Commit 9a890da1825bd6a16bab9a40c2388a445f79ad8a

Authored by decalage2
1 parent e2d05a8e

fixed issue #265, removed UTF-8 characters from readme.rst, bumped version to 0.52.2

oletools/README.html
@@ -52,13 +52,13 @@ @@ -52,13 +52,13 @@
52 <li><a href="https://github.com/decalage2/oletools/wiki/olevba">olevba</a>: to extract and analyze VBA Macro source code from MS Office documents (OLE and OpenXML).</li> 52 <li><a href="https://github.com/decalage2/oletools/wiki/olevba">olevba</a>: to extract and analyze VBA Macro source code from MS Office documents (OLE and OpenXML).</li>
53 <li><a href="https://github.com/decalage2/oletools/wiki/mraptor">MacroRaptor</a>: to detect malicious VBA Macros</li> 53 <li><a href="https://github.com/decalage2/oletools/wiki/mraptor">MacroRaptor</a>: to detect malicious VBA Macros</li>
54 <li><a href="https://github.com/decalage2/oletools/wiki/msodde">msodde</a>: to detect and extract DDE/DDEAUTO links from MS Office documents, RTF and CSV</li> 54 <li><a href="https://github.com/decalage2/oletools/wiki/msodde">msodde</a>: to detect and extract DDE/DDEAUTO links from MS Office documents, RTF and CSV</li>
55 -<li><a href="https://github.com/decalage2/oletools/wiki/pyxswf">pyxswf</a>: to detect, extract and analyze Flash objects (SWF) that may be embedded in files such as MS Office documents (e.g. Word, Excel) and RTF, which is especially useful for malware analysis.</li> 55 +<li><a href="https://github.com/decalage2/oletools/wiki/pyxswf">pyxswf</a>: to detect, extract and analyze Flash objects (SWF) that may be embedded in files such as MS Office documents (e.g. Word, Excel) and RTF, which is especially useful for malware analysis.</li>
56 <li><a href="https://github.com/decalage2/oletools/wiki/oleobj">oleobj</a>: to extract embedded objects from OLE files.</li> 56 <li><a href="https://github.com/decalage2/oletools/wiki/oleobj">oleobj</a>: to extract embedded objects from OLE files.</li>
57 <li><a href="https://github.com/decalage2/oletools/wiki/rtfobj">rtfobj</a>: to extract embedded objects from RTF files.</li> 57 <li><a href="https://github.com/decalage2/oletools/wiki/rtfobj">rtfobj</a>: to extract embedded objects from RTF files.</li>
58 </ul> 58 </ul>
59 <h3 id="tools-to-analyze-the-structure-of-ole-files">Tools to analyze the structure of OLE files</h3> 59 <h3 id="tools-to-analyze-the-structure-of-ole-files">Tools to analyze the structure of OLE files</h3>
60 <ul> 60 <ul>
61 -<li><a href="https://github.com/decalage2/oletools/wiki/olebrowse">olebrowse</a>: A simple GUI to browse OLE files (e.g. MS Word, Excel, Powerpoint documents), to view and extract individual data streams.</li> 61 +<li><a href="https://github.com/decalage2/oletools/wiki/olebrowse">olebrowse</a>: A simple GUI to browse OLE files (e.g. MS Word, Excel, Powerpoint documents), to view and extract individual data streams.</li>
62 <li><a href="https://github.com/decalage2/oletools/wiki/olemeta">olemeta</a>: to extract all standard properties (metadata) from OLE files.</li> 62 <li><a href="https://github.com/decalage2/oletools/wiki/olemeta">olemeta</a>: to extract all standard properties (metadata) from OLE files.</li>
63 <li><a href="https://github.com/decalage2/oletools/wiki/oletimes">oletimes</a>: to extract creation and modification timestamps of all streams and storages.</li> 63 <li><a href="https://github.com/decalage2/oletools/wiki/oletimes">oletimes</a>: to extract creation and modification timestamps of all streams and storages.</li>
64 <li><a href="https://github.com/decalage2/oletools/wiki/oledir">oledir</a>: to display all the directory entries of an OLE file, including free and orphaned entries.</li> 64 <li><a href="https://github.com/decalage2/oletools/wiki/oledir">oledir</a>: to display all the directory entries of an OLE file, including free and orphaned entries.</li>
@@ -95,12 +95,12 @@ @@ -95,12 +95,12 @@
95 <li>Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.</li> 95 <li>Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.</li>
96 <li>Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.</li> 96 <li>Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.</li>
97 </ul> 97 </ul>
98 -<p>THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.</p> 98 +<p>THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS &quot;AS IS&quot; AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.</p>
99 <hr /> 99 <hr />
100 <p>olevba contains modified source code from the officeparser project, published under the following MIT License (MIT):</p> 100 <p>olevba contains modified source code from the officeparser project, published under the following MIT License (MIT):</p>
101 <p>officeparser is copyright (c) 2014 John William Davison</p> 101 <p>officeparser is copyright (c) 2014 John William Davison</p>
102 -<p>Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:</p> 102 +<p>Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the &quot;Software&quot;), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:</p>
103 <p>The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.</p> 103 <p>The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.</p>
104 -<p>THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.</p> 104 +<p>THE SOFTWARE IS PROVIDED &quot;AS IS&quot;, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.</p>
105 </body> 105 </body>
106 </html> 106 </html>
oletools/README.rst
@@ -84,7 +84,7 @@ Tools to analyze malicious documents @@ -84,7 +84,7 @@ Tools to analyze malicious documents
