Logo white

Peter M. Groen / oletools

Sign in
  • Sign in
  • Project
  • Files
  • Commits
  • Network
  • Graphs
  • Milestones
  • Issues 0
  • Merge Requests 0
  • Labels
  • Wiki
  • Commits 1,521
  • Compare
  • Branches 1
  • Tags 0
  • oletools
30 Apr, 2019
5 commits
  • tests: tell oleid test what to expect for new samples
    14e68768
    Christian Herdtweck authored
    2019-04-30 12:50:30 +0200  
    Browse Code »
  • crypto: Make debug log a little less minimalistic
    d7ca775e
    Christian Herdtweck authored
    2019-04-30 12:50:30 +0200  
    Browse Code »
  • crypto: Correct whitespace, remove unnecessary code
    7db8aef6
    Christian Herdtweck authored
    2019-04-30 12:50:30 +0200  
    Browse Code »
  • crypto: Do not throw from is_encrypted
    5988d795
    Christian Herdtweck authored
    2019-04-30 12:50:30 +0200  
    Browse Code »
  • crypto: use msoffcrypto's is_encrypted if possible ...
    4e1f626d
    There were cases where our own test of byte 0x15 of SummaryInformation
    stream was incorrect. So leave test to the professionals ;-)
    Christian Herdtweck authored
    2019-04-30 12:50:07 +0200  
    Browse Code »

29 Apr, 2019
2 commits
  • crypto: declare specialiced is_encrypted private
    0dfa259f
    Christian Herdtweck authored
    2019-04-29 12:01:35 +0200  
    Browse Code »
  • tests: Add another sample ...
    5dfba516
    This is an interesting one since "our" old implementation of is_encrypted
    claims that the embedded file is still encrypted (which it is not), but
    the msoffcrypto-is_encrypted gets it right.
    Christian Herdtweck authored
    2019-04-29 12:01:35 +0200  
    Browse Code »

20 Apr, 2019
1 commit
  • olevba: initialize VBA_Parser.xlm_macros (fixes #433)
    aae7b4c4
    decalage2 authored
    2019-04-20 17:02:40 +0200  
    Browse Code »

10 Apr, 2019
1 commit
  • requirements.txt: synced with setup.py dependencies
    31241387
    decalage2 authored
    2019-04-10 17:50:55 +0200  
    Browse Code »

09 Apr, 2019
1 commit
  • olevba: decompress_stream now accepts both bytes and bytearray (fixes #422)
    0b652e8c
    decalage2 authored
    2019-04-09 22:04:53 +0200  
    Browse Code »

08 Apr, 2019
3 commits
  • updated install.txt
    96de55c5
    decalage2 authored
    2019-04-08 19:54:33 +0200  
    Browse Code »
  • updated readme and doc for v0.54
    66347e8e
    decalage2 authored
    2019-04-08 19:50:20 +0200  
    Browse Code »
  • oleid: fixed import for local use without install
    d03c8683
    decalage2 authored
    2019-04-08 17:54:08 +0200  
    Browse Code »

04 Apr, 2019
11 commits
  • readme: added v0.54
    a2380b34
    decalage2 authored
    2019-04-04 22:21:50 +0200  
    Browse Code »
  • bumped all tools to v0.54
    81bc39a6
    decalage2 authored
    2019-04-04 22:16:54 +0200  
    Browse Code »
  • clsid: added Microsoft Forms 2.0 Label (fixes #368)
    3a4863d6
    decalage2 authored
    2019-04-04 22:01:35 +0200  
    Browse Code »
  • olevba: added WriteProcessMemory, XLM keywords (issue #389)
    00871933
    decalage2 authored
    2019-04-04 21:44:00 +0200  
    Browse Code »
  • mraptor: added WriteProcessMemory, XLM keywords
    ca75f008
    decalage2 authored
    2019-04-04 21:42:55 +0200  
    Browse Code »
  • mraptor: added ExecuteExcel4Macro and ShellExecuteA (fixes #374)
    f56062de
    decalage2 authored
    2019-04-04 20:31:52 +0200  
    Browse Code »
  • olevba: added detection of ExecuteExcel4Macro (issue #374), fixed false positive… ...
    da3d95e6
    … detection of backspace chars (issue #358)
    decalage2 authored
    2019-04-04 20:22:48 +0200  
    Browse Code »
  • setup, requirements: fixed dependency to msoffcrypto-tool
    e7748962
    decalage2 authored
    2019-04-04 17:50:25 +0200  
    Browse Code »
  • Merge pull request #378 from r3comp1le/master ...
    f6d7601f
    added md5 to rtfobj
    Philippe Lagadec authored
    2019-04-04 17:01:24 +0200  
    Browse Code »
  • Merge pull request #410 from christian-intra2net/json-more-structure ...
    9780dc7c
    Type-Field in logging
    Philippe Lagadec authored
    2019-04-04 10:15:46 +0200  
    Browse Code »
  • Merge pull request #412 from christian-intra2net/ooxml-accept-OpenOffice ...
    8fac8b0c
    Avoid error in ooxml for non-office zip files
    Philippe Lagadec authored
    2019-04-04 10:13:13 +0200  
    Browse Code »

