From Collaborative RCE Tool Library
Code Ripping Tools
| Tool name: | OfficeMalScanner |
| ||
|---|---|---|---|---|
| Author: | Frank Boldewin | |||
| Website: | http://www.reconstructer.org | |||
| Current version: | v0.431 | |||
| Last updated: | August 15, 2009 | |||
| Direct D/L link: | Locally archived copy | |||
| License type: | Free | |||
| Description: | OfficeMalScanner is a MS office forensic tool to scan for malicious traces, like shellcode heuristics, PE-files or embedded OLE streams. It supports disassembly and hexview as well as an easy brute force mode to detect encrypted files. Next to this, an office file is being scanned for VB-macro code and if found, it will be extracted for further analysis. | |||
| Also listed in: | Data Search and Extraction Tools | |||
| More details: | Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry) | |||
| Tool name: | TMG Ripper Studio |
| ||
|---|---|---|---|---|
| Author: | Chafe | |||
| Website: | N/A | |||
| Current version: | 0.03 | |||
| Last updated: | 2005 | |||
| Direct D/L link: | Locally archived copy | |||
| License type: | Free | |||
| Description: | This is a tool for converting a small part of a program into assemblycode that you could paste into your own sources. The program takes either a fileoffset or a virtual address as input and starts to disassemble from that point. When a conditional jump is reached, it branches and follow both directions. It also follows unconditional jumps and traces calls. | |||
| Also listed in: | (Not listed in any other category) | |||
| More details: | Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry) | |||
Feed containing all updates and additions for this category.
Feed containing all updates and additions for this category, including sub-categories.