84 and CSV 84 and CSV
85 - `pyxswf <https://github.com/decalage2/oletools/wiki/pyxswf>`__: to 85 - `pyxswf <https://github.com/decalage2/oletools/wiki/pyxswf>`__: to
86 detect, extract and analyze Flash objects (SWF) that may be embedded 86 detect, extract and analyze Flash objects (SWF) that may be embedded
87 - in files such as MS Office documents (e.g. Word, Excel) and RTF, 87 + in files such as MS Office documents (e.g. Word, Excel) and RTF,
88 which is especially useful for malware analysis. 88 which is especially useful for malware analysis.
89 - `oleobj <https://github.com/decalage2/oletools/wiki/oleobj>`__: to 89 - `oleobj <https://github.com/decalage2/oletools/wiki/oleobj>`__: to
90 extract embedded objects from OLE files. 90 extract embedded objects from OLE files.
@@ -95,7 +95,7 @@ Tools to analyze the structure of OLE files @@ -95,7 +95,7 @@ Tools to analyze the structure of OLE files
95 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 95 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
96 96
97 - `olebrowse <https://github.com/decalage2/oletools/wiki/olebrowse>`__: 97 - `olebrowse <https://github.com/decalage2/oletools/wiki/olebrowse>`__:
98 - A simple GUI to browse OLE files (e.g. MS Word, Excel, Powerpoint 98 + A simple GUI to browse OLE files (e.g. MS Word, Excel, Powerpoint
99 documents), to view and extract individual data streams. 99 documents), to view and extract individual data streams.
100 - `olemeta <https://github.com/decalage2/oletools/wiki/olemeta>`__: to 100 - `olemeta <https://github.com/decalage2/oletools/wiki/olemeta>`__: to
101 extract all standard properties (metadata) from OLE files. 101 extract all standard properties (metadata) from OLE files.
@@ -198,8 +198,8 @@ met: @@ -198,8 +198,8 @@ met:
198 notice, this list of conditions and the following disclaimer in the 198 notice, this list of conditions and the following disclaimer in the
199 documentation and/or other materials provided with the distribution. 199 documentation and/or other materials provided with the distribution.
200 200
201 -THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS  
202 -IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 201 +THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
  202 +IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
203 TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A 203 TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
204 PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 204 PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
205 HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 205 HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
@@ -219,7 +219,7 @@ officeparser is copyright (c) 2014 John William Davison @@ -219,7 +219,7 @@ officeparser is copyright (c) 2014 John William Davison
219 219
220 Permission is hereby granted, free of charge, to any person obtaining a 220 Permission is hereby granted, free of charge, to any person obtaining a
221 copy of this software and associated documentation files (the 221 copy of this software and associated documentation files (the
222 -“Software”), to deal in the Software without restriction, including 222 +"Software"), to deal in the Software without restriction, including
223 without limitation the rights to use, copy, modify, merge, publish, 223 without limitation the rights to use, copy, modify, merge, publish,
224 distribute, sublicense, and/or sell copies of the Software, and to 224 distribute, sublicense, and/or sell copies of the Software, and to
225 permit persons to whom the Software is furnished to do so, subject to 225 permit persons to whom the Software is furnished to do so, subject to
@@ -228,7 +228,7 @@ the following conditions: @@ -228,7 +228,7 @@ the following conditions:
228 The above copyright notice and this permission notice shall be included 228 The above copyright notice and this permission notice shall be included
229 in all copies or substantial portions of the Software. 229 in all copies or substantial portions of the Software.
230 230
231 -THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS 231 +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
232 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF 232 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
233 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. 233 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
234 IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY 234 IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
setup.py
@@ -42,7 +42,7 @@ import os, fnmatch @@ -42,7 +42,7 @@ import os, fnmatch
42 #--- METADATA ----------------------------------------------------------------- 42 #--- METADATA -----------------------------------------------------------------
43 43
44 name = "oletools" 44 name = "oletools"
45 -version = '0.52.1' 45 +version = '0.52.2'
46 desc = "Python tools to analyze security characteristics of MS Office and OLE files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), for Malware Analysis and Incident Response #DFIR" 46 desc = "Python tools to analyze security characteristics of MS Office and OLE files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), for Malware Analysis and Incident Response #DFIR"
47 long_desc = open('oletools/README.rst').read() 47 long_desc = open('oletools/README.rst').read()
48 author = "Philippe Lagadec" 48 author = "Philippe Lagadec"