02 Apr, 2019
8 commits
  • tests: tell ooxml test about new test samples
    a55bd780
    Christian Herdtweck authored
    2019-04-02 14:07:31 +0200  
    Browse Code »
  • tests: add open office samples to oleobj test ...
    ee87aca4
    oleobj cannot detect yet that these are open office, but it can now
    treat them like regular zip files and find embedded objects in them.
    
    Samples are harmless, were created by me.
    Christian Herdtweck authored
    2019-04-02 14:04:33 +0200  
    Browse Code »
  • oleobj: Minor improvement to log messages ...
    04a633a6
    Firstly, not all zip files are ooxml files;
    Secondly, show in debug mode that ole file is analyzed by debug-logging
      stream names
    Christian Herdtweck authored
    2019-04-02 13:49:49 +0200  
    Browse Code »
  • ooxml: Fixes from pylint and pep8 ...
    f4b2a304
    One actually was an error (missing return from is_ooxml)
    Christian Herdtweck authored
    2019-04-02 13:27:57 +0200  
    Browse Code »
  • ooxml: Fix logger in test() function
    74b6c1ce
    Christian Herdtweck authored
    2019-04-02 13:14:34 +0200  
    Browse Code »
  • ooxml: Fix attempt to copy args ...
    6e4d05b5
    Not sure whether this copying is necessary at all...
    Christian Herdtweck authored
    2019-04-02 13:14:34 +0200  
    Browse Code »
  • ooxml: Correct error message ...
    9dfa0bc2
    Usually, did check for xml first, so if is not zip then the message
    was correct. But might change and function might be called from
    elsewhere.
    Christian Herdtweck authored
    2019-04-02 13:14:34 +0200  
    Browse Code »
  • ooxml: do not require [Content_Types].xml in zip files ...
    70c8a216
    This has to be present for Office OpenXML files but is not there e.g.
    for OpenOffice files (odt, ...).
    
    Can still analyze the file without this.
    Christian Herdtweck authored
    2019-04-02 13:14:34 +0200  
    Browse Code »

01 Apr, 2019
3 commits
  • crypto: fixed a bug in is_encrypted_ole
    f028496d
    decalage2 authored
    2019-04-01 22:37:50 +0200  
    Browse Code »
  • tests: replace 3 calls to deprecated function
    95bd4497
    Christian Herdtweck authored
    2019-04-01 09:05:08 +0200  
    Browse Code »
  • tests: Test new "type" field of json logging output ...
    7d89934c
    Every logging call can have an optional arg type='...' which is
    ignored when logging to text but shows in json output. The "type"
    of regular logging output in json is type='msg'.
    
    Added 2 messages with different type, adjusted existing test, created
    2 new ones.
    Christian Herdtweck authored
    2019-04-01 09:04:52 +0200  
    Browse Code »

28 Mar, 2019
3 commits
  • olevba: do not colorize the output if it is redirected to a file (issue #402)
    3056212d
    decalage2 authored
    2019-03-28 21:53:14 +0100  
    Browse Code »
  • msodde: clarify what part of output is the result
    8d49c606
    Christian Herdtweck authored
    2019-03-28 17:48:23 +0100  
    Browse Code »
  • logger: introduce 'type' field for json output ...
    9dc1dff3
    This is a start to bring back some structure into the json output.
    
    Might not be a permanent solution, need to further discuss in PR 308
    Christian Herdtweck authored
    2019-03-28 17:48:23 +0100  
    Browse Code »

27 Mar, 2019
2 commits
  • tablestream: slight fix, TableStyleSlim inherits from TableStyle
    afe9d247
    decalage2 authored
    2019-03-27 18:40:21 +0100  
    Browse Code »
  • msodde: slight fix to use the current dir to import oletools in case it's not th… ...
    7f492486
    …e version installed by pip
    decalage2 authored
    2019-03-27 18:35:19 +0100  
    Browse Code »