Commit 9444569bb2217fba50e0349ee2e3b6a8f1b55be8
1 parent
d4835565
updated README, removed unnecessary README.rst
Showing
4 changed files
with
50 additions
and
5 deletions
README.md
| ... | ... | @@ -26,6 +26,16 @@ Note: python-oletools is not related to OLETools published by BeCubed Software. |
| 26 | 26 | News |
| 27 | 27 | ---- |
| 28 | 28 | |
| 29 | +- **2021-04-02 v0.56.1**: | |
| 30 | + - olevba: | |
| 31 | + - fixed bug when parsing some malformed files (issue #629) | |
| 32 | + - oleobj: | |
| 33 | + - fixed bug preventing detection of links 'externalReference', 'frame', | |
| 34 | + 'hyperlink' (issue #641, PR #670) | |
| 35 | + - setup: | |
| 36 | + - avoid installing msoffcrypto-tool when platform is PyPy+Windows (issue #473) | |
| 37 | + - PyPI version is now a wheel package to improve installation and avoid antivirus | |
| 38 | + false positives due to test files (issues #215, #398) | |
| 29 | 39 | - **2020-09-28 v0.56**: |
| 30 | 40 | - olevba/mraptor: |
| 31 | 41 | - added detection of trigger _OnConnecting |
| ... | ... | @@ -187,7 +197,7 @@ License |
| 187 | 197 | This license applies to the python-oletools package, apart from the thirdparty folder which contains third-party files |
| 188 | 198 | published with their own license. |
| 189 | 199 | |
| 190 | -The python-oletools package is copyright (c) 2012-2020 Philippe Lagadec (http://www.decalage.info) | |
| 200 | +The python-oletools package is copyright (c) 2012-2021 Philippe Lagadec (http://www.decalage.info) | |
| 191 | 201 | |
| 192 | 202 | All rights reserved. |
| 193 | 203 | ... | ... |
README.rst deleted
| 1 | -Needed for setup.py |
oletools/README.html
| ... | ... | @@ -23,6 +23,22 @@ |
| 23 | 23 | <p>Note: python-oletools is not related to OLETools published by BeCubed Software.</p> |
| 24 | 24 | <h2 id="news">News</h2> |
| 25 | 25 | <ul> |
| 26 | +<li><strong>2021-04-02 v0.56.1</strong>: | |
| 27 | +<ul> | |
| 28 | +<li>olevba: | |
| 29 | +<ul> | |
| 30 | +<li>fixed bug when parsing some malformed files (issue #629)</li> | |
| 31 | +</ul></li> | |
| 32 | +<li>oleobj: | |
| 33 | +<ul> | |
| 34 | +<li>fixed bug preventing detection of links 'externalReference', 'frame', 'hyperlink' (issue #641, PR #670)</li> | |
| 35 | +</ul></li> | |
| 36 | +<li>setup: | |
| 37 | +<ul> | |
| 38 | +<li>avoid installing msoffcrypto-tool when platform is PyPy+Windows (issue #473)</li> | |
| 39 | +<li>PyPI version is now a wheel package to improve installation and avoid antivirus false positives due to test files (issues #215, #398)</li> | |
| 40 | +</ul></li> | |
| 41 | +</ul></li> | |
| 26 | 42 | <li><strong>2020-09-28 v0.56</strong>: |
| 27 | 43 | <ul> |
| 28 | 44 | <li>olevba/mraptor: |
| ... | ... | @@ -90,7 +106,7 @@ |
| 90 | 106 | <li><a href="https://github.com/decalage2/oletools/wiki/olemap">olemap</a>: to display a map of all the sectors in an OLE file.</li> |
| 91 | 107 | </ul> |
| 92 | 108 | <h2 id="projects-using-oletools">Projects using oletools:</h2> |
| 93 | -<p>oletools are used by a number of projects and online malware analysis services, including <a href="https://github.com/IntegralDefense/ACE">ACE</a>, <a href="https://sandbox.anlyz.io/">Anlyz.io</a>, <a href="https://www.cse-cst.gc.ca/en/assemblyline">AssemblyLine</a>, <a href="https://github.com/ctxis/CAPE">CAPE</a>, <a href="https://cincan.io">CinCan</a>, <a href="https://github.com/cuckoosandbox/cuckoo">Cuckoo Sandbox</a>, <a href="https://github.com/cryps1s/DARKSURGEON">DARKSURGEON</a>, <a href="https://sandbox.deepviz.com/">Deepviz</a>, <a href="https://diario.elevenpaths.com/">DIARIO</a>, <a href="https://dridex.malwareconfig.com">dridex.malwareconfig.com</a>, <a href="https://github.com/ninoseki/eml_analyzer">EML Analyzer</a>, <a href="https://certsocietegenerale.github.io/fame/">FAME</a>, <a