My presentations and articles about cyber security
all my presentations and articles about cyber security
Posts
olefile - a Python module to read/write MS OLE2 files
olefile (formerly OleFileIO_PL) is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office 97-2003 documents, vbaProject.bin in MS Office 2007+ files, Image Composer and FlashPix files, Outlook MSG files, StickyNotes, several Microscopy file formats, McAfee antivirus quarantine files, etc. ...
Weaponized PDF - Payload Delivery Format 2
This article describes the PDF file format, related security issues and useful resources. [WORK IN PROGRESS] ...
SSTIC03 - Malware and file formats
This article explains how many common file formats (DOC, XLS, PDF, HTML, XML, RTF, ...) may hide or trigger malicious code (virus, Trojan horse, ...) using their native features such as active content (macros, Javascript, etc). It was presented at the SSTIC symposium and OSSIR in 2003. This article focuses on all files that can enter a company network by many different means (web, e-mail, USB sticks, CDs, laptops, etc), most of the time without being properly filtered. Once a file is opened by a user, it can easily trigger malicious actions and put the network's security at risk. ...