pyxmldsig - a Python module to create and verify XML Digital Signatures (XML-DSig)

pyxmldsig is a Python module to create and verify XML Digital Signatures (XML-DSig). This is a simple interface to the PyXMLSec library, aiming to provide a more pythonic API suitable for Python applications. ...

September 7, 2010 · Philippe Lagadec

How to obtain the binary representation of an integer in Python

With Python 2.6+, that's quite simple: print "{0:b}".format(i) ...

September 6, 2010 · Philippe Lagadec

My Python howtos

Here is a collection of short articles I have written about how to do many useful things in Python. ...

September 6, 2010 · Philippe Lagadec

SSTIC03 - Malware and file formats

This article explains how many common file formats (DOC, XLS, PDF, HTML, XML, RTF, ...) may hide or trigger malicious code (virus, Trojan horse, ...) using their native features such as active content (macros, Javascript, etc). It was presented at the SSTIC symposium and OSSIR in 2003. ...

August 30, 2010 · Philippe Lagadec

SSTIC03 - Malware and file formats

This article explains how many common file formats (DOC, XLS, PDF, HTML, XML, RTF, ...) may hide or trigger malicious code (virus, Trojan horse, ...) using their native features such as active content (macros, Javascript, etc). It was presented at the SSTIC symposium and OSSIR in 2003. This article focuses on all files that can enter a company network by many different means (web, e-mail, USB sticks, CDs, laptops, etc), most of the time without being properly filtered. Once a file is opened by a user, it can easily trigger malicious actions and put the network's security at risk. ...

August 30, 2010 · Philippe Lagadec

ExeFilter vs. the Escape from PDF (CVE-2010-1240)

On the 29 March 2010, Didier Stevens revealed in his blog that he found a way to launch an executable file stored in a PDF document, without using any JavaScript or buffer overflow. This short article shows how ExeFilter can be used to sanitize such PDF files to block this type of attack. ...

July 27, 2010 · Philippe Lagadec

Weaponized File Formats

This is a series of articles about file formats and related security issues. In 2003 I had presented an article in French about this subject at the SSTIC conference: [SSTIC03]. In the following articles I will provide an updated version in English with more information about common file formats. ...

February 13, 2010 · Philippe Lagadec

Python crash course

This is a Python course I have written to quickly teach Python to my colleagues and students, made of slides and samples for hands-on exercises. ...

January 15, 2010 · Philippe Lagadec