From 2035c0921f68e28ee80097af3b472e17ff698a06 Mon Sep 17 00:00:00 2001 From: decalage2 Date: Sat, 17 Sep 2016 18:16:47 +0200 Subject: [PATCH] mraptor: added ActiveX triggers GotFocus|LostFocus|MouseHover (issue #80) --- oletools/mraptor.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/oletools/mraptor.py b/oletools/mraptor.py index ed0fd4d..387b138 100755 --- a/oletools/mraptor.py +++ b/oletools/mraptor.py @@ -89,12 +89,13 @@ MSG_ISSUES = 'Please report this issue on %s' % URL_ISSUES # 'NewDocument' # 'Workbook_Open', 'Workbook_Close', # *_Painted such as InkPicture1_Painted +# *_GotFocus|LostFocus|MouseHover for other ActiveX objects # TODO: check if line also contains Sub or Function re_autoexec = re.compile(r'(?i)\b(?:Auto(?:Exec|_?Open|_?Close|Exit|New)' + r'|Document(?:_?Open|_Close|_?BeforeClose|Change|_New)' + r'|NewDocument|Workbook(?:_Open|_Activate|_Close)' + - r'|\w+_Painted)\b') + r'|\w+_(?:Painted|GotFocus|LostFocus|MouseHover))\b') # MS-VBAL 5.4.5.1 Open Statement: RE_OPEN_WRITE = r'(?:\bOpen\b[^\n]+\b(?:Write|Append|Binary|Output|Random)\b)' -- libgit2 0.21.4