Didier Stevens

Wednesday 19 December 2018

Update:oledump.py Version 0.0.40

Filed under: My Software,Update — Didier Stevens @ 0:00

This new version adds option –password to use a different password than infected for samples inside password protected ZIP files.

And plugin_biff adds support for MS Excel 4.0 macros:

oledump_V0_0_40.zip (https)
MD5: 4013CC3A01D4CAE481EAA099A080B07F
SHA256: C5EC0B7B1EFA69D9EB6572F61D866ECEA7952FEADA06943377F8178C7A252E70

3 Comments »

  1. This can be used with xlsx (is different bu xls)?
    I try to use (pyton 3.6.4 )like you wrote into oledump.py and your article :

    C:\Python364>python.exe oledump_V0_0_40\oledump.py test.xlsx
    File “oledump_V0_0_40\oledump.py”, line 974
    exec open(plugin, ‘r’) in globals(), globals()
    ^
    SyntaxError: invalid syntax

    C:\Python364>python.exe oledump_V0_0_40\oledump.py test.xls
    File “oledump_V0_0_40\oledump.py”, line 974
    exec open(plugin, ‘r’) in globals(), globals()
    ^
    SyntaxError: invalid syntax

    C:\Python364>python.exe oledump_V0_0_40\oledump.py -p plugin_biff –pluginoption
    s “-o BOUNDSHEET” test.xls
    File “oledump_V0_0_40\oledump.py”, line 974
    exec open(plugin, ‘r’) in globals(), globals()
    ^
    SyntaxError: invalid syntax

    Comment by Cătălin George Feștilă — Wednesday 19 December 2018 @ 13:56

  2. This is a Python 2 program.

    Comment by Didier Stevens — Sunday 23 December 2018 @ 8:14

  3. […] Update:oledump.py Version 0.0.40 […]

    Pingback by Overview of Content Published in December | Didier Stevens — Tuesday 1 January 2019 @ 0:01


RSS feed for comments on this post. TrackBack URI

Leave a Reply (comments are moderated)

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Blog at WordPress.com.