Didier Stevens

Friday 9 May 2025

Update: oledump.py Version 0.0.81

Filed under: My Software,Update — Didier Stevens @ 0:00

This version brings a new plugin to extract clickable links from Word documents (.doc): plugin_hyperlink.py

oledump_V0_0_81.zip (http)
MD5: CEC519186C49CEA82811491DD0055D94
SHA256: 1F990AC30E6D5992D6888F0CAD6FAECE568DB5C32F54554E3BEA89542481658A

Thursday 8 May 2025

Update: myjson-filter.py Version 0.0.7

Filed under: My Software,Update — Didier Stevens @ 0:00

This new version of myjson-filter brings:

  • option -r (–process) to launch a process per item and pass the content of the item via stdin
  • option -P (–pythonfilter) to filter using a Python function
  • added support for plugins

Plugin plugin_ooxml_url.py is a plugin that extracts clickable links from OOXML documents:

myjson-filter_V0_0_7.zip (http)
MD5: E168A38CBC349F972EDD830A56C949BE
SHA256: AD09A5C50310E9684561FC33AE98C5F8928D6F3B30F8723CF44A3C912590C5AD

Friday 2 May 2025

Update: xorsearch.py Version 0.0.5

Filed under: My Software,Update — Didier Stevens @ 0:00

This version fixes a bug in IsPrintable and adds option -D.

xorsearch_v0_0_5.zip (http)
MD5: 97621F1FCDED7B1B73091112C3C9FFD5
SHA256: 67D5E89A9F3057FF51ADD1C9F66E13D110AA92A64AA2A071828871067AF42241

Thursday 1 May 2025

Overview of Content Published in April

Filed under: Announcement — Didier Stevens @ 0:00
Here is an overview of content I published in April:

Blog posts: SANS ISC Diary entries:

Wednesday 30 April 2025

Update: re-search.py Version 0.0.23

Filed under: My Software,Update — Didier Stevens @ 0:00

I added support for TAB separator and added options –recursedir, –literalfilenames and –checkfilenames.

re-search_V0_0_23.zip (http)
MD5: 2FCFBAC31302EAC4F9863C6945A2A2D5
SHA256: F1707FC8E6CDFEEBA85C332C0F5C278CAA80DB6ADF6C53F4FF4C27F4E086658B

Tuesday 29 April 2025

Update: pdf-parser.py Version 0.7.2

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a YARA bug fix version.

pdf-parser_V0_7_12.zip (http)
MD5: 0FF2CF1888E633DA3B153B0F737EDAA3
SHA256: E3CA6B62A38EBB783CCBD622EB274DE985B4B6B43584B238314662475A23C34F

Monday 28 April 2025

Update: oledump.py Version 0.0.80

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a YARA bug fix version.

oledump_V0_0_80.zip (http)
MD5: E48706848C1F7C008A98369E69CDBE5C
SHA256: 3EB5835CD5F41ABE16CD97852B6321C20CE1077CE56F4FFA1398CC154E239151

Sunday 27 April 2025

Update: zipdump.py Version 0.0.32

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a YARA bug fix version.

zipdump_v0_0_32.zip (http)
MD5: BBA5F10230A1E2E27EDD7578E947EB6C
SHA256: 5E012F5F06049AD3C9A8CB0AD16F90C2EB255AFFA68E124B9E656EEE9A131774

Saturday 26 April 2025

Update: rtfdump.py Version 0.0.13

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a YARA bug fix version.

rtfdump_V0_0_13.zip (http)
MD5: 0D8C3D74449C409332FD8DB9E0CBD39F
SHA256: 640C557DF98B0B80BD0647264E049BF26D68ED93E51222FCAA893025C2EEDC0C

Friday 25 April 2025

Update: pecheck.py Version 0.7.17

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a YARA bug fix version.

pecheck-v0_7_17.zip (http)
MD5: 2C1AEC3183C2E3A3FC45BD642C89716A
SHA256: C4884736955BBE579A6EA0D9A0FB8B7D6457D031593FDF3E89B31CB88CDABFE0
« Previous Page — Next Page »

Blog at WordPress.com.