Logo white

Peter M. Groen / oletools

Sign in
  • Sign in
  • Project
  • Files
  • Commits
  • Network
  • Graphs
  • Milestones
  • Issues 0
  • Merge Requests 0
  • Labels
  • Wiki
  • Commits 1,521
  • Compare
  • Branches 1
  • Tags 0
  • oletools
08 Jan, 2019
1 commit
  • olevba: improved VBA_Project
    a410b68b
    decalage2 authored
    2019-01-08 21:37:24 +0100  
    Browse Code »

06 Jan, 2019
1 commit
  • olevba: added code_raw and code_str to VBA_Module
    4a63e59b
    decalage2 authored
    2019-01-06 22:10:45 +0100  
    Browse Code »

02 Jan, 2019
1 commit
  • olevba: added encoding option to VBA_Parser (work in progress), fixed some comments for Sphinx
    07333a3a
    decalage2 authored
    2019-01-02 23:14:19 +0100  
    Browse Code »

01 Jan, 2019
5 commits
  • olevba: removed support for Python 2.6
    558b3748
    decalage2 authored
    2019-01-01 18:30:49 +0100  
    Browse Code »
  • olevba: removed NullHandler (was only needed for Python 2.6)
    8a88bb29
    decalage2 authored
    2019-01-01 16:32:05 +0100  
    Browse Code »
  • olevba: removed support for Python 2.6
    efa4ad19
    decalage2 authored
    2019-01-01 16:23:21 +0100  
    Browse Code »
  • sync olevba and olevba3 (work in progress)
    a0475490
    decalage2 authored
    2019-01-01 16:14:58 +0100  
    Browse Code »
  • olevba: updated comments
    437fdad9
    decalage2 authored
    2019-01-01 15:50:10 +0100  
    Browse Code »

19 Dec, 2018
1 commit
  • readme: added links to stoQ and FLARE-VM
    f86dfb3c
    decalage2 authored
    2018-12-19 14:47:52 +0100  
    Browse Code »

17 Dec, 2018
1 commit
  • olevba: added class VBA_Module, VBA code is now correctly converted to Unicode u… ...
    27208dc9
    …sing the VBA project code page. (work in progress)
    decalage2 authored
    2018-12-17 22:24:08 +0100  
    Browse Code »

14 Dec, 2018
4 commits
  • olevba: removed invalid character
    08905acd
    decalage2 authored
    2018-12-14 15:19:20 +0100  
    Browse Code »
  • olevba: use new codepages module
    fbbad0a2
    decalage2 authored
    2018-12-14 14:37:29 +0100  
    Browse Code »
  • codepages: added get_codepage_name
    0982acb0
    decalage2 authored
    2018-12-14 14:11:48 +0100  
    Browse Code »
  • common: added new module codepages
    fdc77bfa
    decalage2 authored
    2018-12-14 13:59:06 +0100  
    Browse Code »

13 Dec, 2018
1 commit
  • olevba: added class VBA_Project
    7374be1e
    decalage2 authored
    2018-12-13 11:26:53 +0100  
    Browse Code »

12 Dec, 2018
5 commits
  • olevba+olevba3: print Python version in banner
    55483626
    decalage2 authored
    2018-12-12 16:12:59 +0100  
    Browse Code »
  • olevba: temporary fix for Unicode errors when colorizing the output if it contai… ...
    dfbad40b
    …ns non-ascii chararcters
    decalage2 authored
    2018-12-12 16:07:17 +0100  
    Browse Code »
  • sync olevba and olevba3 (work in progress): updated decompress_stream to use a bytearray
    ea377685
    decalage2 authored
    2018-12-12 16:01:22 +0100  
    Browse Code »
  • updated MANIFEST.in
    19911393
    decalage2 authored
    2018-12-12 15:31:48 +0100  
    Browse Code »
  • Merge pull request #371 from christian-intra2net/source-dist-include-tests ...
    20aea720
    setup: create MANIFEST so source-tarball includes tests
    Philippe Lagadec authored
    2018-12-12 15:07:07 +0100  
    Browse Code »

