Warning: UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache' query: UPDATE cache SET data = 'a:181:{s:13:\"theme_default\";s:7:\"garland\";s:13:\"filter_html_1\";i:1;s:18:\"node_options_forum\";a:1:{i:0;s:6:\"status\";}s:27:\"menu_secondary_links_source\";s:13:\"primary-links\";s:20:\"freelinking_nodetype\";s:4:\"book\";s:15:\"install_profile\";s:7:\"default\";s:17:\"node_options_page\";a:2:{i:0;s:6:\"status\";i:1;s:7:\"promote\";}s:12:\"comment_page\";s:1:\"2\";s:18:\"drupal_private_key\";s:64:\"5ee87c350e7817c1b567a72fe25b8f8100c218a6f384611866c69facc5d9dd5a\";s:19:\"file_directory_temp\";s:4:\"/tmp\";s:13:\"user_register\";s:1:\"0\";s:9:\"clean_url\";s:1:\"1\";s:21:\"filter_default_format\";i:1;s:19:\"filter in /homez.14/decalaged/www/drupal/includes/database.mysql.inc on line 128

Warning: INSERT command denied to user 'decalaged'@'10.0.115.152' for table 'watchdog' query: INSERT INTO watchdog (uid, type, message, variables, severity, link, location, referer, hostname, timestamp) VALUES (0, 'php', '%message in %file on line %line.', 'a:4:{s:6:\"%error\";s:12:\"user warning\";s:8:\"%message\";s:414:\"UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter'\nquery: UPDATE cache_filter SET data = '<p>Here is the list of open-source Python projects that I am maintaining or contributing to.</p>\\n', created = 1369201877, expire = 1369288277, headers = '', serialized = 0 WHERE cid = '1:856fb11d06948f0632f2502350e5ee55'\";s:5:\"%file\";s:49:\"/homez.14/decalaged/www/drupal/includes/cache.inc\";s:5:\"%line\";i in /homez.14/decalaged/www/drupal/includes/database.mysql.inc on line 128

Warning: INSERT command denied to user 'decalaged'@'10.0.115.152' for table 'watchdog' query: INSERT INTO watchdog (uid, type, message, variables, severity, link, location, referer, hostname, timestamp) VALUES (0, 'php', '%message in %file on line %line.', 'a:4:{s:6:\"%error\";s:12:\"user warning\";s:8:\"%message\";s:420:\"UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter'\nquery: UPDATE cache_filter SET data = '<p>Here is a list of all articles and presentations I\\'ve published about IT Security so far.</p>\\n', created = 1369201878, expire = 1369288278, headers = '', serialized = 0 WHERE cid = '1:82d363a01b0d6835ffd0ccd6375c3652'\";s:5:\"%file\";s:49:\"/homez.14/decalaged/www/drupal/includes/cache.inc\";s:5:\"%li in /homez.14/decalaged/www/drupal/includes/database.mysql.inc on line 128

Warning: INSERT command denied to user 'decalaged'@'10.0.115.152' for table 'watchdog' query: INSERT INTO watchdog (uid, type, message, variables, severity, link, location, referer, hostname, timestamp) VALUES (0, 'php', '%message in %file on line %line.', 'a:4:{s:6:\"%error\";s:12:\"user warning\";s:8:\"%message\";s:783:\"UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter'\nquery: UPDATE cache_filter SET data = '<p>pyxswf is a script to detect, extract and analyze Flash objects (SWF files) that may be embedded in files such as MS Office documents (e.g. Word, Excel) and RTF, which is especially useful for malware analysis. It is part of the <a href=\\"oletools\\">oletools </a>package. pyxswf is an extension of <a href=\\"http://hooked-on-mnemonics.blog in /homez.14/decalaged/www/drupal/includes/database.mysql.inc on line 128

Warning: INSERT command denied to user 'decalaged'@'10.0.115.152' for table 'watchdog' query: INSERT INTO watchdog (uid, type, message, variables, severity, link, location, referer, hostname, timestamp) VALUES (0, 'php', '%message in %file on line %line.', 'a:4:{s:6:\"%error\";s:12:\"user warning\";s:8:\"%message\";s:886:\"UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter'\nquery: UPDATE cache_filter SET data = '<p><a href=\\"../../../../../../python/oletools\\">python-oletools</a> is a package of python tools to analyze <a href=\\"http://en.wikipedia.org/wiki/Compound_File_Binary_Format\\">Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format)</a>, such as Micr in /homez.14/decalaged/www/drupal/includes/database.mysql.inc on line 128

