Commit eb01931aa96401bb11333884feba6fe1166efd98
1 parent
7fa91aa4
updated readme for v0.42
Showing
3 changed files
with
15 additions
and
6 deletions
README.md
| @@ -22,7 +22,10 @@ Note: python-oletools is not related to OLETools published by BeCubed Software. | @@ -22,7 +22,10 @@ Note: python-oletools is not related to OLETools published by BeCubed Software. | ||
| 22 | News | 22 | News |
| 23 | ---- | 23 | ---- |
| 24 | 24 | ||
| 25 | -- **2015-09-22 v0.41**: added new --reveal option to [olevba](https://bitbucket.org/decalage/oletools/wiki/olevba), | 25 | +- **2016-02-07 v0.42**: added two new tools oledir and olemap, better handling of malformed |
| 26 | +files and several bugfixes in [olevba](https://bitbucket.org/decalage/oletools/wiki/olevba), | ||
| 27 | +improved display for [olemeta](https://bitbucket.org/decalage/oletools/wiki/olemeta). | ||
| 28 | +- 2015-09-22 v0.41: added new --reveal option to [olevba](https://bitbucket.org/decalage/oletools/wiki/olevba), | ||
| 26 | to show the macro code with VBA strings deobfuscated. | 29 | to show the macro code with VBA strings deobfuscated. |
| 27 | - 2015-09-17 v0.40: Improved macro deobfuscation in [olevba](https://bitbucket.org/decalage/oletools/wiki/olevba), | 30 | - 2015-09-17 v0.40: Improved macro deobfuscation in [olevba](https://bitbucket.org/decalage/oletools/wiki/olevba), |
| 28 | to decode Hex and Base64 within VBA expressions. Display printable deobfuscated strings by | 31 | to decode Hex and Base64 within VBA expressions. Display printable deobfuscated strings by |
| @@ -116,7 +119,7 @@ License | @@ -116,7 +119,7 @@ License | ||
| 116 | This license applies to the python-oletools package, apart from the thirdparty folder which contains third-party files | 119 | This license applies to the python-oletools package, apart from the thirdparty folder which contains third-party files |
| 117 | published with their own license. | 120 | published with their own license. |
| 118 | 121 | ||
| 119 | -The python-oletools package is copyright (c) 2012-2015 Philippe Lagadec (http://www.decalage.info) | 122 | +The python-oletools package is copyright (c) 2012-2016 Philippe Lagadec (http://www.decalage.info) |
| 120 | 123 | ||
| 121 | All rights reserved. | 124 | All rights reserved. |
| 122 | 125 |
oletools/README.html
| @@ -4,7 +4,8 @@ | @@ -4,7 +4,8 @@ | ||
| 4 | <p>Note: python-oletools is not related to OLETools published by BeCubed Software.</p> | 4 | <p>Note: python-oletools is not related to OLETools published by BeCubed Software.</p> |
| 5 | <h2 id="news">News</h2> | 5 | <h2 id="news">News</h2> |
| 6 | <ul> | 6 | <ul> |
| 7 | -<li><strong>2015-09-22 v0.41</strong>: added new --reveal option to <a href="https://bitbucket.org/decalage/oletools/wiki/olevba">olevba</a>, to show the macro code with VBA strings deobfuscated.</li> | 7 | +<li><strong>2016-02-07 v0.42</strong>: added two new tools oledir and olemap, better handling of malformed files and several bugfixes in <a href="https://bitbucket.org/decalage/oletools/wiki/olevba">olevba</a>, improved display for <a href="https://bitbucket.org/decalage/oletools/wiki/olemeta">olemeta</a>.</li> |
| 8 | +<li>2015-09-22 v0.41: added new --reveal option to <a href="https://bitbucket.org/decalage/oletools/wiki/olevba">olevba</a>, to show the macro code with VBA strings deobfuscated.</li> | ||
| 8 | <li>2015-09-17 v0.40: Improved macro deobfuscation in <a href="https://bitbucket.org/decalage/oletools/wiki/olevba">olevba</a>, to decode Hex and Base64 within VBA expressions. Display printable deobfuscated strings by default. Improved the VBA_Parser API. Improved performance. Fixed <a href="https://bitbucket.org/decalage/oletools/issue/23">issue #23</a> with sys.stderr.</li> | 9 | <li>2015-09-17 v0.40: Improved macro deobfuscation in <a href="https://bitbucket.org/decalage/oletools/wiki/olevba">olevba</a>, to decode Hex and Base64 within VBA expressions. Display printable deobfuscated strings by default. Improved the VBA_Parser API. Improved performance. Fixed <a href="https://bitbucket.org/decalage/oletools/issue/23">issue #23</a> with sys.stderr.</li> |
