decalage2 / oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
http://www.decalage.info/python/oletools
Other
2.89k stars 565 forks source link

Test xlm samples #718

Closed christian-intra2net closed 2 years ago

christian-intra2net commented 2 years ago

Add @decalage2 's xlm samples to test files and check that olevba finds them. Works without XLMMacroDeobfuscator

To avoid an error parsing olevba-output as json because of an olefile-close-warning: cherry-pick a commit from ftguess-branch (PR #716 )

One test still fails, see PR #716 for a fix

christian-intra2net commented 2 years ago

Rebased onto current master

christian-intra2net commented 2 years ago

Rebased onto current master, added xlsb unittest fix so can test branch