Logo white

Peter M. Groen / oletools

Sign in
  • Sign in
  • Project
  • Files
  • Commits
  • Network
  • Graphs
  • Milestones
  • Issues 0
  • Merge Requests 0
  • Labels
  • Wiki
  • Commits 1,521
  • Compare
  • Branches 1
  • Tags 0
  • oletools
03 Jun, 2016
2 commits
  • demote json2ascii log output from info to debug level; clarify text
    f144d2ce
    Christian Herdtweck authored
    2016-06-03 09:42:32 +0200  
    Browse Code »
  • wrap loop iteration in _extract_vba in try-except to prevent individual entries messing up result ...
    e16a29f9
    We have one example files, where openstream() fails in 3 out of 10 modules,
    but of course MS office (and even LibreOffice) ignore this.
    Christian Herdtweck authored
    2016-06-03 09:31:19 +0200  
    Browse Code »

01 Jun, 2016
1 commit
  • Merge pull request #44 from christian-intra2net/fix-deof-with-json ...
    d353c6d9
    Fix --deobf option for JSON output
    Philippe Lagadec authored
    2016-06-01 22:53:20 +0200  
    Browse Code »

31 May, 2016
1 commit
  • removed test code (was only there for debugging and development)
    80804e86
    Christian Herdtweck authored
    2016-05-31 10:23:32 +0200  
    Browse Code »

30 May, 2016
4 commits
  • updated readme
    22ab4465
    decalage2 authored
    2016-05-30 23:25:57 +0200  
    Browse Code »
  • add field to_deobfuscate to json_result; ensure that json always has same fields… ...
    fdf415c7
    … independent of options
    Christian Herdtweck authored
    2016-05-30 12:56:38 +0200  
    Browse Code »
  • warn if command line options are ignored or set (using log.info)
    e02ea888
    Christian Herdtweck authored
    2016-05-30 12:55:50 +0200  
    Browse Code »
  • enable macro deofuscation in json mode if --deof is given
    dafe55c6
    Christian Herdtweck authored
    2016-05-30 12:55:21 +0200  
    Browse Code »

29 May, 2016
1 commit
  • rtfobj: improved parsing, fixed issue #42
    23ffafb3
    decalage2 authored
    2016-05-29 20:53:24 +0200  
    Browse Code »

25 May, 2016
2 commits
  • updated colorclass to v2.2.0, updated tablestream
    5f8e0b88
    decalage2 authored
    2016-05-25 23:46:51 +0200  
    Browse Code »
  • updated readme with links to github
    f3d51f29
    decalage2 authored
    2016-05-25 23:19:35 +0200  
    Browse Code »

18 May, 2016
4 commits
  • olevba: updated changelog
    424f027c
    Philippe Lagadec authored
    2016-05-18 23:30:28 +0200  
    Browse Code »
  • olevba: restore imports after solving conflict with pull request 10
    285c9efa
    Philippe Lagadec authored
    2016-05-18 23:27:31 +0200  
    Browse Code »
  • Merged in christian_intra2net/oletools_json/ppt-parser (pull request #10) ...
    649f2e0f
    Ppt parser
    Philippe Lagadec authored
    2016-05-18 23:24:30 +0200  
    Browse Code »
  • olevba: temporarily revert some changes to solve conflict with ppt_parser pull request
    85bd93ee
    Philippe Lagadec authored
    2016-05-18 23:23:11 +0200  
    Browse Code »

16 May, 2016
2 commits
  • xglob: updated changelog
    d7dfefea
    Philippe Lagadec authored
    2016-05-16 16:36:24 +0200  
    Browse Code »
  • olevba: many improvements and fixes by Christian Herdtweck (exit code, exception… ...
    ffa04426
    … handling, JSON output)
    Philippe Lagadec authored
    2016-05-16 16:34:05 +0200  
    Browse Code »

15 May, 2016
1 commit
  • olevba: look for VBA code in any stream including orphans
    5e019d00
    Philippe Lagadec authored
    2016-05-15 21:46:28 +0200  
    Browse Code »

