Logo white

Peter M. Groen / oletools

Sign in
  • Sign in
  • Project
  • Files
  • Commits
  • Network
  • Graphs
  • Milestones
  • Issues 0
  • Merge Requests 0
  • Labels
  • Wiki
  • Commits 1,521
  • Compare
  • Branches 1
  • Tags 0
  • oletools
04 Apr, 2019
5 commits
  • olevba: added detection of ExecuteExcel4Macro (issue #374), fixed false positive… ...
    da3d95e6
    … detection of backspace chars (issue #358)
    decalage2 authored
    2019-04-04 20:22:48 +0200  
    Browse Code »
  • setup, requirements: fixed dependency to msoffcrypto-tool
    e7748962
    decalage2 authored
    2019-04-04 17:50:25 +0200  
    Browse Code »
  • Merge pull request #378 from r3comp1le/master ...
    f6d7601f
    added md5 to rtfobj
    Philippe Lagadec authored
    2019-04-04 17:01:24 +0200  
    Browse Code »
  • Merge pull request #410 from christian-intra2net/json-more-structure ...
    9780dc7c
    Type-Field in logging
    Philippe Lagadec authored
    2019-04-04 10:15:46 +0200  
    Browse Code »
  • Merge pull request #412 from christian-intra2net/ooxml-accept-OpenOffice ...
    8fac8b0c
    Avoid error in ooxml for non-office zip files
    Philippe Lagadec authored
    2019-04-04 10:13:13 +0200  
    Browse Code »

02 Apr, 2019
8 commits
  • tests: tell ooxml test about new test samples
    a55bd780
    Christian Herdtweck authored
    2019-04-02 14:07:31 +0200  
    Browse Code »
  • tests: add open office samples to oleobj test ...
    ee87aca4
    oleobj cannot detect yet that these are open office, but it can now
    treat them like regular zip files and find embedded objects in them.
    
    Samples are harmless, were created by me.
    Christian Herdtweck authored
    2019-04-02 14:04:33 +0200  
    Browse Code »
  • oleobj: Minor improvement to log messages ...
    04a633a6
    Firstly, not all zip files are ooxml files;
    Secondly, show in debug mode that ole file is analyzed by debug-logging
      stream names
    Christian Herdtweck authored
    2019-04-02 13:49:49 +0200  
    Browse Code »
  • ooxml: Fixes from pylint and pep8 ...
    f4b2a304
    One actually was an error (missing return from is_ooxml)
    Christian Herdtweck authored
    2019-04-02 13:27:57 +0200  
    Browse Code »
  • ooxml: Fix logger in test() function
    74b6c1ce
    Christian Herdtweck authored
    2019-04-02 13:14:34 +0200  
    Browse Code »
  • ooxml: Fix attempt to copy args ...
    6e4d05b5
    Not sure whether this copying is necessary at all...
    Christian Herdtweck authored
    2019-04-02 13:14:34 +0200  
    Browse Code »
  • ooxml: Correct error message ...
    9dfa0bc2
    Usually, did check for xml first, so if is not zip then the message
    was correct. But might change and function might be called from
    elsewhere.
    Christian Herdtweck authored
    2019-04-02 13:14:34 +0200  
    Browse Code »
  • ooxml: do not require [Content_Types].xml in zip files ...
    70c8a216
    This has to be present for Office OpenXML files but is not there e.g.
    for OpenOffice files (odt, ...).
    
    Can still analyze the file without this.
    Christian Herdtweck authored
    2019-04-02 13:14:34 +0200  
    Browse Code »

01 Apr, 2019
3 commits
  • crypto: fixed a bug in is_encrypted_ole
    f028496d
    decalage2 authored
    2019-04-01 22:37:50 +0200  
    Browse Code »
  • tests: replace 3 calls to deprecated function
    95bd4497
    Christian Herdtweck authored
    2019-04-01 09:05:08 +0200  
    Browse Code »
  • tests: Test new "type" field of json logging output ...
    7d89934c
    Every logging call can have an optional arg type='...' which is
    ignored when logging to text but shows in json output. The "type"
    of regular logging output in json is type='msg'.
    
    Added 2 messages with different type, adjusted existing test, created
    2 new ones.
    Christian Herdtweck authored
    2019-04-01 09:04:52 +0200  
    Browse Code »

28 Mar, 2019
3 commits
  • olevba: do not colorize the output if it is redirected to a file (issue #402)
    3056212d
    decalage2 authored
    2019-03-28 21:53:14 +0100  
    Browse Code »
  • msodde: clarify what part of output is the result
    8d49c606
    Christian Herdtweck authored
    2019-03-28 17:48:23 +0100  
    Browse Code »
  • logger: introduce 'type' field for json output ...
    9dc1dff3
    This is a start to bring back some structure into the json output.
    
    Might not be a permanent solution, need to further discuss in PR 308
    Christian Herdtweck authored
    2019-03-28 17:48:23 +0100  
    Browse Code »

27 Mar, 2019
2 commits
  • tablestream: slight fix, TableStyleSlim inherits from TableStyle
    afe9d247
    decalage2 authored
    2019-03-27 18:40:21 +0100  
    Browse Code »
  • msodde: slight fix to use the current dir to import oletools in case it's not th… ...
    7f492486
    …e version installed by pip
    decalage2 authored
    2019-03-27 18:35:19 +0100  
    Browse Code »

25 Mar, 2019
19 commits
  • common/errors: improved the error messages for encrypted files
    f55f8966
    decalage2 authored
    2019-03-25 22:49:56 +0100  
    Browse Code »
  • setup: bumped version to 0.54dev12
    8d15762e
    decalage2 authored
    2019-03-25 22:16:34 +0100  
    Browse Code »
  • Merge pull request #403 from christian-intra2net/crypto-write-protect ...
    88c2b0a0
    Integrate decrypt from msoffcrypto-tools
    Philippe Lagadec authored
    2019-03-25 22:11:40 +0100  
    Browse Code »
  • travis: install msoffcrypto-tool before testing
    1a2c90ee
    Christian Herdtweck authored
    2019-03-25 13:06:10 +0100  
    Browse Code »
  • msodde: silence 3 more pylint warnings ...
    b0ed8f11
    making pylint happier, part 5 (final for now)
    Christian Herdtweck authored
    2019-03-25 12:09:30 +0100  
    Browse Code »
  • msodde: no else after return ...
    3436df07
    making pylint happier, part 4
    Christian Herdtweck authored
    2019-03-25 12:09:00 +0100  
    Browse Code »
  • msodde: no undefined variables ...
    ef36a777
    making pylint happier, part 3
    Christian Herdtweck authored
    2019-03-25 12:08:05 +0100  
    Browse Code »
  • msodde: remove unused / unnecessary lines ...
    b844b306
    making pylint happy, part 2
    Christian Herdtweck authored
    2019-03-25 12:06:57 +0100  
    Browse Code »
  • msodde: Fix indent and line lengths ...
    f32ee920
    (making pylint happier, part 1)
    Christian Herdtweck authored
    2019-03-25 11:54:06 +0100  
    Browse Code »
  • tests: Adjust dde output text
    9f03687a
    Christian Herdtweck authored
    2019-03-25 11:47:34 +0100  
    Browse Code »
  • msodde: remove duplicate output "dde-link" for ooxml ...
    09b6a194
    Output "DDE Links:" makes another "DDE-Link " prefix unnecessary and
    parsing of output harder.
    Christian Herdtweck authored
    2019-03-25 11:47:34 +0100  
    Browse Code »
  • xls_parser: Minor bugfix and doc addition
    1496f13d
    Christian Herdtweck authored
    2019-03-25 11:47:34 +0100  
    Browse Code »
  • msodde: fix bad assumption, not all exc have message
    3c15e26a
    Christian Herdtweck authored
    2019-03-25 11:47:34 +0100  
    Browse Code »
  • msodde: Make password list optional for processing function
    84ea7425
    Christian Herdtweck authored
    2019-03-25 11:47:34 +0100  
    Browse Code »
  • tests: Create test for decryption in msodde
    1363c4f0
    Christian Herdtweck authored
    2019-03-25 11:47:34 +0100  
    Browse Code »
  • tests: Add exceptions to olevba return code test
    7e5ee417
    Christian Herdtweck authored
    2019-03-25 11:47:34 +0100  
    Browse Code »
  • tests: add 4 clean example files for default-encryption ...
    5ab52bb6
    These 4 files contain dde-links to calc.exe and are encrypted with
    excel's standard password.
    Christian Herdtweck authored
    2019-03-25 11:47:34 +0100  
    Browse Code »
  • msodde: Integrate crypto for working on encrypted files
    c0c52599
    Christian Herdtweck authored
    2019-03-25 11:47:34 +0100  
    Browse Code »
  • crypto: Update recommendation for wrapper
    6fb40f28
    Christian Herdtweck authored
    2019-03-25 11:47:34 +0100  
    Browse Code »