search

kirk-sayre-work / ViperMonkey

A VBA parser and emulation engine to analyze malicious macros.
90 stars 14 forks source link

patch to actually make word 2007 files readable in-memory, fix parsing error, handle docvar lookup error #10

Closed emf closed 5 years ago

emf commented 5 years ago

So, yeah, it turns out zipfile.ZipFile() isn't quite smart enough, but you can trick it.

emf commented 5 years ago

parse error happens here https://github.com/kirk-sayre-work/ViperMonkey/commit/cacb06b4bc6ecefda5834c957b21d642c80fcf03

but I don't understand what you were trying to do well enough to repair it.