Logo white

Peter M. Groen / oletools

Sign in
  • Sign in
  • Project
  • Files
  • Commits
  • Network
  • Graphs
  • Milestones
  • Issues 0
  • Merge Requests 0
  • Labels
  • Wiki
  • Commits 1,521
  • Compare
  • Branches 1
  • Tags 0
  • oletools
25 Mar, 2019
6 commits
  • tests: Add exceptions to olevba return code test
    7e5ee417
    Christian Herdtweck authored
    2019-03-25 11:47:34 +0100  
    Browse Code »
  • tests: add 4 clean example files for default-encryption ...
    5ab52bb6
    These 4 files contain dde-links to calc.exe and are encrypted with
    excel's standard password.
    Christian Herdtweck authored
    2019-03-25 11:47:34 +0100  
    Browse Code »
  • msodde: Integrate crypto for working on encrypted files
    c0c52599
    Christian Herdtweck authored
    2019-03-25 11:47:34 +0100  
    Browse Code »
  • crypto: Update recommendation for wrapper
    6fb40f28
    Christian Herdtweck authored
    2019-03-25 11:47:34 +0100  
    Browse Code »
  • msodde: Remove old error-raising handling of encryption
    c3adbe28
    Christian Herdtweck authored
    2019-03-25 11:47:34 +0100  
    Browse Code »
  • tests: Create test for new excel encrypted files
    e2684a62
    Christian Herdtweck authored
    2019-03-25 11:47:34 +0100  
    Browse Code »

21 Mar, 2019
20 commits
  • tests: add encrypted excel samples ...
    ddeeb743
    These are encrypted with the standard password hard-coded into excel to
    implement a form of write protection
    Christian Herdtweck authored
    2019-03-21 17:53:46 +0100  
    Browse Code »
  • tests: Use common base dirs in log_helper tests
    83720167
    Christian Herdtweck authored
    2019-03-21 17:53:46 +0100  
    Browse Code »
  • tests: provide more common base dirs
    da5d4644
    Christian Herdtweck authored
    2019-03-21 17:53:46 +0100  
    Browse Code »
  • crypto: Create a public non-throwing check for msoffcrypto
    e2ee81da
    Christian Herdtweck authored
    2019-03-21 17:53:46 +0100  
    Browse Code »
  • tests: cannot test yet encrypted.ppt
    03c467a6
    Christian Herdtweck authored
    2019-03-21 17:53:46 +0100  
    Browse Code »
  • ppt_record_parser: document behaviour of is_ppt
    79da30fe
    Christian Herdtweck authored
    2019-03-21 17:53:46 +0100  
    Browse Code »
  • olevba: return encryption error return code when appropriate
    bcd944f5
    Christian Herdtweck authored
    2019-03-21 17:53:46 +0100  
    Browse Code »
  • crypto: Raise different error if trying to decrypt ppt ...
    276fe51a
    ppt is not (yet) support by msoffcrypto
    Christian Herdtweck authored
    2019-03-21 17:53:46 +0100  
    Browse Code »
  • crypto: raise more specific error if msoffcrypto missing
    1e403e0e
    Christian Herdtweck authored
    2019-03-21 17:53:46 +0100  
    Browse Code »
  • common: Create error class for missing msoffcrypto
    e01d85cd
    Christian Herdtweck authored
    2019-03-21 09:28:24 +0100  
    Browse Code »
  • crypto: extend is_encrypted to zip-based files
    651d81b4
    Christian Herdtweck authored
    2019-03-21 09:28:24 +0100  
    Browse Code »
  • crypto: improve decrypt after some testing
    b98603ac
    Christian Herdtweck authored
    2019-03-21 09:28:24 +0100  
    Browse Code »
  • crypto: Provide crypt-based errors and new constant
    99ff607c
    Christian Herdtweck authored
    2019-03-21 09:28:24 +0100  
    Browse Code »
  • msodde: Update crypto error
    fbed510b
    Christian Herdtweck authored
    2019-03-21 09:28:24 +0100  
    Browse Code »
  • ppt_record_parser: fail is_ppt if is encrypted ...
    304db0e6
    I had assumed that even in an encrypted file the "PowerPoint Document"
    stream has to exist. But it does not (file could be embedded in other file)
    Christian Herdtweck authored
    2019-03-21 09:28:24 +0100  
    Browse Code »
  • common: diversify crypto-based errors
    171156df
    Christian Herdtweck authored
    2019-03-21 09:28:24 +0100  
    Browse Code »
  • record_base: Do not care about encryption
    805c5a1b
    Christian Herdtweck authored
    2019-03-21 09:28:24 +0100  
    Browse Code »
  • olevba: integrate crypto
    d966bbba
    Christian Herdtweck authored
    2019-03-21 09:28:21 +0100  
    Browse Code »
  • olevba: move processing & error handling from main to separate function ...
    d993998a
    Code is almost functionally identical.
    Only difference is that iteration of xglob is saved in a tuple to
    determine beforehand whether there is only one single file or several.
    This allows choosing the output if handling a single file with unspecified
    output mode and thus greatly simplifies handling of vba_parser
    Christian Herdtweck authored
    2019-03-21 09:24:27 +0100  
    Browse Code »
  • crypto: layout how to best integrate crypto into code
    1f04b96d
    Christian Herdtweck authored
    2019-03-21 09:23:26 +0100  
    Browse Code »

