Toolbox for VulnDetect

OLLI_S · 16 Jul 2018, 20:07

@GregAlexandre
I really had no idea why I get no app info from Acronis True Image, so I asked in the programming forum.
I received the answer that Acronis True Image does not store the version info correctly in the EXE (invalid Language-ID) and this is definitely a bug in Acronis True Image.
But they also posted a solution that I have implemented, so please try the version I released right now.

OLLI_S · 19 Jul 2018, 20:00

I released version 2.0 that has a complete new UI and many features that make GetAppDetails more comfortable.

OLLI_S · 28 Jul 2018, 19:45

I released version 2.1 that fixes some issues and increases the stability.
I am keen about your feedback!

Tom · 30 Jul 2018, 07:34

@olli_s Looks good, tested it on a bunch of files, only found it unable to handle this one:

C:\Program Files (x86)\LastPass\wlandecrypt.exe

OLLI_S · 30 Jul 2018, 19:34

@Tom I can not find this file on my VM, so what package do I need to get the file?

Tom · 31 Jul 2018, 07:46

@olli_s As far as I can tell it is part of LastPass, it seems like most, but perhaps not all, users of LastPass has it.
I can give you the file, but I don't think it is super important, since that file isn't useful, it was just to quickly test a bunch of useful files and less useful files.

Anselm · 28 Oct 2018, 07:54

Is GetAppDetails ony for 64bit Windows?

OLLI_S · 28 Oct 2018, 09:34

At the moment yes, but you are right: I also should compile a 32-bit version.
Do you want to test the current un-released version with many more features?

OLLI_S · 28 Oct 2018, 14:19

@Anselm I added some more build modes in my programming IDE and now I am able to build a 32-Bit and a 64-Bit version of the app.
Do you want to test the current un-released version with many more features?

OLLI_S · 7 Mar 2019, 15:37

Today I released Version 3.0 of the Toolbox for VulnDetect with many new features!.
Please note that the app was renamed from GetAppDetails for VulnDetect to Toolbox for VulnDetect.
If you want to see what has changed, please see the Tab "About" in the Toolbox.

GregAlexandre · 19 May 2019, 16:15

Hi Olli,

Thanks a lot for this toolbox.

Can you please add the way to report icons? In the toolbox or a link.

Thanks and regards.

OLLI_S · 19 May 2019, 16:21

@GregAlexandre said in Toolbox for VulnDetect:

Can you please add the way to report icons? In the toolbox or a link.

Can you please specify what exactly you need?
A way to extract the icon from an exe file?

GregAlexandre · 24 May 2019, 19:32

@OLLI_S
Yes, a way to extract the icon from an exe file. Even if you redirect to another tool.
Regards.

OLLI_S · 25 May 2019, 17:35

@GregAlexandre said in Toolbox for VulnDetect:

Yes, a way to extract the icon from an exe file. Even if you redirect to another tool.

I already posted this topic many months ago:
https://vulndetect.org/topic/155/please-read-before-posting-new-detection-issues

Does this help you?

GregAlexandre · 25 May 2019, 18:24

@OLLI_S Yes, this helps.
I now remember why I did not download these tools: their last version is very old! So one can think that these projects have no more support. This does not sound good for security.
Regards.

OLLI_S · 25 May 2019, 18:41

Personally I would suggest to use IcoFX.

GregAlexandre · 25 May 2019, 18:43

@OLLI_S The more recent, that is what I did. I am sending Tom required icons
Thanks a lot for you help!

GregAlexandre · 8 Jun 2019, 11:59

@OLLI_S Free IcoFx is vulnerable. Any suggestion in order to be able to help Tom with icons ?

Tom · 8 Jun 2019, 18:05

@GregAlexandre
VulnDetect detects both NirSoft IconsExtract and IcoFX.
Remember, it is only the older (portable) versions of IcoFX that are vulnerable, if you install the latest, then there is no issues.
If you find another tool, then let me know and we will add detection for that.

GregAlexandre · 10 Jun 2019, 12:35

@Tom I removed free and portable IcoFx as it is vulnerable.
Next time I will use NirSoft IconsExtract even if I do not like using unsupported / inactive oldies project as no one but hackers know their security status.
Regards.