Commit f56062def0e72718201c50392d866c2cdbeb3b7e
1 parent
da3d95e6
mraptor: added ExecuteExcel4Macro and ShellExecuteA (fixes #374)
Showing
1 changed file
with
4 additions
and
3 deletions
oletools/mraptor.py
| @@ -23,7 +23,7 @@ http://www.decalage.info/python/oletools | @@ -23,7 +23,7 @@ http://www.decalage.info/python/oletools | ||
| 23 | 23 | ||
| 24 | # === LICENSE ================================================================== | 24 | # === LICENSE ================================================================== |
| 25 | 25 | ||
| 26 | -# MacroRaptor is copyright (c) 2016-2018 Philippe Lagadec (http://www.decalage.info) | 26 | +# MacroRaptor is copyright (c) 2016-2019 Philippe Lagadec (http://www.decalage.info) |
| 27 | # All rights reserved. | 27 | # All rights reserved. |
| 28 | # | 28 | # |
| 29 | # Redistribution and use in source and binary forms, with or without modification, | 29 | # Redistribution and use in source and binary forms, with or without modification, |
| @@ -58,8 +58,9 @@ http://www.decalage.info/python/oletools | @@ -58,8 +58,9 @@ http://www.decalage.info/python/oletools | ||
| 58 | # 2016-12-21 v0.51 PL: - added more ActiveX macro triggers | 58 | # 2016-12-21 v0.51 PL: - added more ActiveX macro triggers |
| 59 | # 2017-03-08 PL: - fixed absolute imports | 59 | # 2017-03-08 PL: - fixed absolute imports |
| 60 | # 2018-05-25 v0.53 PL: - added Word/PowerPoint 2007+ XML (aka Flat OPC) issue #283 | 60 | # 2018-05-25 v0.53 PL: - added Word/PowerPoint 2007+ XML (aka Flat OPC) issue #283 |
| 61 | +# 2019-04-04 v0.54 PL: - added ExecuteExcel4Macro and ShellExecuteA | ||
| 61 | 62 | ||
| 62 | -__version__ = '0.53' | 63 | +__version__ = '0.54dev14' |
| 63 | 64 | ||
| 64 | #------------------------------------------------------------------------------ | 65 | #------------------------------------------------------------------------------ |
| 65 | # TODO: | 66 | # TODO: |
| @@ -132,7 +133,7 @@ re_write = re.compile(r'(?i)\b(?:FileCopy|CopyFile|Kill|CreateTextFile|' | @@ -132,7 +133,7 @@ re_write = re.compile(r'(?i)\b(?:FileCopy|CopyFile|Kill|CreateTextFile|' | ||
| 132 | RE_DECLARE_LIB = r'(?:\bDeclare\b[^\n]+\bLib\b)' | 133 | RE_DECLARE_LIB = r'(?:\bDeclare\b[^\n]+\bLib\b)' |
| 133 | 134 | ||
| 134 | re_execute = re.compile(r'(?i)\b(?:Shell|CreateObject|GetObject|SendKeys|' | 135 | re_execute = re.compile(r'(?i)\b(?:Shell|CreateObject|GetObject|SendKeys|' |
| 135 | - + r'MacScript|FollowHyperlink|CreateThread|ShellExecute)\b|' + RE_DECLARE_LIB) | 136 | + + r'MacScript|FollowHyperlink|CreateThread|ShellExecuteA?|ExecuteExcel4Macro)\b|' + RE_DECLARE_LIB) |
| 136 | 137 | ||
| 137 | 138 | ||
| 138 | # === CLASSES ================================================================= | 139 | # === CLASSES ================================================================= |