WIN-FOR
  • WIN-FOR
  • INSTALLATION
    • Using the Installer
  • The Tools
    • Acquisition and Analysis
    • Databases
    • Documents / Editors
    • Email
    • Executables
    • Installers
    • Logs
    • Mobile Analysis
    • Network
    • Raw Parsers / Decoders
    • Registry
    • Terminals
    • Utilities
    • Windows Analysis
    • Requirements
    • Win-FOR Tool Listing
    • Get the Latest Release
Powered by GitBook
On this page
  • ExifTool
  • ExifToolGui
  • Libre Office
  • msoffcrypto-crack.py
  • msoffcrypto-tool
  • Notepad++
  • OfficeMalScanner
  • OffVis
  • oledump.py
  • olefile
  • oletools
  • pcodedmp
  • pdfid
  • pdf-parser
  • PDFStream Dumper
  • rtfdump.py
  • Sublime Text
  • VSCode (Visual Studio Code)
  • XLMMacroDeobfuscator
  1. The Tools

Documents / Editors

Applications to create, modify, disassemble, and analyze document files.

ExifTool

Website: https://exiftool.org Description: Tool for analysing EXIF data from files Author: Phil Harvey License: https://exiftool.org/#license Version: 12.67 Notes:

ExifToolGui

Website: https://exiftool.org Description: Graphical EXIF analysis tool Author: Phil Harvey License: https://exiftool.org/#license Version: 5.16 Notes:

Libre Office

Website: https://www.libreoffice.org Description: Open Source Office Document suite Author: LibreOffice License: Mozilla Public License (https://www.libreoffice.org/download/license/) Version: 7.6.2.1 Notes:

msoffcrypto-crack.py

Website: https://github.com/didierstevens/didierstevenssuite Description: MS Office Document Password Cracking utility Author: Didier Stevens License: Public Domain Version: 0.0.5 Notes:

msoffcrypto-tool

Website: https://github.com/nolze/msoffcrypto-tool Description: Python library for decrypting encrypted MS Office Files Author: Nolze License: MIT License (https://github.com/nolze/msoffcrypto-tool/blob/master/LICENSE.txt) Version: 5.0.0 Notes:

Notepad++

Website: https://notepad-plus-plus.org Description: Free source code / text editor Author: Don Ho License: GNU General Public License 2.0 (https://notepad-plus-plus.org/) Version: 8.5.7 Notes:

OfficeMalScanner

Website: http://www.reconstructer.org/main.html Description: Office Document analysis tool to detect implants and malware Author: Frank Boldewin License: Unknown Version: 0.62 Notes:

OffVis

Website: http://go.microsoft.com/fwlink/?LinkId=158791 Description: Office document visualization tool Author: Microsoft License: EULA Version: 1.1.0.0 Notes:

oledump.py

Website: https://github.com/didierstevens/didierstevenssuite Description: Analyze OLE files Author: Didier Stevens License: Public Domain Version: 0.0.75 Notes:

olefile

Website: https://www.decalage.info/python/olefileio Description: Python module to read / write MS OLE2 files Author: Philippe Lagadec License: https://github.com/decalage2/olefile/blob/master/LICENSE.txt Version: 0.46 Notes:

oletools

Website: http://www.decalage.info/python/oletools Description: Package of tools to analyze MS OLE2 files Author: Philippe Lagadec License: https://github.com/decalage2/oletools/blob/master/LICENSE.md Version: 0.60.1 Notes:

pcodedmp

Website: https://github.com/bontchev/pcodedmp Description: Python VBA p-code disassembler Author: Vesselin Bontchev License: GNU General Public License v3 (https://github.com/bontchev/pcodedmp/blob/master/LICENSE) Version: 1.2.6 Notes:

pdfid

Website: https://github.com/didierstevens/didierstevenssuite Description: PDF Analysis Tool Author: Didier Stevens License: Public Domain Version: 0.2.8 Notes:

pdf-parser

Website: https://github.com/didierstevens/didierstevensssuite Description: PDF document parser Author: Didier Stevens License: Public Domain Version: 0.7.8 Notes:

PDFStream Dumper

Website: http://sandsprite.com/blogs/index.php?uid=7&pid=57 Description: PDF Analysis tool Author: David Zimmer (dzzie) License: None Version: 0.9.634 Notes:

rtfdump.py

Website: https://github.com/didierstevens/didierstevenssuite Description: Analyze RTF files Author: Didier Stevens License: Public Domain Version: 0.0.12 Notes:

Sublime Text

Website: https://www.sublimetext.com Description: Text Editor for markup and code Author: Sublime HQ Pty Ltd License: EULA (https://www.sublimehq.com/eula) Version: 4152 Notes:

VSCode (Visual Studio Code)

Website: https://code.visualstudio.com/ Description: Open Source Code Editor and Debugger Author: Microsoft License: Code - MIT License (https://github.com/microsoft/vscode/blob/main/LICENSE.txt) / Product (https://code.visualstudio.com/License/) Version: 1.82.3 Notes:

XLMMacroDeobfuscator

Website: https://github.com/DissectMalware/XLMMacroDeobfuscator Description: Decode obfuscated XLM macros (aka Excel v4.0 macros) Author: Malwrologist / DissectMalware License: Apache License v2.0 (https://github.com/DissectMalware/XLMMacroDeobfuscator/blob/master/LICENSE) Version: 0.2.7 Notes:

PreviousDatabasesNextEmail

Last updated 1 year ago