My Software,Update — Didier Stevens @ 0:00

I added option –verbose to visualize generated YARA rules.

xorsearch_v0_0_3.zip (http)
MD5: 394557EDD88EF9862ACC97D15A2308A3
SHA256: D8FE6914F25FEC4E589A3F3EF7C30F8281C0B918D9254B8AEB2322D2BB8DAE36

Monday 14 April 2025

Update: xorsearch.py Version 0.0.2

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a rewrite of xorsearch.py, an implementation of XORsearch.exe in Python.

xorsearch_v0_0_2.zip (http)
MD5: 4AA44E14060B461405AD670AE20D4AAC
SHA256: F452BC239664A1516070D79596C2FC5238963833440C66CD77DC8892C30A3D0D

Saturday 15 March 2025

Update: zipdump.py Version 0.0.31

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a bug fix version.

zipdump_v0_0_31.zip (http)
MD5: 8EA7D6DBC2877C0E8F3635F06F6E5639
SHA256: C063421D1A87E1DB08205948D481CD733F1F170398D990711F92F4F5921134A4

« Previous Page — Next Page »

Blog at WordPress.com.