decalage2 / oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
http://www.decalage.info/python/oletools
Other
2.88k stars 564 forks source link

save pdf file embedded in an excel file #342

Open achillis2 opened 6 years ago

achillis2 commented 6 years ago

Is your feature request related to a problem? Please describe. I need to extract the pdf file embedded in an Excel file. I can unzip the .xlsm file to get the .bin files which are the ole objects in Excel. I need to save the .pdf files from the .bin files.

Describe the solution you'd like The olebrowse tool can open the .bin file and save the stream to a pdf file without any problem. But I need the feature in command line.

Describe alternatives you've considered Is it possible to provide --option for users to use olebrowse to save stream to files?

Additional context The feature is there. I just need to have a command line option to extract the pdf files since I have too many such files... Thanks

oleObject1.zip

decalage2 commented 6 years ago

Did you try oleobj?

achillis2 commented 6 years ago

Yes. No file was generated when I ran oleobj. Thanks

On Mon, Aug 20, 2018 at 23:57 Philippe Lagadec notifications@github.com wrote:

Did you try oleobj?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/decalage2/oletools/issues/342#issuecomment-414549838, or mute the thread https://github.com/notifications/unsubscribe-auth/AKoFnNr-g4tr1d3XANW-3wcpptjelY7mks5uS5MwgaJpZM4WE73e .

--

Ding

Ding Li, PhD, PE, LEED AP Engineering Manager II, Utility Services, Energy Efficiency Delivery Nexant Office: 713.758.8727 <javascript:void(0);> Fax: 713.739.0741 <javascript:void(0);> dli@nexant.com