href="https://github.com/fireeye/flare-vm">FLARE-VM</a>, <a href="https://www.hybrid-analysis.com/">Hybrid-analysis.com</a>, <a href="https://github.com/certego/IntelOwl">IntelOwl</a>, <a href="https://www.document-analyzer.net/">Joe Sandbox</a>, <a href="https://github.com/lmco/laikaboss">Laika BOSS</a>, <a href="https://github.com/sbidy/MacroMilter">MacroMilter</a>, <a href="https://mailcow.email/">mailcow</a>, <a href="https://malshare.io">malshare.io</a>, <a href="https://github.com/Tigzy/malware-repo">malware-repo</a>, <a href="https://www.adlice.com/download/mrf/">Malware Repository Framework (MRF)</a>, <a href="https://github.com/HeinleinSupport/olefy">olefy</a>, <a href="https://github.com/scVENUS/PeekabooAV">PeekabooAV</a>, <a href="https://github.com/bontchev/pcodedmp">pcodedmp</a>, <a href="https://github.com/CIRCL/PyCIRCLean">PyCIRCLean</a>, <a href="https://remnux.org/">REMnux</a>, <a href="https://github.com/countercept/snake">Snake</a>, <a href="https://app.sndbox.com">SNDBOX</a>, <a href="https://github.com/ldbo/SpuriousEmu">SpuriousEmu</a>, <a href="https://github.com/target/strelka">Strelka</a>, <a href="https://stoq.punchcyber.com/">stoQ</a>, <a href="https://github.com/TheHive-Project/Cortex-Analyzers">TheHive/Cortex</a>, <a href="https://tsurugi-linux.org/">TSUGURI Linux</a>, <a href="https://github.com/MalwareCantFly/Vba2Graph">Vba2Graph</a>, <a href="http://viper.li/">Viper</a>, <a href="https://github.com/decalage2/ViperMonkey">ViperMonkey</a>, <a href="https://yomi.yoroi.company">YOMI</a>, and probably <a href="https://www.virustotal.com">VirusTotal</a>. And quite a few <a href="https://github.com/search?q=oletools&type=Repositories">other projects on GitHub</a>. (Please <a href="(http://decalage.info/contact)">contact me</a> if you have or know a project using oletools)</p> | |
| 109 | +<p>oletools are used by a number of projects and online malware analysis services, including <a href="https://github.com/IntegralDefense/ACE">ACE</a>, <a href="https://sandbox.anlyz.io/">Anlyz.io</a>, <a href="https://www.cse-cst.gc.ca/en/assemblyline">AssemblyLine</a>, <a href="https://github.com/ctxis/CAPE">CAPE</a>, <a href="https://cincan.io">CinCan</a>, <a href="https://github.com/cuckoosandbox/cuckoo">Cuckoo Sandbox</a>, <a href="https://github.com/cryps1s/DARKSURGEON">DARKSURGEON</a>, <a href="https://sandbox.deepviz.com/">Deepviz</a>, <a href="https://diario.elevenpaths.com/">DIARIO</a>, <a href="https://dridex.malwareconfig.com">dridex.malwareconfig.com</a>, <a href="https://github.com/ninoseki/eml_analyzer">EML Analyzer</a>, <a href="https://certsocietegenerale.github.io/fame/">FAME</a>, <a href="https://github.com/fireeye/flare-vm">FLARE-VM</a>, <a href="https://www.hybrid-analysis.com/">Hybrid-analysis.com</a>, <a href="https://github.com/certego/IntelOwl">IntelOwl</a>, <a href="https://www.document-analyzer.net/">Joe Sandbox</a>, <a href="https://github.com/lmco/laikaboss">Laika BOSS</a>, <a href="https://github.com/sbidy/MacroMilter">MacroMilter</a>, <a href="https://mailcow.email/">mailcow</a>, <a href="https://malshare.io">malshare.io</a>, <a href="https://github.com/Tigzy/malware-repo">malware-repo</a>, <a href="https://www.adlice.com/download/mrf/">Malware Repository Framework (MRF)</a>, <a href="https://bazaar.abuse.ch/">MalwareBazaar</a>, <a href="https://github.com/HeinleinSupport/olefy">olefy</a>, <a href="https://github.com/scVENUS/PeekabooAV">PeekabooAV</a>, <a href="https://github.com/bontchev/pcodedmp">pcodedmp</a>, <a href="https://github.com/CIRCL/PyCIRCLean">PyCIRCLean</a>, <a href="https://remnux.org/">REMnux</a>, <a href="https://github.com/countercept/snake">Snake</a>, <a href="https://app.sndbox.com">SNDBOX</a>, <a href="https://github.com/ldbo/SpuriousEmu">SpuriousEmu</a>, <a href="https://github.com/target/strelka">Strelka</a>, <a