List view

rtfobj: parsing issue

🐛 bug

rtfobj

Status: Open.

#472 In decalage2/oletools;

· decalage2 opened on Jul 24, 2019

extract_form_strings() not parsing data from "f" (form) stream

👍 enhancement

olevba

Status: Open.

#443 In decalage2/oletools;

· TheMalMalMan opened on May 15, 2019

oledir - show orphaned entries in tree

👍 enhancement

oledir

Status: Open.

#442 In decalage2/oletools;

· otofoto opened on May 7, 2019

olevba: display more info about VBA project stream

👍 enhancement

olevba

Status: Open.

#438 In decalage2/oletools;

· decalage2 opened on May 2, 2019

olevba: add more PowerShell keywords

👍 enhancement

olevba

Status: Open.

#437 In decalage2/oletools;

· decalage2 opened on May 2, 2019

olevba: detect and extract Excel 4 Macros (XLM/XLF) in SLK

👍 enhancement

olevba

XLMExcel 4 MacrosExcel 4 Macros

Status: Open.

#417 In decalage2/oletools;

· decalage2 opened on Apr 4, 2019

olevba: detect and extract Excel 4 Macros (XLM/XLF) in XLSM

👍 enhancement

olevba

XLMExcel 4 MacrosExcel 4 Macros

Status: Open.

#415 In decalage2/oletools;

· decalage2 opened on Apr 4, 2019

olevba: add an option to disable coloring on demand, such as --nocolor

👍 enhancement

olevba

Status: Open.

#413 In decalage2/oletools;

· decalage2 opened on Apr 4, 2019

olevba+mraptor: detect DDEInitialize, WMI Spawninstance, Sendkeys

👍 enhancement

mraptor

olevba

Status: Open.

#409 In decalage2/oletools;

· decalage2 opened on Mar 29, 2019

olevba: detect inconsistent module names

👍 enhancement

olevba

Status: Open.

#408 In decalage2/oletools;

· decalage2 opened on Mar 29, 2019

olevba: detect macros hidden from MS VBA Editor

👍 enhancement

olevba

Status: Open.

#407 In decalage2/oletools;

· decalage2 opened on Mar 29, 2019

msodde: detect INCLUDEPICTURE and INCLUDETEXT (CVE-2019-0540, CVE-2019-0561 )

👍 enhancement

msodde

Status: Open.

#406 In decalage2/oletools;

· decalage2 opened on Mar 29, 2019

olevba+mraptor: Detect VBA stomping

👍 enhancement

mraptor

olevba

Status: Open.

#404 In decalage2/oletools;

· decalage2 opened on Mar 27, 2019

TravisCI returns green status but is showing error

question

tests

Status: Open.

#400 In decalage2/oletools;

· Maijin opened on Mar 17, 2019

rtfobj+msodde: samples not parsed correctly

🐛 bug

msodde

rtfobj

Status: Open.

#395 In decalage2/oletools;

· decalage2 opened on Feb 20, 2019

any of .ppt files is not parsed

🐛 bug

olevba

ppt_parser

Status: Open.

#387 In decalage2/oletools;

· krisanovdev opened on Jan 29, 2019

olevba: extract and display references from VBA project

👍 enhancement

olevba

Status: Open.

#386 In decalage2/oletools;

· decalage2 opened on Jan 28, 2019

rtfobj: warning when the {\rtf1 header signature is incomplete

👍 enhancement

rtfobj

Status: Open.

#385 In decalage2/oletools;

· decalage2 opened on Jan 20, 2019

use defusedxml for XML processing

👍 enhancement

Status: Open.

#382 In decalage2/oletools;

· decalage2 opened on Jan 1, 2019

Botconf 2018 presentation "Stagecraft of Malicious Office Documents – A Look at Recent Campaigns"

👍 enhancement

Status: Open.

#381 In decalage2/oletools;

· decalage2 opened on Dec 27, 2018

olevba+mraptor: additional keywords

👍 enhancement

mraptor

olevba

Status: Open.

#380 In decalage2/oletools;

· decalage2 opened on Dec 18, 2018

msodde: Japanese characters bypass DDE regex detection

👍 enhancement

msodde

Status: Open.

#379 In decalage2/oletools;

· seamustuohy opened on Dec 13, 2018

olevba: display VBA attributes when a keyword was found in them

👍 enhancement

olevba

Status: Open.

#376 In decalage2/oletools;

· decalage2 opened on Dec 9, 2018

olevba+mraptor: Detect VBA macro trigger from an Excel formula

👍 enhancement

mraptor

olevba

Status: Open.

#375 In decalage2/oletools;

· decalage2 opened on Dec 9, 2018

olevba+mraptor: detect Evaluate+DDE

👍 enhancement

mraptor

olevba

Status: Open.

#372 In decalage2/oletools;

· decalage2 opened on Dec 8, 2018