How to detect PDFs exploiting CVE-2026-86950

How to detect malicious PDF documents exploiting the Apple iOS/macOS vulnerability CVE-2026-86950

October 2, 2026 · Philippe Lagadec

How to detect CVE-2026-21509 exploits

How to detect malicious documents exploiting the MS Office vulnerability CVE-2026-21509

February 3, 2026 · Philippe Lagadec

olefile - a Python module to read/write MS OLE2 files

olefile (formerly OleFileIO_PL) is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office 97-2003 documents, vbaProject.bin in MS Office 2007+ files, Image Composer and FlashPix files, Outlook MSG files, StickyNotes, several Microscopy file formats, McAfee antivirus quarantine files, etc. ...

January 13, 2026 · Philippe Lagadec

My presentations and articles about cyber security

all my presentations and articles about cyber security

December 1, 2025 · Philippe Lagadec

oletools - python tools to analyze OLE and MS Office files

python-oletools is a package of python tools to analyze Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office documents or Outlook messages, mainly for malware analysis, forensics and debugging. It is based on my olefile parser.  ...

October 19, 2020 · Philippe Lagadec

Portable ExeFilter

If you want to test or use ExeFilter on Windows but you cannot or you do not want to install a Python interpreter, Portable ExeFilter is a simple solution. You just need to unzip it in any folder on a hard drive or a USB stick and it should run anywhere. ...

June 14, 2020 · Philippe Lagadec

Advanced VBA Macros Attack & Defence - Black Hat Europe 2019

Presentation at Black Hat Europe 2019, about malicious VBA Macros and recent advances in the attack and defense sides. ...

December 5, 2019 · Philippe Lagadec

olefile - a Python module to read/write MS OLE2 files

olefile (formerly OleFileIO_PL) is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office 97-2003 documents, vbaProject.bin in MS Office 2007+ files, Image Composer and FlashPix files, Outlook MSG files, StickyNotes, several Microscopy file formats, McAfee antivirus quarantine files, etc. ...

September 10, 2018 · Philippe Lagadec