There are many new features in this update to InteractiveSieve (I neglected to publish updates).

InteractiveSieve is a C# tool I developed to help me visualize and sift through logs (CSV files).

I want to record a couple of videos to show what this tool can do.

Here is a list of updates:

Added Remember and >= <= popup menu commands Added Paste to Sift dialog Added separator option None Added choice for Pivot table: matrix, list and uniques Fixed Reveal all bug, thanks Bart Vanautgaerden for reporting Added Hide colored lines and Hine uncolored lines; Added Info and Set as index column Bugfix DataGridViewEx Added Load sieve and Save sieve Added m:n to pivot table Added Invert Added bookmarks Added Previous and Next Bookmark toolbar buttons Bugfix SaveSieve for bookmarks Added Comment… Added header when saving Fix for header when loading with filter Added load with lookup Added Treeview Added drag and drop; automatic and colon separator; invert with load filter Added Copy for row Pivot table list and uniques: Added support for Hide and Color buttons Added Sift… value Added Transform (regex) and restore Added Reload

InteractiveSieve_V_0_9_1_0.zip (https)
MD5: C8B5B3E768FB62B7508F055122453594
SHA256: 063A83D9DBA900C8B245532D510E822A305B258C9A3DD05F19F4F0ED2753B6E1

I added detection of data descriptor records (PK 0x07 0x08) to option -f L (list all ZIP records found inside the provided file).

zipdump_v0_0_20.zip (https)
MD5: A0A826BB92805997ED3D9793C8B24385
SHA256: AC626299A6048FA4A7E8BE2993411870F77B4B89F647B6C4264E0CC22E180999

This new version of oledump.py brings support for AES encrypted ZIP files via Python module pyzipper (Python 3 only). If module pyzipper is not installed, oledump will fall back to builtin module zipfile.

 

And plugin plugin_vbaproject.py does now a small dictionary attack on the extracted hash to try to recover the password.

I use the same dictionary as in zipdump.py, a dictionary that is the public domain, default wordlist used by John the Ripper, extended with a couple of passwords: infected, P@ssw0rd and VelvetSweatshop.

oledump_V0_0_52.zip (https)
MD5: 2528824D8A7CD2BE98615B1B1AE8C61A
SHA256: C47A9CC658571FF23E70264B4DD4F8F47D244708E7110EA0A28128F175CF80F5