Logo white

Peter M. Groen / oletools

Sign in
  • Sign in
  • Project
  • Files
  • Commits
  • Network
  • Graphs
  • Milestones
  • Issues 0
  • Merge Requests 0
  • Labels
  • Wiki
  • Commits 1,521
  • Compare
  • Branches 1
  • Tags 0
  • oletools
08 May, 2019
1 commit
  • readme: added link to YOMI
    ec182bcb
    decalage2 authored
    2019-05-08 15:06:47 +0200  
    Browse Code »

22 Apr, 2019
1 commit
  • olevba: fix log.info to debug
    a4f3a88a
    decalage2 authored
    2019-04-22 17:51:25 +0200  
    Browse Code »

20 Apr, 2019
1 commit
  • olevba: initialize VBA_Parser.xlm_macros (fixes #433)
    aae7b4c4
    decalage2 authored
    2019-04-20 17:02:40 +0200  
    Browse Code »

10 Apr, 2019
1 commit
  • requirements.txt: synced with setup.py dependencies
    31241387
    decalage2 authored
    2019-04-10 17:50:55 +0200  
    Browse Code »

09 Apr, 2019
1 commit
  • olevba: decompress_stream now accepts both bytes and bytearray (fixes #422)
    0b652e8c
    decalage2 authored
    2019-04-09 22:04:53 +0200  
    Browse Code »

08 Apr, 2019
3 commits
  • updated install.txt
    96de55c5
    decalage2 authored
    2019-04-08 19:54:33 +0200  
    Browse Code »
  • updated readme and doc for v0.54
    66347e8e
    decalage2 authored
    2019-04-08 19:50:20 +0200  
    Browse Code »
  • oleid: fixed import for local use without install
    d03c8683
    decalage2 authored
    2019-04-08 17:54:08 +0200  
    Browse Code »

04 Apr, 2019
11 commits
  • readme: added v0.54
    a2380b34
    decalage2 authored
    2019-04-04 22:21:50 +0200  
    Browse Code »
  • bumped all tools to v0.54
    81bc39a6
    decalage2 authored
    2019-04-04 22:16:54 +0200  
    Browse Code »
  • clsid: added Microsoft Forms 2.0 Label (fixes #368)
    3a4863d6
    decalage2 authored
    2019-04-04 22:01:35 +0200  
    Browse Code »
  • olevba: added WriteProcessMemory, XLM keywords (issue #389)
    00871933
    decalage2 authored
    2019-04-04 21:44:00 +0200  
    Browse Code »
  • mraptor: added WriteProcessMemory, XLM keywords
    ca75f008
    decalage2 authored
    2019-04-04 21:42:55 +0200  
    Browse Code »
  • mraptor: added ExecuteExcel4Macro and ShellExecuteA (fixes #374)
    f56062de
    decalage2 authored
    2019-04-04 20:31:52 +0200  
    Browse Code »
  • olevba: added detection of ExecuteExcel4Macro (issue #374), fixed false positive… ...
    da3d95e6
    … detection of backspace chars (issue #358)
    decalage2 authored
    2019-04-04 20:22:48 +0200  
    Browse Code »
  • setup, requirements: fixed dependency to msoffcrypto-tool
    e7748962
    decalage2 authored
    2019-04-04 17:50:25 +0200  
    Browse Code »
  • Merge pull request #378 from r3comp1le/master ...
    f6d7601f
    added md5 to rtfobj
    Philippe Lagadec authored
    2019-04-04 17:01:24 +0200  
    Browse Code »
  • Merge pull request #410 from christian-intra2net/json-more-structure ...
    9780dc7c
    Type-Field in logging
    Philippe Lagadec authored
    2019-04-04 10:15:46 +0200  
    Browse Code »
  • Merge pull request #412 from christian-intra2net/ooxml-accept-OpenOffice ...
    8fac8b0c
    Avoid error in ooxml for non-office zip files
    Philippe Lagadec authored
    2019-04-04 10:13:13 +0200  
    Browse Code »

02 Apr, 2019
8 commits
  • tests: tell ooxml test about new test samples
    a55bd780
    Christian Herdtweck authored
    2019-04-02 14:07:31 +0200  
    Browse Code »
  • tests: add open office samples to oleobj test ...
    ee87aca4
    oleobj cannot detect yet that these are open office, but it can now
    treat them like regular zip files and find embedded objects in them.
    
