CoDeRedlight

A simple CDR software for disarming malicious contents contained in documents.

With CoDeRedlight you can:

• Gather information from document files.
• Extract IoC data.
• Disarming C2 URL's and anohter malicious contents.

Updates

• Bug fixes.
• Added Excel support. Now you can clear malicious contents from your file. (Effective againts embedded Equation Editor exploits)
• Malicious URL finding capability is improved. Now you can clear Emotet/Heodo documents easily.

Usage

python3 CoDeRedlight.py <target_file>

Setup

pip3 install -r requirements.txt

PoC

cdrPOC.mp4

TODO

• Add PDF and CDFv2 support.
• Improve disarming capabilities.