Warning: INSERT command denied to user 'decalaged'@'10.0.115.152' for table 'watchdog' query: INSERT INTO watchdog (uid, type, message, variables, severity, link, location, referer, hostname, timestamp) VALUES (0, 'php', '%message in %file on line %line.', 'a:4:{s:6:\"%error\";s:12:\"user warning\";s:8:\"%message\";s:1023:\"UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter'\nquery: UPDATE cache_filter SET data = '<p><strong>OleFileIO_PL</strong> is a Python module to read <a href=\\"http://en.wikipedia.org/wiki/Compound_File_Binary_Format\\">Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format)</a>, such as Microsoft Office documents, Image Composer and FlashPix files, Outlook m in /homez.14/decalaged/www/drupal/includes/database.mysql.inc on line 128

Warning: INSERT command denied to user 'decalaged'@'10.0.115.152' for table 'watchdog' query: INSERT INTO watchdog (uid, type, message, variables, severity, link, location, referer, hostname, timestamp) VALUES (0, 'php', '%message in %file on line %line.', 'a:4:{s:6:\"%error\";s:12:\"user warning\";s:8:\"%message\";s:594:\"UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter'\nquery: UPDATE cache_filter SET data = '<p>rtfobj is a Python module to extract embedded objects from RTF files, such as OLE ojects. It can be used as a Python library or a command-line tool. It is part of the <a href=\\"../../../../../../en/python/oletools\\">oletools </a>package. </p>\\n', created = 1369201878, expire = 1369288278, headers = '&#039 in /homez.14/decalaged/www/drupal/includes/database.mysql.inc on line 128

Warning: INSERT command denied to user 'decalaged'@'10.0.115.152' for table 'watchdog' query: INSERT INTO watchdog (uid, type, message, variables, severity, link, location, referer, hostname, timestamp) VALUES (0, 'php', '%message in %file on line %line.', 'a:4:{s:6:\"%error\";s:12:\"user warning\";s:8:\"%message\";s:477:\"UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter'\nquery: UPDATE cache_filter SET data = '<p>This article describes the Microsoft Office legacy/binary file formats (doc, xls, ppt), related security issues and useful resources. [WORK IN PROGRESS]</p>\\n', created = 1369201878, expire = 1369288278, headers = '', serialized = 0 WHERE cid = '1:21f43a34ec5e462886168e1715614bcb'\";s:5:\"%file\";s:49:\"/homez.14/decalaged in /homez.14/decalaged/www/drupal/includes/database.mysql.inc on line 128

Warning: INSERT command denied to user 'decalaged'@'10.0.115.152' for table 'watchdog' query: INSERT INTO watchdog (uid, type, message, variables, severity, link, location, referer, hostname, timestamp) VALUES (0, 'php', '%message in %file on line %line.', 'a:4:{s:6:\"%error\";s:12:\"user warning\";s:8:\"%message\";s:756:\"UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter'\nquery: UPDATE cache_filter SET data = '<p>oleid is a script to analyze OLE files such as MS Office documents (e.g. Word, Excel), to detect specific characteristics that could potentially indicate that the file is suspicious or malicious, in terms of security (e.g. malware). For example it can detect VBA macros, embedded Flash objects, fragmentation. It is part of the <a href=\\"../../../../../../en/python/oletools\\" in /homez.14/decalaged/www/drupal/includes/database.mysql.inc on line 128

Warning: INSERT command denied to user 'decalaged'@'10.0.115.152' for table 'watchdog' query: INSERT INTO watchdog (uid, type, message, variables, severity, link, location, referer, hostname, timestamp) VALUES (0, 'php', '%message in %file on line %line.', 'a:4:{s:6:\"%error\";s:12:\"user warning\";s:8:\"%message\";s:571:\"UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter'\nquery: UPDATE cache_filter SET data = '<p>olebrowse is a simple GUI to browse OLE files (e.g. MS Word, Excel, Powerpoint documents), to view and extract individual data streams. It is part of the <a href=\\"../../../../../../en/python/oletools\\">oletools </a>package.</p>\\n', created = 1369201878, expire = 1369288278, headers = '', serialized = 0 WHERE cid in /homez.14/decalaged/www/drupal/includes/database.mysql.inc on line 128

