diff --git a/oletools/msodde.py b/oletools/msodde.py index 10673c1..a09f7ab 100644 --- a/oletools/msodde.py +++ b/oletools/msodde.py @@ -21,7 +21,7 @@ http://www.decalage.info/python/oletools # === LICENSE ================================================================= -# msodde is copyright (c) 2017-2018 Philippe Lagadec (http://www.decalage.info) +# msodde is copyright (c) 2017-2019 Philippe Lagadec (http://www.decalage.info) # All rights reserved. # # Redistribution and use in source and binary forms, with or without @@ -86,8 +86,10 @@ from oletools.common.log_helper import log_helper # 2018-03-21 CH: - added detection for various CSV formulas (issue #259) # 2018-09-11 v0.54 PL: - olefile is now a dependency # 2018-10-25 CH: - detect encryption and raise error if detected +# 2019-03-25 CH: - added decryption of password-protected files -__version__ = '0.54dev4' + +__version__ = '0.54dev12' # ----------------------------------------------------------------------------- # TODO: field codes can be in headers/footers/comments - parse these diff --git a/oletools/olevba.py b/oletools/olevba.py index 2877662..f610790 100644 --- a/oletools/olevba.py +++ b/oletools/olevba.py @@ -214,8 +214,9 @@ from __future__ import print_function # 2018-12-06 PL: - colorize the suspicious keywords found in VBA code # 2019-01-01 PL: - removed support for Python 2.6 # 2019-03-18 PL: - added XLM/XLF macros detection for Excel OLE files +# 2019-03-25 CH: - added decryption of password-protected files -__version__ = '0.54dev11' +__version__ = '0.54dev12' #------------------------------------------------------------------------------ # TODO: diff --git a/setup.py b/setup.py index 9e513f3..0fd8e12 100644 --- a/setup.py +++ b/setup.py @@ -48,7 +48,7 @@ import os, fnmatch #--- METADATA ----------------------------------------------------------------- name = "oletools" -version = '0.54dev11' +version = '0.54dev12' desc = "Python tools to analyze security characteristics of MS Office and OLE files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), for Malware Analysis and Incident Response #DFIR" long_desc = open('oletools/README.rst').read() author = "Philippe Lagadec" @@ -320,6 +320,7 @@ def main(): ], extras_require = { # msoffcrypto-tools by nolze can be used to decrypt some office files + # TODO: make it a required dependency? 'decrypt': ['msoffcrypto'] } ) diff --git a/tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsb b/tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsb old mode 100755 new mode 100644 index b905d7c..b905d7c --- a/tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsb +++ b/tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsb diff --git a/tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsm b/tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsm old mode 100755 new mode 100644 index 2b2e113..2b2e113 --- a/tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsm +++ b/tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsm diff --git a/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xls b/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xls old mode 100755 new mode 100644 index c61f12b..c61f12b --- a/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xls +++ b/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xls diff --git a/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsb b/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsb old mode 100755 new mode 100644 index 3518a20..3518a20 --- a/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsb +++ b/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsb diff --git a/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsm b/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsm old mode 100755 new mode 100644 index b9cce05..b9cce05 --- a/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsm +++ b/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsm diff --git a/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsx b/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsx old mode 100755 new mode 100644 index c677227..c677227 --- a/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsx +++ b/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsx