Skip to content

Didier Stevens Videos

  • Home
  • About
  • count.py

Didier Stevens Videos RSS

  • RSS - Posts

Recent Posts

  • CVE-2021-40444 Maldocs: Extracting URLs
  • Strings Analysis: VBA & Excel4 Maldoc
  • Simple Analysis Of A CVE-2021-40444 .docx Document
  • My YouTube Playlists
  • CyberChef: BASE85 Decoding

Recent Comments

isodump.py | Didier… on The Security Toolsmith (NVISO…
Overview of Content… on Maldoc Analysis With Cybe…
ZIP(EICAR File), Mem… on EICAR File, Memorized
Overview of Content… on AutoCAD & VBA
Overview of Content… on Analyzing .DWG Files With Embe…

Archives

  • October 2021
  • September 2021
  • August 2021
  • July 2021
  • June 2021
  • May 2021
  • April 2021
  • March 2021
  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • July 2020
  • June 2020
  • May 2020
  • April 2020
  • March 2020
  • February 2020
  • January 2020
  • December 2019
  • September 2019
  • July 2019
  • May 2019
  • March 2019
  • February 2019
  • January 2019
  • December 2018
  • September 2018
  • August 2018
  • July 2018
  • June 2018
  • December 2017
  • August 2017
  • July 2017
  • June 2017
  • May 2017
  • April 2017
  • March 2017
  • December 2016
  • November 2016
  • October 2016
  • July 2016
  • May 2016
  • December 2015
  • November 2015
  • October 2015
  • September 2015
  • August 2015
  • July 2015
  • June 2015
  • May 2015
  • April 2015
  • March 2015
  • February 2015
  • January 2015
  • December 2014
  • November 2014
  • October 2014
  • September 2014
  • August 2014
  • July 2014

Categories

  • howto
  • malware
  • my software
  • Science
  • technology
  • Uncategorized
  • video

Meta

  • Register
  • Log in
  • Entries feed
  • Comments feed
  • WordPress.com

CVE-2021-40444 Maldocs: Extracting URLs

Samples: ed2b9e22aef3e545814519151528b2d11a5e73d1b2119c067e672b653ab6855a and 679bbe0c50754853978a3a583505ebb99bce720cf26a6aaf8be06cd879701ff1

Tools: zipdump.py, re-search.py and xmldump.py

ISC diary entry: Simple Analysis Of A CVE-2021-40444 .docx Document

Comment
October 4, 2021 Didier Stevens

Strings Analysis: VBA & Excel4 Maldoc

Tools: CyberChef

Sample: 2013496fe5524988c28357245d684cdca787b47c0b3b16cae20b3222977d769b

ISC Diary Entry: Strings Analysis: VBA & Excel4 Maldoc

Comment
October 2, 2021 Didier Stevens

Simple Analysis Of A CVE-2021-40444 .docx Document

Samples: ed2b9e22aef3e545814519151528b2d11a5e73d1b2119c067e672b653ab6855a and 679bbe0c50754853978a3a583505ebb99bce720cf26a6aaf8be06cd879701ff1

Tools: zipdump.py, re-search.py and xmldump.py

ISC diary entry: Simple Analysis Of A CVE-2021-40444 .docx Document

Comment
September 19, 2021 Didier Stevens

My YouTube Playlists

I started to create YouTube playlists for my videos.

Comment
August 19, 2021August 18, 2021 Didier Stevens

CyberChef: BASE85 Decoding

Tools: CyberChef

CyberChef recipe: pastebin

ISC diary entry: Video: CyberChef BASE85 Decoding

Comment
July 18, 2021 Didier Stevens

Adding BASE85 To base64dump.py

Tool: base64dump.py

ISC Diary entry: BASE85 Decoding With base64dump.py

Comment
July 18, 2021 Didier Stevens

oledump Cheat Sheet

Cheat sheet: oledump.py Quick Reference

Tool: oledump.py

ISC diary entry: Video: oledump Cheat Sheet

Comment
June 20, 2021June 20, 2021 Didier Stevens

ssdeep Python Example Based On My Templates

In this video, I show how to create your own tool based on my Python Templates.

The tool I created is ssdeep.py, essentially a wrapper for the ppdeep Python module.

ssdeep.py allows you to create fuzzy hashes, and compare them.

ssdeep_V0_0_1.zip (https)
MD5: 32FD610D858E91BC009845E105ED87C3
SHA256: 02EA18EF0139B54D8A06AA0D3E7E2B0E2934E3675C453759E3DA3CC4F936F0A2
Comment
June 11, 2021June 11, 2021 Didier Stevens

Cobalt Strike & DNS – Part 1

Tools: cs-dns-stager.py, base64dump.py and 1768.py

Capture file: https://www.malware-traffic-analysis.net/2021/05/21/index2.html

ISC diary entry: Video: Cobalt Strike & DNS – Part 1

Comment
May 30, 2021 Didier Stevens

Making Sense Of Encrypted Cobalt Strike Traffic

Tools: 1768.py.

Brad’s post with pcap file: 2021-05-13 (THURSDAY) – HANCITOR WITH FICKER STEALER AND COBALT STRIKE

Comment
May 22, 2021May 26, 2021 Didier Stevens

Posts navigation

← Older posts
Blog at WordPress.com.
Didier Stevens Videos
Blog at WordPress.com.
 

Loading Comments...