This new version of oledump.py adds support for Python 3. Several plugins and decoders were also updated for Python 3.
There’s a new option to include storages in the overview: –storages.
And option –decompress now does also VBA decompression (it was zlib only). This helps to decompress the dir stream of documents with VBA macros:
And I added type 1009 to plugin_msg.py: Compressed RTF.
oledump_V0_0_43.zip (https)
MD5: F98A06CED73C4FC2CA153B7E751746B5
SHA256: 4FE1DBAB822CEC2489328CE3D4D272400F23F1FAD266C9D89B49D9F83F3AA27F
Didier Stevens 