Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

olevba/crypto: add default PowerPoint password "/01Hannes Ruescher/01" #627

Closed
decalage2 opened this issue Sep 29, 2020 · 1 comment
Closed

olevba/crypto: add default PowerPoint password "/01Hannes Ruescher/01" #627

decalage2 opened this issue Sep 29, 2020 · 1 comment
Assignees
@decalage2
Labels
crypto mraptor olevba ppt_parser 👍 enhancement
Milestone
oletools 0.60

Comments

@decalage2
Copy link
Owner

see https://twitter.com/BouncyHat/status/1308896366782042113

MS reference: https://docs.microsoft.com/en-us/openspecs/office_file_formats/ms-offcrypto/57fc02f0-c1de-4fc6-908f-d146104662f5
@decalage2 decalage2 added this to the Next Release milestone Sep 29, 2020
@decalage2 decalage2 self-assigned this Sep 29, 2020
@decalage2 decalage2 modified the milestones: Next Release, oletools 0.60 May 22, 2021
@decalage2
Copy link
Owner Author

Note that it works fine with olevba on PPTM files (file is decrypted transparently, and the VBA macro code is properly extracted).
But it does not work well in other cases:

  • For an encrypted PPT, olevba reports no macro (does msoffcrypto support PPT?)
  • For encrypted PPTM and PPT, mraptor always reports "no macro".

@decalage2 decalage2 mentioned this issue May 22, 2021
Open
c-rosenberg pushed a commit to HeinleinSupport/oletools that referenced this issue Dec 2, 2021
@decalage2 @c-rosenberg
crypto: added PowerPoint transparent password '/01Hannes Ruescher/01', …
4e35817 
…fixes decalage2#627
ljuturu pushed a commit to ljuturu/oletools that referenced this issue Apr 21, 2022
@decalage2
crypto: added PowerPoint transparent password '/01Hannes Ruescher/01', …
ca4c548 
…fixes decalage2#627
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@decalage2 decalage2

Labels
crypto mraptor olevba ppt_parser 👍 enhancement
Projects
None yet
Milestone
oletools 0.60
Development

No branches or pull requests
1 participant
@decalage2