Philippe Lagadec
@decalage2
Followers
5K
Following
18K
Media
155
Statuses
6K
Author of oletools, olefile, ViperMonkey, ExeFilter, Balbuzard. #DFIR, #malware analysis, maldocs, file formats, #Python. @[email protected]
Joined November 2012
RT @passthesaltcon: OVER x SLIDES & VIDEOS . 📣 #pts25 is now over, thanks so much to all 🙏. 🚨 As always, due to the 🔥 work of the team, you….
0
13
0
RT @SquiblydooBlog: Cert Central has an unauthenticated API endpoint to return the database as a csv: certcentral[.]org/api/download_csv. I….
0
9
0
RT @passthesaltcon: Today, let's have a look on our #pts25 AUDIT & HARDENING session!. - Kévin Schouteeten from @Synacktiv will help to au….
0
2
0
0
9
0
RT @passthesaltcon: 🔦Last week of discovery of our #pts25 program with the OFFENSIVE session:.- @0xFalafel will present rcat, his new rever….
0
8
0
RT @HaifeiLi: In today's Patch Tuesday, CVE-2025-29820 ( is a Microsoft Word RCE bug found by my recently-developed….
0
14
0
RT @stvemillertime: 1) I didn't know .RDP config files could be signed.2) RDP RemoteApps are crazy .3) I always appreciate a Fuzzy Snuggly….
0
56
0
RT @pfiatde: Did you know, that PW "encryption" for ZIP files has some room for improvement and can be circumvented in some cases? Not new,….
0
25
0
RT @CyberWarship: ''GitHub - BlackSnufkin/LitterBox: sandbox approach for malware developers and red teamers to test payloads against dete….
0
40
0
RT @struppigel: Interpreting antivirus detection names. This article is still relevant, it has been rewritten/copied by some using AI, wit….
0
22
0
RT @passthesaltcon: LAST REMINDER - 3 DAYS BEFORE CFP END. ⏱️Hurry up guys, the CFP ends next Sunday midnight!. 👉Submit your free software….
0
2
0
RT @malwrhunterteam: Provisioning packages for Windows (.ppkg files) being used to spread malware was a thing yet? Not remember hearing abo….
0
11
0
RT @quarkslab: From classic HTML pages to advanced MFA bypasses, dive in with @_atsika in an exploration of phishing techniques 🎣. Learn s….
0
64
0
RT @Info_Activism: As AI consolidates, it's important to map its connections with human activities. What extractions, agencies, and resourc….
0
36
0
RT @awkwardgoogle: I had NO IDEA that Excel World Championship existed, but watching people being excellent at what they do is always fasci….
0
183
0
RT @vxunderground: This is a reminder to everyone that your malware payload does not need to be ultra-1337 for it to be effective or evasiv….
0
88
0
Do you know examples of polyglot files that have been used in real-life to hide malware from detection/analysis tools?.There is at least this PDF/MHT: Do you know other real malware cases?.
3
43
143