Logo white

Peter M. Groen / oletools

Sign in
  • Sign in
  • Project
  • Files
  • Commits
  • Network
  • Graphs
  • Milestones
  • Issues 0
  • Merge Requests 0
  • Labels
  • Wiki
  • Commits 1,521
  • Compare
  • Branches 1
  • Tags 0
  • oletools
11 May, 2019
1 commit
  • Merge pull request #441 from christian-intra2net/is-encrypted-by-msoffcrypto ...
    40694d71
    Is encrypted by msoffcrypto
    Philippe Lagadec authored
    2019-05-11 16:49:45 +0200  
    Browse Code »

08 May, 2019
1 commit
  • readme: added link to YOMI
    ec182bcb
    decalage2 authored
    2019-05-08 15:06:47 +0200  
    Browse Code »

07 May, 2019
1 commit
  • tests: Add test for %-autoformatting of log messages
    c7a708db
    Christian Herdtweck authored
    2019-05-07 10:21:14 +0200  
    Browse Code »

06 May, 2019
4 commits
  • olevba: Hint at debug log if decrypt fails ...
    0426f6e7
    Might be password like error message states, but could also be a problem
    with crypto libraries (e.g. dll/so-file for cryptography not found)
    Christian Herdtweck authored
    2019-05-06 12:46:42 +0200  
    Browse Code »
  • msodde: Raise proper error when decrypt fails
    246ade44
    Christian Herdtweck authored
    2019-05-06 12:46:42 +0200  
    Browse Code »
  • tests: Do not assume we are running CPython
    95468654
    Christian Herdtweck authored
    2019-05-06 12:46:42 +0200  
    Browse Code »
  • tests: Clarify whether to include stderr or not
    d24210bc
    Christian Herdtweck authored
    2019-05-06 12:46:42 +0200  
    Browse Code »

02 May, 2019
1 commit
  • crypto: Add more debug output
    faa0d805
    Christian Herdtweck authored
    2019-05-02 16:19:44 +0200  
    Browse Code »

30 Apr, 2019
10 commits
  • test: Use call_and_capture in olevba tests ...
    0bc67280
    Running main() within same interpreter capturing SystemExit and
    sys.stdout/err always causes trouble (at least in unittest).
    Fork another python process and capture from there, that is easier
    and cleaner in my view.
    Christian Herdtweck authored
    2019-04-30 13:02:46 +0200  
    Browse Code »
  • tests: Move code to "run and capture" to utils
    b22b36c5
    Christian Herdtweck authored
    2019-04-30 13:02:46 +0200  
    Browse Code »
  • tests: Move constants into proper module
    06c591af
    Christian Herdtweck authored
    2019-04-30 12:50:30 +0200  
    Browse Code »
  • tests: minor pylint-inspired changes
    9b05546a
    Christian Herdtweck authored
    2019-04-30 12:50:30 +0200  
    Browse Code »
  • tests: Check behaviour of olevba for rtf, text, empty
    f537ec1c
    Christian Herdtweck authored
    2019-04-30 12:50:30 +0200  
    Browse Code »
  • tests: tell oleid test what to expect for new samples
    14e68768
    Christian Herdtweck authored
    2019-04-30 12:50:30 +0200  
    Browse Code »
  • crypto: Make debug log a little less minimalistic
    d7ca775e
    Christian Herdtweck authored
    2019-04-30 12:50:30 +0200  
    Browse Code »
  • crypto: Correct whitespace, remove unnecessary code
    7db8aef6
    Christian Herdtweck authored
    2019-04-30 12:50:30 +0200  
    Browse Code »
  • crypto: Do not throw from is_encrypted
    5988d795
    Christian Herdtweck authored
    2019-04-30 12:50:30 +0200  
    Browse Code »
  • crypto: use msoffcrypto's is_encrypted if possible ...
    4e1f626d
    There were cases where our own test of byte 0x15 of SummaryInformation
    stream was incorrect. So leave test to the professionals ;-)
    Christian Herdtweck authored
    2019-04-30 12:50:07 +0200  
    Browse Code »