| 9 | <li>2015-06-19 v0.12: <a href="https://bitbucket.org/decalage/oletools/wiki/olevba">olevba</a> can now deobfuscate VBA expressions with any combination of Chr, Asc, Val, StrReverse, Environ, +, &, using a VBA parser built with <a href="http://pyparsing.wikispaces.com">pyparsing</a>. New options to display only the analysis results or only the macros source code. The analysis is now done on all the VBA modules at once.</li> | 10 | <li>2015-06-19 v0.12: <a href="https://bitbucket.org/decalage/oletools/wiki/olevba">olevba</a> can now deobfuscate VBA expressions with any combination of Chr, Asc, Val, StrReverse, Environ, +, &, using a VBA parser built with <a href="http://pyparsing.wikispaces.com">pyparsing</a>. New options to display only the analysis results or only the macros source code. The analysis is now done on all the VBA modules at once.</li> |
| 10 | <li>2015-05-29 v0.11: Improved parsing of MHTML and ActiveMime/MSO files in <a href="https://bitbucket.org/decalage/oletools/wiki/olevba">olevba</a>, added several suspicious keywords to VBA scanner (thanks to <span class="citation">@ozhermit</span> and Davy Douhine for the suggestions)</li> | 11 | <li>2015-05-29 v0.11: Improved parsing of MHTML and ActiveMime/MSO files in <a href="https://bitbucket.org/decalage/oletools/wiki/olevba">olevba</a>, added several suspicious keywords to VBA scanner (thanks to <span class="citation">@ozhermit</span> and Davy Douhine for the suggestions)</li> |
| @@ -45,7 +46,7 @@ | @@ -45,7 +46,7 @@ | ||
| 45 | <p>The code is available in <a href="https://bitbucket.org/decalage/oletools">a Mercurial repository on Bitbucket</a>. You may use it to submit enhancements using forks and pull requests.</p> | 46 | <p>The code is available in <a href="https://bitbucket.org/decalage/oletools">a Mercurial repository on Bitbucket</a>. You may use it to submit enhancements using forks and pull requests.</p> |
| 46 | <h2 id="license">License</h2> | 47 | <h2 id="license">License</h2> |
| 47 | <p>This license applies to the python-oletools package, apart from the thirdparty folder which contains third-party files published with their own license.</p> | 48 | <p>This license applies to the python-oletools package, apart from the thirdparty folder which contains third-party files published with their own license.</p> |
| 48 | -<p>The python-oletools package is copyright (c) 2012-2015 Philippe Lagadec (http://www.decalage.info)</p> | 49 | +<p>The python-oletools package is copyright (c) 2012-2016 Philippe Lagadec (http://www.decalage.info)</p> |
| 49 | <p>All rights reserved.</p> | 50 | <p>All rights reserved.</p> |
| 50 | <p>Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:</p> | 51 | <p>Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:</p> |
| 51 | <ul> | 52 | <ul> |
oletools/README.rst
| @@ -26,7 +26,12 @@ Software. | @@ -26,7 +26,12 @@ Software. | ||
| 26 | News | 26 | News |
| 27 | ---- | 27 | ---- |
| 28 | 28 | ||
| 29 | -- **2015-09-22 v0.41**: added new --reveal option to | 29 | +- **2016-02-07 v0.42**: added two new tools oledir and olemap, better |
| 30 | + handling of malformed files and several bugfixes in | ||
| 31 | + `olevba <https://bitbucket.org/decalage/oletools/wiki/olevba>`__, | ||
| 32 | + improved display for | ||
| 33 | + `olemeta <https://bitbucket.org/decalage/oletools/wiki/olemeta>`__. | ||
| 34 | +- 2015-09-22 v0.41: added new --reveal option to | ||
| 30 | `olevba <https://bitbucket.org/decalage/oletools/wiki/olevba>`__, to | 35 | `olevba <https://bitbucket.org/decalage/oletools/wiki/olevba>`__, to |
| 31 | show the macro code with VBA strings deobfuscated. | 36 | show the macro code with VBA strings deobfuscated. |
| 32 | - 2015-09-17 v0.40: Improved macro deobfuscation in | 37 | - 2015-09-17 v0.40: Improved macro deobfuscation in |
| @@ -167,7 +172,7 @@ This license applies to the python-oletools package, apart from the | @@ -167,7 +172,7 @@ This license applies to the python-oletools package, apart from the | ||
| 167 | thirdparty folder which contains third-party files published with their | 172 | thirdparty folder which contains third-party files published with their |
| 168 | own license. | 173 | own license. |
| 169 | 174 | ||
| 170 | -The python-oletools package is copyright (c) 2012-2015 Philippe Lagadec | 175 | +The python-oletools package is copyright (c) 2012-2016 Philippe Lagadec |
| 171 | (http://www.decalage.info) | 176 | (http://www.decalage.info) |
| 172 | 177 | ||
| 173 | All rights reserved. | 178 | All rights reserved. |