Commit 8d15762e1417ec40338eb15609ba42ceffca108e
1 parent
88c2b0a0
setup: bumped version to 0.54dev12
Showing
9 changed files
with
8 additions
and
4 deletions
oletools/msodde.py
| @@ -21,7 +21,7 @@ http://www.decalage.info/python/oletools | @@ -21,7 +21,7 @@ http://www.decalage.info/python/oletools | ||
| 21 | 21 | ||
| 22 | # === LICENSE ================================================================= | 22 | # === LICENSE ================================================================= |
| 23 | 23 | ||
| 24 | -# msodde is copyright (c) 2017-2018 Philippe Lagadec (http://www.decalage.info) | 24 | +# msodde is copyright (c) 2017-2019 Philippe Lagadec (http://www.decalage.info) |
| 25 | # All rights reserved. | 25 | # All rights reserved. |
| 26 | # | 26 | # |
| 27 | # Redistribution and use in source and binary forms, with or without | 27 | # Redistribution and use in source and binary forms, with or without |
| @@ -86,8 +86,10 @@ from oletools.common.log_helper import log_helper | @@ -86,8 +86,10 @@ from oletools.common.log_helper import log_helper | ||
| 86 | # 2018-03-21 CH: - added detection for various CSV formulas (issue #259) | 86 | # 2018-03-21 CH: - added detection for various CSV formulas (issue #259) |
| 87 | # 2018-09-11 v0.54 PL: - olefile is now a dependency | 87 | # 2018-09-11 v0.54 PL: - olefile is now a dependency |
| 88 | # 2018-10-25 CH: - detect encryption and raise error if detected | 88 | # 2018-10-25 CH: - detect encryption and raise error if detected |
| 89 | +# 2019-03-25 CH: - added decryption of password-protected files | ||
| 89 | 90 | ||
| 90 | -__version__ = '0.54dev4' | 91 | + |
| 92 | +__version__ = '0.54dev12' | ||
| 91 | 93 | ||
| 92 | # ----------------------------------------------------------------------------- | 94 | # ----------------------------------------------------------------------------- |
| 93 | # TODO: field codes can be in headers/footers/comments - parse these | 95 | # TODO: field codes can be in headers/footers/comments - parse these |
oletools/olevba.py
| @@ -214,8 +214,9 @@ from __future__ import print_function | @@ -214,8 +214,9 @@ from __future__ import print_function | ||
| 214 | # 2018-12-06 PL: - colorize the suspicious keywords found in VBA code | 214 | # 2018-12-06 PL: - colorize the suspicious keywords found in VBA code |
| 215 | # 2019-01-01 PL: - removed support for Python 2.6 | 215 | # 2019-01-01 PL: - removed support for Python 2.6 |
| 216 | # 2019-03-18 PL: - added XLM/XLF macros detection for Excel OLE files | 216 | # 2019-03-18 PL: - added XLM/XLF macros detection for Excel OLE files |
| 217 | +# 2019-03-25 CH: - added decryption of password-protected files | ||
| 217 | 218 | ||
| 218 | -__version__ = '0.54dev11' | 219 | +__version__ = '0.54dev12' |
| 219 | 220 | ||
| 220 | #------------------------------------------------------------------------------ | 221 | #------------------------------------------------------------------------------ |
| 221 | # TODO: | 222 | # TODO: |
setup.py
| @@ -48,7 +48,7 @@ import os, fnmatch | @@ -48,7 +48,7 @@ import os, fnmatch | ||
| 48 | #--- METADATA ----------------------------------------------------------------- | 48 | #--- METADATA ----------------------------------------------------------------- |
| 49 | 49 | ||
| 50 | name = "oletools" | 50 | name = "oletools" |
| 51 | -version = '0.54dev11' | 51 | +version = '0.54dev12' |
| 52 | desc = "Python tools to analyze security characteristics of MS Office and OLE files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), for Malware Analysis and Incident Response #DFIR" | 52 | desc = "Python tools to analyze security characteristics of MS Office and OLE files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), for Malware Analysis and Incident Response #DFIR" |
| 53 | long_desc = open('oletools/README.rst').read() | 53 | long_desc = open('oletools/README.rst').read() |
| 54 | author = "Philippe Lagadec" | 54 | author = "Philippe Lagadec" |
| @@ -320,6 +320,7 @@ def main(): | @@ -320,6 +320,7 @@ def main(): | ||
| 320 | ], | 320 | ], |
| 321 | extras_require = { | 321 | extras_require = { |
| 322 | # msoffcrypto-tools by nolze can be used to decrypt some office files | 322 | # msoffcrypto-tools by nolze can be used to decrypt some office files |
| 323 | + # TODO: make it a required dependency? | ||
| 323 | 'decrypt': ['msoffcrypto'] | 324 | 'decrypt': ['msoffcrypto'] |
| 324 | } | 325 | } |
| 325 | ) | 326 | ) |
tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsb
100755 → 100644
No preview for this file type
tests/test-data/encrypted/autostart-encrypt-standardpassword.xlsm
100755 → 100644
No preview for this file type
tests/test-data/encrypted/dde-test-encrypt-standardpassword.xls
100755 → 100644
No preview for this file type
tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsb
100755 → 100644
No preview for this file type
tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsm
100755 → 100644
No preview for this file type
tests/test-data/encrypted/dde-test-encrypt-standardpassword.xlsx
100755 → 100644
No preview for this file type