12 May, 2016
12 commits
  • make many ppt_parser functions generators; use decorator for try-open-except-close(stream)
    823d07b3
    Christian Herdtweck authored
    2016-05-12 18:03:36 +0200  
    Browse Code »
  • fix issues found by pylint: non-existing or unused variables and imports; whitespace
    754ae5d9
    Christian Herdtweck authored
    2016-05-12 15:14:57 +0200  
    Browse Code »
  • wrap long lines
    55b75d0c
    Christian Herdtweck authored
    2016-05-12 14:57:53 +0200  
    Browse Code »
  • created PptParser.read_vba_storage for uncompressed data storages
    e07a649f
    Christian Herdtweck authored
    2016-05-12 14:37:43 +0200  
    Browse Code »
  • tweaked logging (lots of info-->debug, some removed; added some comments
    a60d9f3e
    Christian Herdtweck authored
    2016-05-12 14:37:11 +0200  
    Browse Code »
  • update todo and other comments about PowerPoint 97-2003
    42fbc3ee
    Christian Herdtweck authored
    2016-05-12 13:17:57 +0200  
    Browse Code »
  • continue integration of ppt into olevba: works now!
    b21c1465
    Christian Herdtweck authored
    2016-05-12 11:59:35 +0200  
    Browse Code »
  • update to testing code
    44737a1c
    Christian Herdtweck authored
    2016-05-12 11:52:22 +0200  
    Browse Code »
  • one more log message; add logger name to log output ...
    dbeeae0d
    (to easily see where log output comes from if ppt_parser is used from olevba)
    Christian Herdtweck authored
    2016-05-12 11:52:13 +0200  
    Browse Code »
  • renamed ExternalObjectStorage.compressed --> is_compressed
    294e661c
    Christian Herdtweck authored
    2016-05-12 11:51:01 +0200  
    Browse Code »
  • add enable_logging, import logging from olefile
    ae568171
    Christian Herdtweck authored
    2016-05-12 11:49:36 +0200  
    Browse Code »
  • start integrating ppt_parser into olevba
    14dcbdca
    Christian Herdtweck authored
    2016-05-12 09:11:02 +0200  
    Browse Code »

11 May, 2016
1 commit
  • managed to extract vba stream from ppt by byte-search for ExternalObjectStorage ...
    05a27a43
    Qapla'
    Christian Herdtweck authored
    2016-05-11 17:57:35 +0200  
    Browse Code »

10 May, 2016
4 commits
  • successfully found and parsed VBAInfoContainer+Atom but still no VBA code...
    8ee20161
    Christian Herdtweck authored
    2016-05-10 12:56:47 +0200  
    Browse Code »
  • start looking for vba a different way: search for record header of VBAInfoAtom/Container
    0a8eace5
    Christian Herdtweck authored
    2016-05-10 12:28:49 +0200  
    Browse Code »
  • bugfixing but failed to correctly parse DocumentContainer :-(
    27e0a1c8
    Christian Herdtweck authored
    2016-05-10 12:28:02 +0200  
    Browse Code »
  • made CurrentUserAtom a PptType -- streamlined last remaining class (currently)
    87a69ade
    Christian Herdtweck authored
    2016-05-10 09:37:35 +0200  
    Browse Code »

07 May, 2016
1 commit
  • rtfobj: sanitize filenames to avoid special characters
    455c85b4
    Philippe Lagadec authored
    2016-05-07 18:06:10 +0200  
    Browse Code »

06 May, 2016
3 commits
  • rtfobj: added option -d to set the output directory (contribution by Thomas Jarosch)
    209688eb
    Philippe Lagadec authored
    2016-05-06 23:13:10 +0200  
    Browse Code »
  • started vba types
    62c927a8
    Christian Herdtweck authored
    2016-05-06 18:33:07 +0200  
    Browse Code »
  • added base type PptType, parse all of persist dir (not just first), added DummyT… ...
    63dafd09
    …ype and DocumentContainer
    
    also ran through pylint
    
    rather non-atomic, sorry
    Christian Herdtweck authored
    2016-05-06 17:48:01 +0200  
    Browse Code »

04 May, 2016
1 commit
  • olefile: fixed slight bug in OleStream
    31ce789a
    Philippe Lagadec authored
    2016-05-04 23:42:17 +0200  
    Browse Code »