Warning: INSERT command denied to user 'decalaged'@'10.0.115.152' for table 'watchdog' query: INSERT INTO watchdog (uid, type, message, variables, severity, link, location, referer, hostname, timestamp) VALUES (0, 'php', '%message in %file on line %line.', 'a:4:{s:6:\"%error\";s:7:\"warning\";s:8:\"%message\";s:97:\"array_map() [<a href=\'function.array-map\'>function.array-map</a>]: Argument #2 should be an array\";s:5:\"%file\";s:59:\"/homez.14/decalaged/www/drupal/modules/system/system.module\";s:5:\"%line\";i:1015;}', 3, '', 'http://www.decalage.info/', '', '50.17.109.248', 1369201878) in /homez.14/decalaged/www/drupal/includes/database.mysql.inc on line 128

Warning: INSERT command denied to user 'decalaged'@'10.0.115.152' for table 'watchdog' query: INSERT INTO watchdog (uid, type, message, variables, severity, link, location, referer, hostname, timestamp) VALUES (0, 'php', '%message in %file on line %line.', 'a:4:{s:6:\"%error\";s:7:\"warning\";s:8:\"%message\";s:107:\"array_keys() [<a href=\'function.array-keys\'>function.array-keys</a>]: The first argument should be an array\";s:5:\"%file\";s:49:\"/homez.14/decalaged/www/drupal/includes/theme.inc\";s:5:\"%line\";i:1817;}', 3, '', 'http://www.decalage.info/', '', '50.17.109.248', 1369201878) in /homez.14/decalaged/www/drupal/includes/database.mysql.inc on line 128

Warning: INSERT command denied to user 'decalaged'@'10.0.115.152' for table 'watchdog' query: INSERT INTO watchdog (uid, type, message, variables, severity, link, location, referer, hostname, timestamp) VALUES (0, 'php', '%message in %file on line %line.', 'a:4:{s:6:\"%error\";s:7:\"warning\";s:8:\"%message\";s:39:\"Invalid argument supplied for foreach()\";s:5:\"%file\";s:49:\"/homez.14/decalaged/www/drupal/includes/theme.inc\";s:5:\"%line\";i:1817;}', 3, '', 'http://www.decalage.info/', '', '50.17.109.248', 1369201878) in /homez.14/decalaged/www/drupal/includes/database.mysql.inc on line 128
Decalage

Articles and tools about Python, IT Security and more.

