oletools 0.60

Issues

• colorclass dependency causes incompatibility with CPython 3.10

  🐛 bugolevbasetup.py
  decalage2/oletools#709 · Filter by author michaelweiser opened on Aug 5, 2021 · oletools 0.60
  3

  

• oleid - macro not detected in docm file

  majoroleid👍 enhancement
  decalage2/oletools#74 · Filter by author decalage2 opened on Jul 27, 2016 · oletools 0.60
  1

  

• oleid: add Publisher support

  oleid👍 enhancement
  decalage2/oletools#586 · Filter by author decalage2 opened on Jun 28, 2020 · oletools 0.60
  

• olevba/oleid: detect template injection

  oleidolevba👍 enhancement
  decalage2/oletools#334 · Filter by author decalage2 opened on Jul 19, 2018 · oletools 0.60
  2

  

• oleid: improvements for oletools 0.60

  oleid👍 enhancement
  decalage2/oletools#679 · Filter by author decalage2 opened on May 18, 2021 · oletools 0.60
  

• ftguess: first version for oletools 0.60

  ftguess
  decalage2/oletools#680 · Filter by author decalage2 opened on May 18, 2021 · oletools 0.60
  

• olemeta: display name of code page

  olemeta👍 enhancement
  decalage2/oletools#683 · Filter by author decalage2 opened on May 23, 2021 · oletools 0.60
  

• rtfobj: detect class name containing "equation"

  🐛 bugrtfobj
  decalage2/oletools#689 · Filter by author decalage2 opened on May 29, 2021 · oletools 0.60
  

• clsid: add ref to CVE-2018-0798 for Equation objects

  clsid👍 enhancement
  decalage2/oletools#691 · Filter by author decalage2 opened on Jun 3, 2021 · oletools 0.60
  

• ftguess: pip entry point not working

  🐛 bugftguesssetup.py
  decalage2/oletools#693 · Filter by author decalage2 opened on Jun 4, 2021 · oletools 0.60
  

• clsid: add MSGraph CLSIDs

  clsid👍 enhancement
  decalage2/oletools#694 · Filter by author decalage2 opened on Jun 8, 2021 · oletools 0.60
  

• plugin_biff: update from oledump 0.0.61

  plugin_biff👍 enhancement
  decalage2/oletools#699 · Filter by author decalage2 opened on Jun 21, 2021 · oletools 0.60
  

• clsid+olevba: add CLSID for Windows Script Host Shell Object

  clsidolevba👍 enhancement
  decalage2/oletools#703 · Filter by author decalage2 opened on Jul 14, 2021 · oletools 0.60
  

• clsid+ftguess: add CLSID for PPA files - PowerPoint add-in

  clsidftguess👍 enhancement
  decalage2/oletools#704 · Filter by author decalage2 opened on Jul 14, 2021 · oletools 0.60
  1

  

• oleobj: zipfile error on hancitor xls

  🐛 bugoleobjooxml
  decalage2/oletools#705 · Filter by author decalage2 opened on Jul 22, 2021 · oletools 0.60
  

• oleobj: check remote template detection with XML obfuscation

  oleobjquestiontask
  decalage2/oletools#708 · Filter by author decalage2 opened on Aug 4, 2021 · oletools 0.60
  

• clsid: add Shell.Explorer and Forms.HTML

  clsid👍 enhancement
  decalage2/oletools#713 · Filter by author decalage2 opened on Sep 10, 2021 · oletools 0.60
  

• RTFObj doesn't work on RTF's containing OLE2LNK objects

  🐛 bugPython 3.xrtfobj
  decalage2/oletools#712 · Filter by author tlansec opened on Sep 9, 2021 · oletools 0.60
  2

  

• Make ppt_record_parser.IterStream.readinto() always return desired length

  🐛 bugppt_parser
  Unread
  decalage2/oletools#715·adepasquale opened Sep 14, 2021 · Updated Sep 15, 2021
  

• olevba: detect and extract Excel 4 Macros (XLM/XLF) in XLSB

  olevbaXLM👍 enhancement
  decalage2/oletools#416 · Filter by author decalage2 opened on Apr 4, 2019 · oletools 0.60
  1

• olevba: detect and extract Excel 4 Macros (XLM/XLF) in XLTM

  🐛 bugolevbaXLM
  decalage2/oletools#717 · Filter by author decalage2 opened on Oct 11, 2021 · oletools 0.60
  

• mraptor: detect Excel4 FORMULA and ScriptControl

  mraptorXLM👍 enhancement
  decalage2/oletools#721 · Filter by author rsaccani opened on Oct 20, 2021 · oletools 0.60
  

• olevba/ftguess: large MHT file incorrectly identified as OpenXML

  🐛 bugftguessoleidolevba
  decalage2/oletools#729 · Filter by author decalage2 opened on Jan 24, 2022 · oletools 0.60
  

• oleobj: add detection for customUI external links

  oleobj👍 enhancement
  decalage2/oletools#730 · Filter by author decalage2 opened on Jan 27, 2022 · oletools 0.60
  1

  

• oleobj, oleid: mention MITRE ATT&CK technique for template injection if detected

  oleidoleobj👍 enhancement
  decalage2/oletools#732 · Filter by author decalage2 opened on Jan 28, 2022 · oletools 0.60