updated readme for v0.40

Philippe Lagadec
1 parent 57ec6e29
Showing 3 changed files with 22 additions and 3 deletions
README.md
oletools/README.html
oletools/README.rst
@@ -22,7 +22,11 @@ Note: python-oletools is not related to OLETools published by BeCubed Software.
 News
 ----
-- **2015-06-19 v0.12**: [olevba](https://bitbucket.org/decalage/oletools/wiki/olevba) can now deobfuscate VBA 
+- **2015-09-17 v0.40**: Improved macro deobfuscation in [olevba](https://bitbucket.org/decalage/oletools/wiki/olevba),
+to decode Hex and Base64 within VBA expressions. Display printable deobfuscated strings by 
+default. Improved the VBA_Parser API. Improved performance. 
+Fixed [issue #23](https://bitbucket.org/decalage/oletools/issue/23) with sys.stderr.
+- 2015-06-19 v0.12: [olevba](https://bitbucket.org/decalage/oletools/wiki/olevba) can now deobfuscate VBA 
 expressions with any combination of Chr, Asc, Val, StrReverse, Environ, +, &, using a VBA parser built with
 [pyparsing](http://pyparsing.wikispaces.com). New options to display only the analysis results or only the macros source code. 
 The analysis is now done on all the VBA modules at once.
@@ -79,6 +83,9 @@ If you plan to use python-oletools with other Python applications or your own sc
 use "**pip install oletools**" or "**easy_install oletools**" to download and install in one go. Otherwise you may 
 download/extract the zip archive and run "**setup.py install**". 
+**Important: to update oletools** if it is already installed, you must run **"pip install -U oletools"**, otherwise pip
+will not update it.
+
 Documentation:
 --------------
@@ -4,7 +4,8 @@
 <p>Note: python-oletools is not related to OLETools published by BeCubed Software.</p>
 <h2 id="news">News</h2>
 <ul>
-<li><strong>2015-06-19 v0.12</strong>: <a href="https://bitbucket.org/decalage/oletools/wiki/olevba">olevba</a> can now deobfuscate VBA expressions with any combination of Chr, Asc, Val, StrReverse, Environ, +, &amp;, using a VBA parser built with <a href="http://pyparsing.wikispaces.com">pyparsing</a>. New options to display only the analysis results or only the macros source code. The analysis is now done on all the VBA modules at once.</li>
+<li><strong>2015-09-17 v0.40</strong>: Improved macro deobfuscation in <a href="https://bitbucket.org/decalage/oletools/wiki/olevba">olevba</a>, to decode Hex and Base64 within VBA expressions. Display printable deobfuscated strings by default. Improved the VBA_Parser API. Improved performance. Fixed <a href="https://bitbucket.org/decalage/oletools/issue/23">issue #23</a> with sys.stderr.</li>
+<li>2015-06-19 v0.12: <a href="https://bitbucket.org/decalage/oletools/wiki/olevba">olevba</a> can now deobfuscate VBA expressions with any combination of Chr, Asc, Val, StrReverse, Environ, +, &amp;, using a VBA parser built with <a href="http://pyparsing.wikispaces.com">pyparsing</a>. New options to display only the analysis results or only the macros source code. The analysis is now done on all the VBA modules at once.</li>
 <li>2015-05-29 v0.11: Improved parsing of MHTML and ActiveMime/MSO files in <a href="https://bitbucket.org/decalage/oletools/wiki/olevba">olevba</a>, added several suspicious keywords to VBA scanner (thanks to <span class="citation">@ozhermit</span> and Davy Douhine for the suggestions)</li>
 <li>2015-05-06 v0.10: <a href="https://bitbucket.org/decalage/oletools/wiki/olevba">olevba</a> now supports Word MHTML files with macros, aka &quot;Single File Web Page&quot; (.mht) - see <a href="https://bitbucket.org/decalage/oletools/issue/10">issue #10</a> for more info</li>
 <li>2015-03-23 v0.09: <a href="https://bitbucket.org/decalage/oletools/wiki/olevba">olevba</a> now supports Word 2003 XML files, added anti-sandboxing/VM detection</li>
@@ -33,6 +34,7 @@
 <p>To use python-oletools from the command line as analysis tools, you may simply <a href="https://bitbucket.org/decalage/oletools/downloads">download the zip archive</a> and extract the files in the directory of your choice.</p>
 <p>To get the latest development version, click on &quot;Download repository&quot; on the <a href="https://bitbucket.org/decalage/oletools/downloads">downloads page</a>, or use mercurial to clone the repository.</p>
 <p>If you plan to use python-oletools with other Python applications or your own scripts, then the simplest solution is to use &quot;<strong>pip install oletools</strong>&quot; or &quot;<strong>easy_install oletools</strong>&quot; to download and install in one go. Otherwise you may download/extract the zip archive and run &quot;<strong>setup.py install</strong>&quot;.</p>
+<p><strong>Important: to update oletools</strong> if it is already installed, you must run <strong>&quot;pip install -U oletools&quot;</strong>, otherwise pip will not update it.</p>
 <h2 id="documentation">Documentation:</h2>
 <p>The latest version of the documentation can be found <a href="https://bitbucket.org/decalage/oletools/wiki">online</a>, otherwise a copy is provided in the doc subfolder of the package.</p>
 <h2 id="how-to-suggest-improvements-report-issues-or-contribute">How to Suggest Improvements, Report Issues or Contribute:</h2>
@@ -26,7 +26,14 @@ Software.
 News
 ----
--  **2015-06-19 v0.12**:
+-  **2015-09-17 v0.40**: Improved macro deobfuscation in
+   `olevba <https://bitbucket.org/decalage/oletools/wiki/olevba>`__, to
+   decode Hex and Base64 within VBA expressions. Display printable
+   deobfuscated strings by default. Improved the VBA\_Parser API.
+   Improved performance. Fixed `issue
+   #23 <https://bitbucket.org/decalage/oletools/issue/23>`__ with
+   sys.stderr.
+-  2015-06-19 v0.12:
    `olevba <https://bitbucket.org/decalage/oletools/wiki/olevba>`__ can
    now deobfuscate VBA expressions with any combination of Chr, Asc,
    Val, StrReverse, Environ, +, &, using a VBA parser built with
@@ -122,6 +129,9 @@ oletools**\ &quot; or &quot;**easy\_install oletools**\ &quot; to download and install
 in one go. Otherwise you may download/extract the zip archive and run
 "**setup.py install**\ ".
+**Important: to update oletools** if it is already installed, you must
+run **"pip install -U oletools"**, otherwise pip will not update it.
+
 Documentation:
 --------------