  • user warning: UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter' query: UPDATE cache_filter SET data = '<p>Here is the list of open-source Python projects that I am maintaining or contributing to.</p>\n', created = 1369201877, expire = 1369288277, headers = '', serialized = 0 WHERE cid = '1:856fb11d06948f0632f2502350e5ee55' in /homez.14/decalaged/www/drupal/includes/cache.inc on line 109.
  • user warning: UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter' query: UPDATE cache_filter SET data = '<p>Here is a list of all articles and presentations I\'ve published about IT Security so far.</p>\n', created = 1369201878, expire = 1369288278, headers = '', serialized = 0 WHERE cid = '1:82d363a01b0d6835ffd0ccd6375c3652' in /homez.14/decalaged/www/drupal/includes/cache.inc on line 109.
  • user warning: UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter' query: UPDATE cache_filter SET data = '<p>pyxswf is a script to detect, extract and analyze Flash objects (SWF files) that may be embedded in files such as MS Office documents (e.g. Word, Excel) and RTF, which is especially useful for malware analysis. It is part of the <a href=\"oletools\">oletools </a>package. pyxswf is an extension of <a href=\"http://hooked-on-mnemonics.blogspot.nl/2011/12/xxxswfpy.html\">xxxswf.py</a> published by Alexander Hanel.</p>\n', created = 1369201878, expire = 1369288278, headers = '', serialized = 0 WHERE cid = '1:7dcc78a81cc4e465896b192d8d875e58' in /homez.14/decalaged/www/drupal/includes/cache.inc on line 109.
  • user warning: UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter' query: UPDATE cache_filter SET data = '<p><a href=\"../../../../../../python/oletools\">python-oletools</a> is a package of python tools to analyze <a href=\"http://en.wikipedia.org/wiki/Compound_File_Binary_Format\">Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format)</a>, such as Microsoft Office documents or Outlook messages, mainly for malware analysis and debugging. It is based on the <a href=\"../../../../../../python/olefileio\">OleFileIO_PL</a> parser.&nbsp;</p>\n', created = 1369201878, expire = 1369288278, headers = '', serialized = 0 WHERE cid = '1:13a6dbc252cc6586ffde782fbe5c0e63' in /homez.14/decalaged/www/drupal/includes/cache.inc on line 109.
  • user warning: UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter' query: UPDATE cache_filter SET data = '<p><strong>OleFileIO_PL</strong> is a Python module to read <a href=\"http://en.wikipedia.org/wiki/Compound_File_Binary_Format\">Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format)</a>, such as Microsoft Office documents, Image Composer and FlashPix files, Outlook messages, ... This my improved version of the OleFileIO module from <a href=\"http://www.pythonware.com/products/pil/index.htm\">PIL</a>, the excellent Python Imaging Library, created and maintained by Fredrik Lundh. The API is still compatible with PIL, but I have improved the internal implementation significantly, with many bugfixes and a more robust design.</p>\n', created = 1369201878, expire = 1369288278, headers = '', serialized = 0 WHERE cid = in /homez.14/decalaged/www/drupal/includes/cache.inc on line 109.
  • user warning: UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter' query: UPDATE cache_filter SET data = '<p>rtfobj is a Python module to extract embedded objects from RTF files, such as OLE ojects. It can be used as a Python library or a command-line tool. It is part of the <a href=\"../../../../../../en/python/oletools\">oletools </a>package.&nbsp;</p>\n', created = 1369201878, expire = 1369288278, headers = '', serialized = 0 WHERE cid = '1:c13d199824eb9fd8b23ecbc592c82338' in /homez.14/decalaged/www/drupal/includes/cache.inc on line 109.
  • user warning: UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter' query: UPDATE cache_filter SET data = '<p>This article describes the Microsoft Office legacy/binary file formats (doc, xls, ppt), related security issues and useful resources. [WORK IN PROGRESS]</p>\n', created = 1369201878, expire = 1369288278, headers = '', serialized = 0 WHERE cid = '1:21f43a34ec5e462886168e1715614bcb' in /homez.14/decalaged/www/drupal/includes/cache.inc on line 109.
  • user warning: UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter' query: UPDATE cache_filter SET data = '<p>oleid is a script to analyze OLE files such as MS Office documents (e.g. Word, Excel), to detect specific characteristics that could potentially indicate that the file is suspicious or malicious, in terms of security (e.g. malware). For example it can detect VBA macros, embedded Flash objects, fragmentation. It is part of the <a href=\"../../../../../../en/python/oletools\">oletools </a>package.&nbsp;</p>\n', created = 1369201878, expire = 1369288278, headers = '', serialized = 0 WHERE cid = '1:ce49a7fb233c73461ad0ec952532cfc8' in /homez.14/decalaged/www/drupal/includes/cache.inc on line 109.
  • user warning: UPDATE command denied to user 'decalaged'@'10.0.115.152' for table 'cache_filter' query: UPDATE cache_filter SET data = '<p>olebrowse is a simple GUI to browse OLE files (e.g. MS Word, Excel, Powerpoint documents), to view and extract individual data streams. It is part of the <a href=\"../../../../../../en/python/oletools\">oletools </a>package.</p>\n', created = 1369201878, expire = 1369288278, headers = '', serialized = 0 WHERE cid = '1:57f2c306753f0b4d67a4ddb87201c9d2' in /homez.14/decalaged/www/drupal/includes/cache.inc on line 109.
  • warning: array_map() [function.array-map]: Argument #2 should be an array in /homez.14/decalaged/www/drupal/modules/system/system.module on line 1015.
  • warning: array_keys() [function.array-keys]: The first argument should be an array in /homez.14/decalaged/www/drupal/includes/theme.inc on line 1817.
  • warning: Invalid argument supplied for foreach() in /homez.14/decalaged/www/drupal/includes/theme.inc on line 1817.

Python projects

Here is the list of open-source Python projects that I am maintaining or contributing to.

Articles and presentations about IT Security

Here is a list of all articles and presentations I've published about IT Security so far.

pyxswf - a python tool to extract SWF (Flash) objects from documents (improved xxxswf)

pyxswf is a script to detect, extract and analyze Flash objects (SWF files) that may be embedded in files such as MS Office documents (e.g. Word, Excel) and RTF, which is especially useful for malware analysis. It is part of the oletools package. pyxswf is an extension of xxxswf.py published by Alexander Hanel.

python-oletools - python tools to analyze OLE files

python-oletools is a package of python tools to analyze Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office documents or Outlook messages, mainly for malware analysis and debugging. It is based on the OleFileIO_PL parser. 

