Logo white

Peter M. Groen / oletools

Sign in
  • Sign in
  • Project
  • Files
  • Commits
  • Network
  • Graphs
  • Milestones
  • Issues 0
  • Merge Requests 0
  • Labels
  • Wiki
  • Commits 1,521
  • Compare
  • Branches 1
  • Tags 0
  • oletools
  • oletools
25 Oct, 2017
10 commits
  • msodde: added logging
    9a4e8d90
    decalage2 authored
    2017-10-25 23:50:36 +0200  
    Browse Dir »
  • Merge branch 'master' into ddedev
    a8209d75
    Philippe Lagadec authored
    2017-10-25 22:51:59 +0200  
    Browse Dir »
  • Add option for custom command line args in msodde.py ...
    ecd49a76
    Custom command line arguments greatly simplifies unit test creation for
    the main method.
    
    Also, avoid calling sys.exit in functions (that is good practice if I
    recall corretly).
    Christian Herdtweck authored
    2017-10-25 16:27:22 +0200  
    Browse Dir »
  • Show banner in error case ...
    8f9df350
    Also correct banner and use the argparse-way to test for file existence
    Christian Herdtweck authored
    2017-10-25 16:27:22 +0200  
    Browse Dir »
  • Make msodde.py python3-compatible ...
    66bc3f34
    Tested with Python 3.3.2
    Christian Herdtweck authored
    2017-10-25 14:14:36 +0200  
    Browse Dir »
  • Add parser for .doc files (Word 2003 and earlier) ...
    aca2c7b9
    Works with Python 2.7, still have to check with other versions
    Christian Herdtweck authored
    2017-10-25 14:14:03 +0200  
    Browse Dir »
  • Add json output to msodde.py ...
    c49a5078
    Output is only json-compatible if program succeeded (return code 0).
    Otherwise there may be error messages (i.e. from argument parsing).
    Christian Herdtweck authored
    2017-10-25 14:12:34 +0200  
    Browse Dir »
  • Merge branch 'master' into ddedev
    15743bfd
    Etienne Stalmans authored
    2017-10-25 09:39:02 +0200  
    Browse Dir »
  • Parse other files in the .docx that are capable of containing field codes. This … ...
    2e161003
    …should help pickup DDE links embedded into headers/footers/endnotes/etc. If other locations are identified, these can be added to the 'LOCATIONS' constant
    Etienne Stalmans authored
    2017-10-25 09:30:21 +0200  
    Browse Dir »
  • fix to account for field codes that start and end in different w:p tags
    25c59f43
    Etienne Stalmans authored
    2017-10-25 09:12:41 +0200  
    Browse Dir »

24 Oct, 2017
4 commits
  • Adds an additional check to detect DDE (#205) ...
    281a2e3c
    * Adds an additional check to detect if DDE links exist inside fldSimple values
    
    * clean-up to use TAG_W_INSTRATTR instead of constructing string during parsing
    Etienne Stalmans authored
    2017-10-24 23:16:48 +0200  
    Browse Dir »
  • Use constants for TAG_W_R and TAG_W_P instead of constructing string each time
    3a002837
    Etienne Stalmans authored
    2017-10-24 11:23:49 +0200  
    Browse Dir »
  • Fix a bug where the last instrText wasn't always appended to the final string. ...
    7bcabd99
    Reset the level counter with each w:p as far as I can see field codes shouldn't cross w:p tags
    Etienne Stalmans authored
    2017-10-24 11:20:59 +0200  
    Browse Dir »
  • This tries to group all Field codes together. Will parse the document body and f… ...
    ba871b6b
    …ind "begin" and "end" tags. All field codes
    within these will be grouped together.
    
    Should account for nested field codes as well. Values like { SET a { QUOTE 65 65 65 65 } } should be parsed out correctly.
    Etienne Stalmans authored
    2017-10-24 11:02:40 +0200  
    Browse Dir »

23 Oct, 2017
2 commits
  • clean-up to use TAG_W_INSTRATTR instead of constructing string during parsing
    dae3f0f3
    Etienne Stalmans authored
    2017-10-23 21:26:44 +0200  
    Browse Dir »
  • Adds an additional check to detect if DDE links exist inside fldSimple values
    3c505247
    Etienne Stalmans authored
    2017-10-23 14:40:57 +0200  
    Browse Dir »

20 Oct, 2017
1 commit
  • msodde: fixed issue #202 (handling empty xml tags)
    9f71892c
    decalage2 authored
    2017-10-20 17:19:07 +0200  
    Browse Dir »

