From 8d15762e1417ec40338eb15609ba42ceffca108e Mon Sep 17 00:00:00 2001 From: decalage2 Date: Mon, 25 Mar 2019 22:16:34 +0100 Subject: [PATCH] setup: bumped version to 0.54dev12 --- oletools/msodde.py | 6 ++++-- oletools/olevba.py | 3 ++- setup.py | 3 ++- tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsb | Bin 18944 -> 0 bytes tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsm | Bin 19456 -> 0 bytes tests/test-data/encrypted/dde-test-encrypt-standardpassword.xls | Bin 26624 -> 0 bytes tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsb | Bin 14848 -> 0 bytes tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsm | Bin 15360 -> 0 bytes tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsx | Bin 15360 -> 0 bytes 9 files changed, 8 insertions(+), 4 deletions(-) mode change 100755 => 100644 tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsb mode change 100755 => 100644 tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsm mode change 100755 => 100644 tests/test-data/encrypted/dde-test-encrypt-standardpassword.xls mode change 100755 => 100644 tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsb mode change 100755 => 100644 tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsm mode change 100755 => 100644 tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsx diff --git a/oletools/msodde.py b/oletools/msodde.py index 10673c1..a09f7ab 100644 --- a/oletools/msodde.py +++ b/oletools/msodde.py @@ -21,7 +21,7 @@ http://www.decalage.info/python/oletools # === LICENSE ================================================================= -# msodde is copyright (c) 2017-2018 Philippe Lagadec (http://www.decalage.info) +# msodde is copyright (c) 2017-2019 Philippe Lagadec (http://www.decalage.info) # All rights reserved. # # Redistribution and use in source and binary forms, with or without @@ -86,8 +86,10 @@ from oletools.common.log_helper import log_helper # 2018-03-21 CH: - added detection for various CSV formulas (issue #259) # 2018-09-11 v0.54 PL: - olefile is now a dependency # 2018-10-25 CH: - detect encryption and raise error if detected +# 2019-03-25 CH: - added decryption of password-protected files -__version__ = '0.54dev4' + +__version__ = '0.54dev12' # ----------------------------------------------------------------------------- # TODO: field codes can be in headers/footers/comments - parse these diff --git a/oletools/olevba.py b/oletools/olevba.py index 2877662..f610790 100644 --- a/oletools/olevba.py +++ b/oletools/olevba.py @@ -214,8 +214,9 @@ from __future__ import print_function # 2018-12-06 PL: - colorize the suspicious keywords found in VBA code # 2019-01-01 PL: - removed support for Python 2.6 # 2019-03-18 PL: - added XLM/XLF macros detection for Excel OLE files +# 2019-03-25 CH: - added decryption of password-protected files -__version__ = '0.54dev11' +__version__ = '0.54dev12' #------------------------------------------------------------------------------ # TODO: diff --git a/setup.py b/setup.py index 9e513f3..0fd8e12 100644 --- a/setup.py +++ b/setup.py @@ -48,7 +48,7 @@ import os, fnmatch #--- METADATA ----------------------------------------------------------------- name = "oletools" -version = '0.54dev11' +version = '0.54dev12' desc = "Python tools to analyze security characteristics of MS Office and OLE files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), for Malware Analysis and Incident Response #DFIR" long_desc = open('oletools/README.rst').read() author = "Philippe Lagadec" @@ -320,6 +320,7 @@ def main(): ], extras_require = { # msoffcrypto-tools by nolze can be used to decrypt some office files + # TODO: make it a required dependency? 'decrypt': ['msoffcrypto'] } ) diff --git a/tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsb b/tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsb old mode 100755 new mode 100644 index b905d7c..b905d7c Binary files a/tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsb and b/tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsb differ diff --git a/tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsm b/tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsm old mode 100755 new mode 100644 index 2b2e113..2b2e113 Binary files a/tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsm and b/tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsm differ diff --git a/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xls b/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xls old mode 100755 new mode 100644 index c61f12b..c61f12b Binary files a/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xls and b/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xls differ diff --git a/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsb b/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsb old mode 100755 new mode 100644 index 3518a20..3518a20 Binary files a/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsb and b/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsb differ diff --git a/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsm b/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsm old mode 100755 new mode 100644 index b9cce05..b9cce05 Binary files a/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsm and b/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsm differ diff --git a/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsx b/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsx old mode 100755 new mode 100644 index c677227..c677227 Binary files a/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsx and b/tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsx differ -- libgit2 0.21.4