OleFileIO_PL - a Python module to read MS OLE2 files

OleFileIO_PL is a Python module to read Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office documents, Image Composer and FlashPix files, Outlook messages, ... This my improved version of the OleFileIO module from PIL, the excellent Python Imaging Library, created and maintained by Fredrik Lundh. The API is still compatible with PIL, but I have improved the internal implementation significantly, with many bugfixes and a more robust design.

rtfobj - a python tool to extract embedded objects from RTF files

rtfobj is a Python module to extract embedded objects from RTF files, such as OLE ojects. It can be used as a Python library or a command-line tool. It is part of the oletools package. 

MS Office legacy/binary formats security (doc, xls, ppt, ...)

This article describes the Microsoft Office legacy/binary file formats (doc, xls, ppt), related security issues and useful resources. [WORK IN PROGRESS]

oleid - a python tool to quickly analyze OLE files

oleid is a script to analyze OLE files such as MS Office documents (e.g. Word, Excel), to detect specific characteristics that could potentially indicate that the file is suspicious or malicious, in terms of security (e.g. malware). For example it can detect VBA macros, embedded Flash objects, fragmentation. It is part of the oletools package. 

PDF Security Issues

This article describes the PDF file format, related security issues and useful resources. [WORK IN PROGRESS]

olebrowse - a simple python GUI to browse OLE files and extract streams

olebrowse is a simple GUI to browse OLE files (e.g. MS Word, Excel, Powerpoint documents), to view and extract individual data streams. It is part of the oletools package.

Syndicate content

Warning: INSERT command denied to user 'decalaged'@'10.0.115.152' for table 'watchdog' query: INSERT INTO watchdog (uid, type, message, variables, severity, link, location, referer, hostname, timestamp) VALUES (0, 'php', '%message in %file on line %line.', 'a:4:{s:6:\"%error\";s:12:\"user warning\";s:8:\"%message\";s:0:\"\";s:5:\"%file\";s:49:\"/homez.14/decalaged/www/drupal/includes/cache.inc\";s:5:\"%line\";i:109;}', 3, '', 'http://www.decalage.info/', '', '50.17.109.248', 1369201878) in /homez.14/decalaged/www/drupal/includes/database.mysql.inc on line 128

Warning: INSERT command denied to user 'decalaged'@'10.0.115.152' for table 'watchdog' query: INSERT INTO watchdog (uid, type, message, variables, severity, link, location, referer, hostname, timestamp) VALUES (0, 'php', '%message in %file on line %line.', 'a:4:{s:6:\"%error\";s:12:\"user warning\";s:8:\"%message\";s:340:\"INSERT command denied to user &#039;decalaged&#039;@&#039;10.0.115.152&#039; for table &#039;accesslog&#039;\nquery: INSERT INTO accesslog (title, path, url, hostname, uid, sid, timer, timestamp) values(&#039;&#039;, &#039;node&#039;, &#039;&#039;, &#039;50.17.109.248&#039;, 0, &#039;8d14f799edbae286d8d98610e77ef798&#039;, 974, 1369201878)\";s:5:\"%file\";s:67:\"/homez.14/decalaged/www/drupal/modules/statistics/statistics.module\";s:5:\"%line\";i:64;}', 3, '', 'http://www.decalage.i in /homez.14/decalaged/www/drupal/includes/database.mysql.inc on line 128

Warning: INSERT command denied to user 'decalaged'@'10.0.115.152' for table 'watchdog' query: INSERT INTO watchdog (uid, type, message, variables, severity, link, location, referer, hostname, timestamp) VALUES (0, 'php', '%message in %file on line %line.', 'a:4:{s:6:\"%error\";s:12:\"user warning\";s:8:\"%message\";s:972:\"UPDATE command denied to user &#039;decalaged&#039;@&#039;10.0.115.152&#039; for table &#039;sessions&#039;\nquery: UPDATE sessions SET uid = 0, cache = 0, hostname = &#039;50.17.109.248&#039;, session = &#039;messages|a:1:{s:5:\\&quot;error\\&quot;;a:2:{i:0;s:80:\\&quot;user warning: in /homez.14/decalaged/www/drupal/includes/cache.inc on line 109.\\&quot;;i:1;s:437:\\&quot;user warning: INSERT command denied to user &amp;#039;decalaged&amp;#039;@&amp;#039;10.0.115.152&amp;#039; for table &amp;#039;accesslog&amp;#039;\ in /homez.14/decalaged/www/drupal/includes/database.mysql.inc on line 128