Added support for multiple Office formats

outflanknl / EvilClippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

GNU General Public License v3.0

2.13k stars 394 forks source link

Added support for multiple Office formats #49

Open mgeeky opened 2 years ago

mgeeky commented 2 years ago

Hi Stan!

I guess this PR probably won't make it to the master, but similarly to OfficePurge I'm leaving it for the curious ones.

This PR generalised a bit VBA streams acquisition to make it more reliably working with following formats:

Word (pre-2007, 2007+)
Excel (pre-2007, 2007+)
PowerPoint (2007+)
Publisher (pre-2007)

Also it fixes issue with Hiding/Unhiding modules not respecting -n option supplied.

Hopefully you'll like it,

Cheers! :) Mariusz.