18 Oct, 2017
1 commit
  • added msodde.py
    caed0b2a
    decalage2 authored
    2017-10-18 22:35:04 +0200  
    Browse Dir »

06 Sep, 2017
1 commit
  • rtfobj: fixed issue #196, \pxe is not a destination
    40718f9d
    decalage2 authored
    2017-09-06 21:52:40 +0200  
    Browse Dir »

24 Jul, 2017
2 commits
  • rtfobj: ignore optional space after \bin (issue #185)
    80bf761a
    decalage2 authored
    2017-07-24 22:33:56 +0200  
    Browse Dir »
  • rtfobj: fixed call to RtfParser._end_of_file (issue #185)
    6fcf5ada
    decalage2 authored
    2017-07-24 22:26:16 +0200  
    Browse Dir »

14 Jul, 2017
1 commit
  • rtfobj: disabled logging of each control word (issue #184)
    dcecff4e
    decalage2 authored
    2017-07-14 21:13:17 +0200  
    Browse Dir »

11 Jul, 2017
2 commits
  • olevba: raise exception instead of sys.exit (issue #180)
    eecabc2a
    decalage2 authored
    2017-07-11 22:02:47 +0200  
    Browse Dir »
  • olefile: ignore incorrect ByteOrder (issue #182)
    433f234f
    decalage2 authored
    2017-07-11 21:49:00 +0200  
    Browse Dir »

29 Jun, 2017
4 commits
  • updated doc for v0.51
    f34a8c1c
    decalage2 authored
    2017-06-29 22:50:00 +0200  
    Browse Dir »
  • bumped version to 0.51
    ec9dff37
    decalage2 authored
    2017-06-29 22:40:59 +0200  
    Browse Dir »
  • mraptor3: updated to match mraptor
    61c29e80
    decalage2 authored
    2017-06-29 22:23:55 +0200  
    Browse Dir »
  • rtfobj: temporary fix for issue #178
    3ec4b066
    decalage2 authored
    2017-06-29 18:17:35 +0200  
    Browse Dir »

15 Jun, 2017
1 commit
  • olevba: deobfuscation line by line to handle large files
    b4b52d22
    decalage2 authored
    2017-06-15 22:15:26 +0200  
    Browse Dir »

08 Jun, 2017
3 commits
  • olevba: fixed issue #122 Chr() with negative numbers
    2ed0a9b6
    decalage2 authored
    2017-06-08 23:18:59 +0200  
    Browse Dir »
  • rtfobj: fixed issue #143 - bin objects with negative length are now ignored
    3247071f
    decalage2 authored
    2017-06-08 21:32:47 +0200  
    Browse Dir »
  • Rtfobj binparser bugfix (#143) ...
    7922da99
    rtfobj: Handling negative bin len (anti-analysis trick)
    Ahmed Zaki authored
    2017-06-08 21:03:18 +0200  
    Browse Dir »

31 May, 2017
4 commits
  • olefile: synced changes from olefile repo
    68a910d1
    decalage2 authored
    2017-05-31 22:21:44 +0200  
    Browse Dir »
  • Clamp num_props to prevent excessive resource usage (#114) ...
    63db719f
    A large num_props value will cause memory bloat (via the range usage) and potentially billions of useless logs in relaxed mode.  Clamp it to a value that has a reasonable chance of working without generating exceptions.
    Brad Spengler authored
    2017-05-31 21:45:48 +0200  
    Browse Dir »
  • olevba: PR #135 fixing issue #132 for some Mac files
    29b08127
    decalage2 authored
    2017-05-31 21:33:49 +0200  
    Browse Dir »
  • Fixed issue with Mac files and REFERENCENAME not conforming to spec (#135)
    1fa960ff
    c1fe authored
    2017-05-31 21:28:18 +0200  
    Browse Dir »

19 May, 2017
1 commit
  • olevba: added enable_logging to fix issue #154
    6d02dcee
    decalage2 authored
    2017-05-19 22:37:54 +0200  
    Browse Dir »

04 May, 2017
3 commits
  • rtfobj: fixed issue #164 to handle linked OLE objects
    6b621086
    decalage2 authored
    2017-05-04 23:21:40 +0200  
    Browse Dir »
  • olemeta: added optparse and xglob to process multiple files and zips (issue #141)
    66a9fd77
    decalage2 authored
    2017-05-04 22:50:56 +0200  
    Browse Dir »
  • oletimes: added optparse and xglob to process multiple files and zips (issue #141)
    c16ca78e
    decalage2 authored
    2017-05-04 22:43:28 +0200  
    Browse Dir »