Didier Stevens

Tuesday 15 April 2025

Update: xorsearch.py Version 0.0.3

Filed under: My Software,Update — Didier Stevens @ 0:00

I added option –verbose to visualize generated YARA rules.

xorsearch_v0_0_3.zip (http)
MD5: 394557EDD88EF9862ACC97D15A2308A3
SHA256: D8FE6914F25FEC4E589A3F3EF7C30F8281C0B918D9254B8AEB2322D2BB8DAE36

Monday 14 April 2025

Update: xorsearch.py Version 0.0.2

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a rewrite of xorsearch.py, an implementation of XORsearch.exe in Python.

xorsearch_v0_0_2.zip (http)
MD5: 4AA44E14060B461405AD670AE20D4AAC
SHA256: F452BC239664A1516070D79596C2FC5238963833440C66CD77DC8892C30A3D0D

Sunday 13 April 2025

Overview of Content Published in March

Filed under: Announcement — Didier Stevens @ 7:53
Here is an overview of content I published in March:

Blog posts: SANS ISC Diary entries:

Sunday 30 March 2025

Quickpost: Electrical Power & Mining: Dissipated Heat

Filed under: Hardware,Quickpost — Didier Stevens @ 0:00

I got an interesting question on my blog post “Quickpost: Electrical Power & Mining“:

Does the temperature in your room increase due to the miner running full blast? Would you turn down the heater to compensate (which may change the calculation slightly).

That was indeed the case: I did turn down the heating in the room, and the heat of the desktop computer made it a nice 20°C.

We heat our home with natural gas, and on that day, we consumed 2,23 cubic meters to heat the rooms in our house, except for the office where the computer was running. Counting the volumes of the rooms, I estimate that 0,55 cubic meters would have been necessary to heat the office.

Using that same spreadsheet, consuming an extra 0,55 cubic meter would cost me €0,55. Deducting this from the €3,91 I had to spend on electricity gives me €3,36, which is still around 10 times more than the €0,39 I earned through mining.


Quickpost info

Saturday 15 March 2025

Update: zipdump.py Version 0.0.31

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a bug fix version.

zipdump_v0_0_31.zip (http)
MD5: 8EA7D6DBC2877C0E8F3635F06F6E5639
SHA256: C063421D1A87E1DB08205948D481CD733F1F170398D990711F92F4F5921134A4

Monday 10 March 2025

Update: xmldump.py Version 0.0.10

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a bugfix version.

xmldump_V0_0_10.zip (http)
MD5: 8A42C57B10E9D41CCD4D48C2C618431B
SHA256: F0E37F1B61D065A92E2F2C3A678CDE101413BE6099A89AA81FB7C80F18965966

Sunday 9 March 2025

Update: pdf-parser.py Version 0.7.11

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a bugfix version.

pdf-parser_V0_7_11.zip (http)
MD5: 54425CBB5E3E88D931AE7A627105947E
SHA256: 4B550F11DBEA5EE3CF10C842AC1C290407E6BD2A60ECFA2EE192E2D3663227B9

Saturday 8 March 2025

Update: pdfid.py Version 0.2.10

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a bugfix version.

pdfid_v0_2_10.zip (http)
MD5: E2F369B34D7148BE4D5C4C02430E7983
SHA256: A677336B1CF51386E35DBDED8FDB79F27368FD5D5ECC3FC5C8DA020A029CB6B6

Friday 7 March 2025

Update: 1768.py Version 0.0.23

Filed under: My Software,Update — Didier Stevens @ 0:31

This is an update with new stats.

1768_v0_0_23.zip (http)
MD5: 04641D1CCDABDD16FB303B89235AAC53
SHA256: 708D849F11D6614B55AAF0154445CEEC12AC7ADBE02260D8FF567FC4A02C193E

Thursday 6 March 2025

Update: oledump.py Version 0.0.79

Filed under: My Software,Update — Didier Stevens @ 0:00

This is a bug fix version.

oledump_V0_0_79.zip (http)
MD5: 5463B7660B15EA1AE4C9F2792CECB512
SHA256: EA56C4A4C261C499ECE5C19EB0E53607E497253110953F6050177516C0728E02

« Previous PageNext Page »

Blog at WordPress.com.