09 Dec, 2018
1 commit
  • sync olevba and olevba3 (work in progress)
    b44486fc
    decalage2 authored
    2018-12-09 17:24:30 +0100  
    Browse Code »

08 Dec, 2018
3 commits
  • xglob: fixed issue #373, zip password must be bytes
    9c301d5b
    decalage2 authored
    2018-12-08 17:25:52 +0100  
    Browse Code »
  • olevba3: import io instead of _io
    5699d8bf
    decalage2 authored
    2018-12-08 16:49:23 +0100  
    Browse Code »
  • olevba: replaced StringIO by BytesIO for better Python 3 compatibility
    13eb7056
    decalage2 authored
    2018-12-08 16:44:03 +0100  
    Browse Code »

06 Dec, 2018
2 commits
  • setup: create MANIFEST so source-tarball includes tests ...
    0d7495db
    When creating source tarball	via "python setup.py sdist" or
    "python setup.py bdist_rpm", then include test code and data so can
    still run unittests. This does not affect the rpms.
    
    Tried first to achieve this effect (test[-data] included in source but not
    in rpm) using options in setup.py but failed.
    Christian Herdtweck authored
    2018-12-06 15:50:58 +0100  
    Browse Code »
  • olevba: suspicious keywords and IOCs found during analysis are now colorized in … ...
    e444851c
    …the VBA code output on the console
    decalage2 authored
    2018-12-06 09:06:25 +0100  
    Browse Code »

05 Dec, 2018
1 commit
  • olevba: removed some old comments
    1bc2b801
    decalage2 authored
    2018-12-05 18:01:37 +0100  
    Browse Code »

03 Dec, 2018
1 commit
  • olevba: replaced prettytable by tablestream (+colors)
    cb596a8a
    decalage2 authored
    2018-12-03 21:58:44 +0100  
    Browse Code »

30 Oct, 2018
12 commits
  • oleobj: bumped version to 0.54dev4
    33e52c57
    decalage2 authored
    2018-10-30 19:55:58 +0100  
    Browse Code »
  • Merge pull request #317 from samiraguiar/oleobj-detect-external ...
    79159242
    oleobj: detect external links
    Philippe Lagadec authored
    2018-10-30 19:53:02 +0100  
    Browse Code »
  • bumped version to 0.54dev4
    d3b8857d
    decalage2 authored
    2018-10-30 19:47:39 +0100  
    Browse Code »
  • Merge pull request #362 from christian-intra2net/encrypt-detect-and-raise ...
    e8b6dd46
    Encrypt detect and raise
    Philippe Lagadec authored
    2018-10-30 19:45:17 +0100  
    Browse Code »
  • olevba[3]: update doc string and changelog
    72684467
    Christian Herdtweck authored
    2018-10-30 12:18:59 +0100  
    Browse Code »
  • msodde: update doc string and changelog
    dbd555de
    Christian Herdtweck authored
    2018-10-30 12:18:59 +0100  
    Browse Code »
  • msodde: mention error if processing fails ...
    053d9359
    This only applies to non-xml parts of xlsx files
    Christian Herdtweck authored
    2018-10-30 12:18:59 +0100  
    Browse Code »
  • ppt_record_parser: detect ppt even when encrypted
    3a3fa1f0
    Christian Herdtweck authored
    2018-10-30 12:18:59 +0100  
    Browse Code »
  • oleid: return None if check_* failed due to closed file
    541e2d11
    Christian Herdtweck authored
    2018-10-30 12:18:59 +0100  
    Browse Code »
  • tests: create unittest for msodde with encrypted input
    8cbc4d2c
    Christian Herdtweck authored
    2018-10-30 12:18:59 +0100  
    Browse Code »
  • tests: create unittest for olevba with encrypted input
    c2018fd8
    Christian Herdtweck authored
    2018-10-30 12:18:59 +0100  
    Browse Code »
  • msodde: Raise error of file is encrypted ...
    ca1940b7
    Sofar, msodde do not complain if file is encrypted, but cannot inspect it
    either. That gives the user a false sense of security which is dangerous.
    Raise error to make the situation clear
    Christian Herdtweck authored
    2018-10-30 12:18:59 +0100  
    Browse Code »