A long time ago, I created a Docker container with all Didier's tools and called it DSSuite[1]. Didier is updating his toolbox regularly with new releases or brand-new ones. It was time to update the container. I also fixed broken dependencies (some Python libraries were missing).

How to use it?

$ docker pull rootshell/dssuite:latest
$ docker run -it --rm -v $(pwd):/malware rootshell/dssuite oledump.py sample.vir
A: word/vbaProject.bin
 A1:       420 'PROJECT'
 A2:        68 'PROJECTwm'
 A3: M   32862 'VBA/AutoOpen'
 A4: m     938 'VBA/ThisDocument'
 A5:      2626 'VBA/_VBA_PROJECT'
 A6:       570 'VBA/dir'

Enjoy!

[1] https://isc.sans.edu/diary/DSSuite+A+Docker+Container+with+Didiers+Tools/24926

Xavier Mertens (@xme)
Xameco
Senior ISC Handler - Freelance Cyber Security Consultant
PGP Key