29 Apr, 2019
2 commits
  • crypto: declare specialiced is_encrypted private
    0dfa259f
    Christian Herdtweck authored
    2019-04-29 12:01:35 +0200  
    Browse Code »
  • tests: Add another sample ...
    5dfba516
    This is an interesting one since "our" old implementation of is_encrypted
    claims that the embedded file is still encrypted (which it is not), but
    the msoffcrypto-is_encrypted gets it right.
    Christian Herdtweck authored
    2019-04-29 12:01:35 +0200  
    Browse Code »

22 Apr, 2019
1 commit
  • olevba: fix log.info to debug
    a4f3a88a
    decalage2 authored
    2019-04-22 17:51:25 +0200  
    Browse Code »

20 Apr, 2019
1 commit
  • olevba: initialize VBA_Parser.xlm_macros (fixes #433)
    aae7b4c4
    decalage2 authored
    2019-04-20 17:02:40 +0200  
    Browse Code »

10 Apr, 2019
1 commit
  • requirements.txt: synced with setup.py dependencies
    31241387
    decalage2 authored
    2019-04-10 17:50:55 +0200  
    Browse Code »

09 Apr, 2019
1 commit
  • olevba: decompress_stream now accepts both bytes and bytearray (fixes #422)
    0b652e8c
    decalage2 authored
    2019-04-09 22:04:53 +0200  
    Browse Code »

08 Apr, 2019
3 commits
  • updated install.txt
    96de55c5
    decalage2 authored
    2019-04-08 19:54:33 +0200  
    Browse Code »
  • updated readme and doc for v0.54
    66347e8e
    decalage2 authored
    2019-04-08 19:50:20 +0200  
    Browse Code »
  • oleid: fixed import for local use without install
    d03c8683
    decalage2 authored
    2019-04-08 17:54:08 +0200  
    Browse Code »

04 Apr, 2019
11 commits
  • readme: added v0.54
    a2380b34
    decalage2 authored
    2019-04-04 22:21:50 +0200  
    Browse Code »
  • bumped all tools to v0.54
    81bc39a6
    decalage2 authored
    2019-04-04 22:16:54 +0200  
    Browse Code »
  • clsid: added Microsoft Forms 2.0 Label (fixes #368)
    3a4863d6
    decalage2 authored
    2019-04-04 22:01:35 +0200  
    Browse Code »
  • olevba: added WriteProcessMemory, XLM keywords (issue #389)
    00871933
    decalage2 authored
    2019-04-04 21:44:00 +0200  
    Browse Code »
  • mraptor: added WriteProcessMemory, XLM keywords
    ca75f008
    decalage2 authored
    2019-04-04 21:42:55 +0200  
    Browse Code »
  • mraptor: added ExecuteExcel4Macro and ShellExecuteA (fixes #374)
    f56062de
    decalage2 authored
    2019-04-04 20:31:52 +0200  
    Browse Code »
  • olevba: added detection of ExecuteExcel4Macro (issue #374), fixed false positive… ...
    da3d95e6
    … detection of backspace chars (issue #358)
    decalage2 authored
    2019-04-04 20:22:48 +0200  
    Browse Code »
  • setup, requirements: fixed dependency to msoffcrypto-tool
    e7748962
    decalage2 authored
    2019-04-04 17:50:25 +0200  
    Browse Code »
  • Merge pull request #378 from r3comp1le/master ...
    f6d7601f
    added md5 to rtfobj
    Philippe Lagadec authored
    2019-04-04 17:01:24 +0200  
    Browse Code »
  • Merge pull request #410 from christian-intra2net/json-more-structure ...
    9780dc7c
    Type-Field in logging
    Philippe Lagadec authored
    2019-04-04 10:15:46 +0200  
    Browse Code »
  • Merge pull request #412 from christian-intra2net/ooxml-accept-OpenOffice ...
    8fac8b0c
    Avoid error in ooxml for non-office zip files
    Philippe Lagadec authored
    2019-04-04 10:13:13 +0200  
    Browse Code »

02 Apr, 2019
2 commits
  • tests: tell ooxml test about new test samples
    a55bd780
    Christian Herdtweck authored
    2019-04-02 14:07:31 +0200  
    Browse Code »
  • tests: add open office samples to oleobj test ...
    ee87aca4
    oleobj cannot detect yet that these are open office, but it can now
    treat them like regular zip files and find embedded objects in them.
    
    Samples are harmless, were created by me.
    Christian Herdtweck authored
    2019-04-02 14:04:33 +0200  
    Browse Code »