href="https://stoq.punchcyber.com/">stoQ</a>, <a href="https://github.com/TheHive-Project/Cortex-Analyzers">TheHive/Cortex</a>, <a href="https://tsurugi-linux.org/">TSUGURI Linux</a>, <a href="https://github.com/MalwareCantFly/Vba2Graph">Vba2Graph</a>, <a href="http://viper.li/">Viper</a>, <a href="https://github.com/decalage2/ViperMonkey">ViperMonkey</a>, <a href="https://yomi.yoroi.company">YOMI</a>, and probably <a href="https://www.virustotal.com">VirusTotal</a>. And quite a few <a href="https://github.com/search?q=oletools&type=Repositories">other projects on GitHub</a>. (Please <a href="(http://decalage.info/contact)">contact me</a> if you have or know a project using oletools)</p> | |
| 94 | 110 | <h2 id="download-and-install">Download and Install:</h2> |
| 95 | 111 | <p>The recommended way to download and install/update the <strong>latest stable release</strong> of oletools is to use <a href="https://pip.pypa.io/en/stable/installing/">pip</a>:</p> |
| 96 | 112 | <ul> |
| ... | ... | @@ -113,7 +129,7 @@ |
| 113 | 129 | <p>The code is available in <a href="https://github.com/decalage2/oletools">a GitHub repository</a>. You may use it to submit enhancements using forks and pull requests.</p> |
| 114 | 130 | <h2 id="license">License</h2> |
| 115 | 131 | <p>This license applies to the python-oletools package, apart from the thirdparty folder which contains third-party files published with their own license.</p> |
| 116 | -<p>The python-oletools package is copyright (c) 2012-2020 Philippe Lagadec (http://www.decalage.info)</p> | |
| 132 | +<p>The python-oletools package is copyright (c) 2012-2021 Philippe Lagadec (http://www.decalage.info)</p> | |
| 117 | 133 | <p>All rights reserved.</p> |
| 118 | 134 | <p>Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:</p> |
| 119 | 135 | <ul> | ... | ... |
oletools/README.rst
| ... | ... | @@ -29,6 +29,25 @@ Software. |
| 29 | 29 | News |
| 30 | 30 | ---- |
| 31 | 31 | |
| 32 | +- **2021-04-02 v0.56.1**: | |
| 33 | + | |
| 34 | + - olevba: | |
| 35 | + | |
| 36 | + - fixed bug when parsing some malformed files (issue #629) | |
| 37 | + | |
| 38 | + - oleobj: | |
| 39 | + | |
| 40 | + - fixed bug preventing detection of links 'externalReference', | |
| 41 | + 'frame', 'hyperlink' (issue #641, PR #670) | |
| 42 | + | |
| 43 | + - setup: | |
| 44 | + | |
| 45 | + - avoid installing msoffcrypto-tool when platform is PyPy+Windows | |
| 46 | + (issue #473) | |
| 47 | + - PyPI version is now a wheel package to improve installation and | |
| 48 | + avoid antivirus false positives due to test files (issues #215, | |
| 49 | + #398) | |
| 50 | + | |
| 32 | 51 | - **2020-09-28 v0.56**: |
| 33 | 52 | |
| 34 | 53 | - olevba/mraptor: |
| ... | ... | @@ -156,6 +175,7 @@ BOSS <https://github.com/lmco/laikaboss>`__, |
| 156 | 175 | `malshare.io <https://malshare.io>`__, |
| 157 | 176 | `malware-repo <https://github.com/Tigzy/malware-repo>`__, `Malware |
| 158 | 177 | Repository Framework (MRF) <https://www.adlice.com/download/mrf/>`__, |
| 178 | +`MalwareBazaar <https://bazaar.abuse.ch/>`__, | |
| 159 | 179 | `olefy <https://github.com/HeinleinSupport/olefy>`__, |
| 160 | 180 | `PeekabooAV <https://github.com/scVENUS/PeekabooAV>`__, |
| 161 | 181 | `pcodedmp <https://github.com/bontchev/pcodedmp>`__, |
| ... | ... | @@ -233,7 +253,7 @@ This license applies to the python-oletools package, apart from the |
| 233 | 253 | thirdparty folder which contains third-party files published with their |
| 234 | 254 | own license. |
| 235 | 255 | |
| 236 | -The python-oletools package is copyright (c) 2012-2020 Philippe Lagadec | |
| 256 | +The python-oletools package is copyright (c) 2012-2021 Philippe Lagadec | |
| 237 | 257 | (http://www.decalage.info) |
| 238 | 258 | |
| 239 | 259 | All rights reserved. | ... | ... |