    Samples are harmless, were created by me.
    Christian Herdtweck authored
    2019-04-02 14:04:33 +0200  
    Browse Code »
  • oleobj: Minor improvement to log messages ...
    04a633a6
    Firstly, not all zip files are ooxml files;
    Secondly, show in debug mode that ole file is analyzed by debug-logging
      stream names
    Christian Herdtweck authored
    2019-04-02 13:49:49 +0200  
    Browse Code »
  • ooxml: Fixes from pylint and pep8 ...
    f4b2a304
    One actually was an error (missing return from is_ooxml)
    Christian Herdtweck authored
    2019-04-02 13:27:57 +0200  
    Browse Code »
  • ooxml: Fix logger in test() function
    74b6c1ce
    Christian Herdtweck authored
    2019-04-02 13:14:34 +0200  
    Browse Code »
  • ooxml: Fix attempt to copy args ...
    6e4d05b5
    Not sure whether this copying is necessary at all...
    Christian Herdtweck authored
    2019-04-02 13:14:34 +0200  
    Browse Code »
  • ooxml: Correct error message ...
    9dfa0bc2
    Usually, did check for xml first, so if is not zip then the message
    was correct. But might change and function might be called from
    elsewhere.
    Christian Herdtweck authored
    2019-04-02 13:14:34 +0200  
    Browse Code »
  • ooxml: do not require [Content_Types].xml in zip files ...
    70c8a216
    This has to be present for Office OpenXML files but is not there e.g.
    for OpenOffice files (odt, ...).
    
    Can still analyze the file without this.
    Christian Herdtweck authored
    2019-04-02 13:14:34 +0200  
    Browse Code »

01 Apr, 2019
3 commits
  • crypto: fixed a bug in is_encrypted_ole
    f028496d
    decalage2 authored
    2019-04-01 22:37:50 +0200  
    Browse Code »
  • tests: replace 3 calls to deprecated function
    95bd4497
    Christian Herdtweck authored
    2019-04-01 09:05:08 +0200  
    Browse Code »
  • tests: Test new "type" field of json logging output ...
    7d89934c
    Every logging call can have an optional arg type='...' which is
    ignored when logging to text but shows in json output. The "type"
    of regular logging output in json is type='msg'.
    
    Added 2 messages with different type, adjusted existing test, created
    2 new ones.
    Christian Herdtweck authored
    2019-04-01 09:04:52 +0200  
    Browse Code »

28 Mar, 2019
3 commits
  • olevba: do not colorize the output if it is redirected to a file (issue #402)
    3056212d
    decalage2 authored
    2019-03-28 21:53:14 +0100  
    Browse Code »
  • msodde: clarify what part of output is the result
    8d49c606
    Christian Herdtweck authored
    2019-03-28 17:48:23 +0100  
    Browse Code »
  • logger: introduce 'type' field for json output ...
    9dc1dff3
    This is a start to bring back some structure into the json output.
    
    Might not be a permanent solution, need to further discuss in PR 308
    Christian Herdtweck authored
    2019-03-28 17:48:23 +0100  
    Browse Code »

27 Mar, 2019
2 commits
  • tablestream: slight fix, TableStyleSlim inherits from TableStyle
    afe9d247
    decalage2 authored
    2019-03-27 18:40:21 +0100  
    Browse Code »
  • msodde: slight fix to use the current dir to import oletools in case it's not th… ...
    7f492486
    …e version installed by pip
    decalage2 authored
    2019-03-27 18:35:19 +0100  
    Browse Code »

25 Mar, 2019
5 commits
  • common/errors: improved the error messages for encrypted files
    f55f8966
    decalage2 authored
    2019-03-25 22:49:56 +0100  
    Browse Code »
  • setup: bumped version to 0.54dev12
    8d15762e
    decalage2 authored
    2019-03-25 22:16:34 +0100  
    Browse Code »
  • Merge pull request #403 from christian-intra2net/crypto-write-protect ...
    88c2b0a0
    Integrate decrypt from msoffcrypto-tools
    Philippe Lagadec authored
    2019-03-25 22:11:40 +0100  
    Browse Code »
  • travis: install msoffcrypto-tool before testing
    1a2c90ee
    Christian Herdtweck authored
    2019-03-25 13:06:10 +0100  
    Browse Code »
  • msodde: silence 3 more pylint warnings ...
    b0ed8f11
    making pylint happier, part 5 (final for now)
    Christian Herdtweck authored
    2019-03-25 12:09:30 +0100  
    Browse Code »