Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

olevba+mraptor: fix support of encrypted PowerPoint files #681

Open
decalage2 opened this issue May 22, 2021 · 0 comments
Open

olevba+mraptor: fix support of encrypted PowerPoint files #681

decalage2 opened this issue May 22, 2021 · 0 comments

Comments

@decalage2
Copy link
Owner

decalage2 commented May 22, 2021

In some cases, olevba and mraptor do not properly decrypt and analyse PowerPoint files (see #627):
it works fine with olevba on PPTM files (file is decrypted transparently, and the VBA macro code is properly extracted).
But it does not work well in other cases:

  • For an encrypted PPT, olevba reports no macro (does msoffcrypto support PPT?)
  • For encrypted PPTM and PPT, mraptor always reports "no macro".

The tools should decrypt files and report macros. And if they fail to decrypt, then they should report an error instead of "no macro".
Other tools should also be checked.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant