Logo white

Peter M. Groen / oletools

Sign in
  • Sign in
  • Project
  • Files
  • Commits
  • Network
  • Graphs
  • Milestones
  • Issues 0
  • Merge Requests 0
  • Labels
  • Wiki
  • Commits 1,521
  • Compare
  • Branches 1
  • Tags 0
  • oletools
22 May, 2025
2 commits
  • Merge pull request #842 from federicofantini/master ...
    e94e735a
    password discovery and decrypted filepath dstfile
    Philippe Lagadec authored
    2025-05-22 10:51:41 +0200  
    Browse Code »
  • doc: updated SECURITY with a link to reporting via Github
    c211c3dd
    decalage2 authored
    2025-05-22 10:20:42 +0200  
    Browse Code »

21 May, 2025
3 commits
  • doc: added SECURITY.md
    8c21beb3
    Philippe Lagadec authored
    2025-05-21 22:41:48 +0200  
    Browse Code »
  • Merge pull request #873 from sdushantha/fix-esc-char ...
    1508e45c
    Prevent parsing of escape characters
    Philippe Lagadec authored
    2025-05-21 16:33:07 +0200  
    Browse Code »
  • fix(olevba): prevent display of ANSI escape codes on the CLI (PR #873), bump to v0.60.3
    ab9a0433
    decalage2 authored
    2025-05-21 16:26:26 +0200  
    Browse Code »

06 May, 2025
1 commit
  • Replace char 27 (ESC) with \e ...
    5641d8d0
    By replacing the escape character with \e, user defined escape sequences wont
    be rendered in the output. This prevents malicious actors from performing
    anti-analysis.
    Siddharth Dushantha authored
    2025-05-06 11:22:34 +0200  
    Browse Code »

23 Apr, 2025
1 commit
  • Merge pull request #870 from bartblaze/patch-1 ...
    8285ba74
    Fix CAPE link
    Philippe Lagadec authored
    2025-04-23 22:56:39 +0200  
    Browse Code »

14 Apr, 2025
1 commit
  • Fix CAPE link
    66fece04
    Bart P authored
    2025-04-14 17:53:09 +0200  
    Browse Code »

03 Jul, 2024
1 commit
  • changed decrypted_filepath name to decrypted_dir
    5034a62d
    Federico Fantini authored
    2024-07-03 09:44:28 +0200  
    Browse Code »

02 Jul, 2024
3 commits
  • updated readme
    b565533d
    Philippe Lagadec authored
    2024-07-02 15:41:31 +0200  
    Browse Code »
  • updated doc folder
    82b53b32
    Philippe Lagadec authored
    2024-07-02 15:22:40 +0200  
    Browse Code »
  • bumped version and license date for 0.60.2
    e70b9d8f
    Philippe Lagadec authored
    2024-07-02 15:22:02 +0200  
    Browse Code »

27 Jun, 2024
1 commit
  • updated install docs to mention pipx
    fa510be7
    Philippe Lagadec authored
    2024-06-27 17:23:05 +0200  
    Browse Code »

10 Jun, 2024
3 commits
  • updated setup and changelog
    1395b25b
    Philippe Lagadec authored
    2024-06-10 23:03:02 +0200  
    Browse Code »
  • Merge pull request #841 from cccs-jh/remove_imp ...
    f053aad6
    Remove imp import from xxxswf for python 3.12 compatability
    Philippe Lagadec authored
    2024-06-10 22:58:39 +0200  
    Browse Code »
  • ftguess: added PowerPoint content-types
    169ef505
    Philippe Lagadec authored
    2024-06-10 22:42:16 +0200  
    Browse Code »

31 May, 2024
4 commits
  • Merge pull request #859 from christian-intra2net/unittest-automation ...
    951b436c
    Fix unittests
    Philippe Lagadec authored
    2024-05-31 22:13:49 +0200  
    Browse Code »
  • Add sample name to unittest fail message. ...
    0550fd18
    Should help debugging unexpected results.
    Christian Herdtweck authored
    2024-05-31 16:28:22 +0200  
    Browse Code »
  • Fix again: result for vba ppt sample ...
    2127af03
    Another recent pull request changed the outcome of 2 tests for one
    sample. However, those results do not appear on my system or the github
    integrated unittest systems. Maybe detection is dependent on system
    encoding?
    
    Need to investigate, exclude sample for now.
    Christian Herdtweck authored
    2024-05-31 16:27:52 +0200  
    Browse Code »
  • Fix: Update silencing of wrong pylint warnings ...
    29fe9111
    Introduced an error when silencing pylint warnings. This should fix it.
    Christian Herdtweck authored
    2024-05-31 15:25:44 +0200  
    Browse Code »

30 May, 2024
1 commit
  • Added comments for pylint
    e837ab8c
    Philippe Lagadec authored
    2024-05-30 20:37:13 +0200  
    Browse Code »

28 May, 2024
2 commits
  • Merge pull request #854 from xambroz/patch-1 ...
    2d2d5c2c
    rtfobj.py syntax error
    Philippe Lagadec authored
    2024-05-28 22:57:06 +0200  
    Browse Code »
  • Merge pull request #855 from xambroz/patch-2 ...
    edc004f2
    oleobj.py syntax error
    Philippe Lagadec authored
    2024-05-28 22:54:56 +0200  
    Browse Code »

06 May, 2024
3 commits
  • unittests.yml: updated to actions/checkout@v4 and actions/setup-python@v5
    4093ecef
    Philippe Lagadec authored
    2024-05-06 23:43:25 +0200  
    Browse Code »
  • Merge pull request #796 from christian-intra2net/unittest-automation ...
    6b58e330
    Run unittests automatically on github
    Philippe Lagadec authored
    2024-05-06 23:29:18 +0200  
    Browse Code »
  • Merge branch 'master' into unittest-automation
    3b7a4ea8
    Philippe Lagadec authored
    2024-05-06 23:28:35 +0200  
    Browse Code »

04 May, 2024
2 commits
  • oleobj.py syntax error ...
    6b4c7b8e
    In python 3.12+ this escaping is reported as syntax error. Moving the dash to the end of the regex avoids the need for escaping it.
    
    oletools/oleobj.py:537
      /rpmbuild/BUILD/oletools-78b2d459a33df378a4f69ffc6c33313509cecfe4/oletools/oleobj.py:537: SyntaxWarning: invalid escape sequence '\-'
        sane_fname = re.sub(u'[^a-zA-Z0-9.\-_ ]', replacement, basepath)
    Michal Ambroz authored
    2024-05-04 17:07:00 +0200  
    Browse Code »
  • rtfobj.py syntax error ...
    83046164
    In python 3.12+ it is reporting the syntax error 
    
    oletools/rtfobj.py:272
      /rpmbuild/BUILD/oletools-78b2d459a33df378a4f69ffc6c33313509cecfe4/oletools/rtfobj.py:272: SyntaxWarning: invalid escape sequence '\d'
        DECIMAL_GROUP = b'(\d{1,250})'
    Michal Ambroz authored
    2024-05-04 17:00:39 +0200  
    Browse Code »

25 Apr, 2024
1 commit
  • Merge pull request #812 from vertexproject/feat_pyparsing ...
    78b2d459
    Relax pyparsing requirement.
    Philippe Lagadec authored
    2024-04-25 23:30:08 +0200  
    Browse Code »

18 Apr, 2024
1 commit
  • readme: added EXPMON link
    e4138e38
    Philippe Lagadec authored
    2024-04-18 08:05:32 +0200  
    Browse Code »

20 Feb, 2024
2 commits
  • Merge remote-tracking branch 'origin/master'
    69ce923d
    Philippe Lagadec authored
    2024-02-20 10:52:20 +0100  
    Browse Code »
  • readme: added link to Binary Refinery project
    09aa9aef
    Philippe Lagadec authored
    2024-02-20 10:52:00 +0100  
    Browse Code »

15 Feb, 2024
1 commit
  • readme: added link to Tylabs QuickSand
    6962a386
    decalage2 authored
    2024-02-15 23:02:57 +0100  
    Browse Code »

13 Feb, 2024
1 commit
  • added support to password discovery during decryption ...
    ccf99d1a
    added support to decrypted filepath dstfile
    Federico Fantini authored
    2024-02-13 16:37:03 +0100  
    Browse Code »

12 Feb, 2024
1 commit
  • Remove imp import from xxxswf for python 3.12 compatability
    80825c43
    cccs-jh authored
    2024-02-12 20:21:36 -0500  
    Browse Code »

31 Jan, 2024
1 commit
  • refactor: updated .gitignore
    82b49eb6
    Philippe Lagadec authored
    2024-01-31 13:51:41 +0100  
    Browse Code »

29 Jan, 2024
2 commits
  • updated changelog and bumped version to 0.60.2dev5
    bbc4c0c5
    decalage2 authored
    2024-01-29 23:24:00 +0100  
    Browse Code »
  • Merge remote-tracking branch 'kijeong/add/projectcompatversion_record' ...
    5c03a4af
    # Conflicts:
    #	tests/olevba/test_basic.py
    decalage2 authored
    2024-01-29 23:14:54 +0100  
    Browse Code »

18 Jan, 2024
1 commit
  • readme: added link to ADAPT project
    fd821f0f
    Philippe Lagadec authored
    2024-01-18 15:12:20 +0100  
    Browse Code »

22 Dec, 2023
1 commit
  • Remove py2 from CI tests ...
    f93f527e
    This was removed by github in June 2023
    Christian Herdtweck authored
    2023-12-22 14:40:09 +0100  
    Browse Code »