OffVis is an Office binary file format visualization tool. We released it to help IT Pros, security
researchers, and malware protection vendors better understand the binary file formats to deconstruct
attacks and understand the vulnerabilities we fix for protection purposes. It’s an easy GUI to use to
generically browse around and show the bytes on disk (left half of screen) with the hierarchical view of
the file as Office parses it (right half of screen). It can also generically detect a handful of publicly-
exploited vulnerabilities as it reads the file.
Typical Usage
1 - Extract the ZIP file contents to a directory
2 - Launch OffVis.exe. It will come up with a UI that looks like this:
3 - Under File menu, click "Open Data File", open a DOC, XLS, or PPT file.