19 Mar, 2019
7 commits
  • crypto: generalize decrypt function
    826bee0b
    Christian Herdtweck authored
    2019-03-19 11:19:18 +0100  
    Browse Code »
  • Add optional dependency for decryption ...
    756fd308
    oletools will happily install without these, so this is mainly informative.
    Christian Herdtweck authored
    2019-03-19 11:19:18 +0100  
    Browse Code »
  • crypto: make write-protected documents available ...
    07dfc607
    Some kind of write protection is an encryption with a fixed password.
    Try decrypting such files.
    Christian Herdtweck authored
    2019-03-19 11:19:12 +0100  
    Browse Code »
  • crypto: Create check_encryption with code from oleid
    c73350c2
    Christian Herdtweck authored
    2019-03-19 11:18:10 +0100  
    Browse Code »
  • setup: added the thirdparty.oledump package
    1d8a1759
    Philippe Lagadec authored
    2019-03-19 10:38:02 +0100  
    Browse Code »
  • Merge remote-tracking branch 'origin/master'
    18dc7e69
    decalage2 authored
    2019-03-19 08:08:06 +0100  
    Browse Code »
  • olevba: added XLM/XLF macros detection for Excel OLE files, Python 2 only (issue #389)
    6b9af1ea
    decalage2 authored
    2019-03-19 08:02:09 +0100  
    Browse Code »

14 Mar, 2019
2 commits
  • Merge pull request #392 from GoSecure/oleid-import-fix ...
    af54fab4
    Fixing PrettyTable import for oleid (fixes #391)
    Philippe Lagadec authored
    2019-03-14 15:02:25 +0100  
    Browse Code »
  • Merge pull request #393 from halos/master ...
    734446fb
    Added detection for Equations Editor (CVE-2017-11882) in 'rtfobj'
    Philippe Lagadec authored
    2019-03-14 14:56:25 +0100  
    Browse Code »

09 Mar, 2019
1 commit
  • Merge pull request #396 from idiom/master ...
    f9a63e0c
    Update rtfobj to use the extension from the temp path of an embedded Package object
    Philippe Lagadec authored
    2019-03-09 16:02:01 +0100  
    Browse Code »

08 Mar, 2019
1 commit
  • Updated to check both the file and temp path extensions. Added a check comparing… ...
    53813916
    … if both extensions are identical.
    idiom authored
    2019-03-08 20:51:07 -0500  
    Browse Code »

07 Mar, 2019
1 commit
  • Update rtfobj to use the extension from the temp path of an embedded Package object.
    3f526ce4
    idiom authored
    2019-03-07 23:14:35 -0500  
    Browse Code »

16 Feb, 2019
1 commit
  • mraptor3: replaced by a redirection to mraptor + deprecation warning (issue #106)
    e9dca546
    decalage2 authored
    2019-02-16 15:58:15 +0100  
    Browse Code »

15 Feb, 2019
1 commit
  • olevba: fixed json2ascii to support Python 2+3 (issue #106)
    7d06413c
    decalage2 authored
    2019-02-15 21:03:29 +0100  
    Browse Code »