LinuxCommandLibrary
GitHubF-DroidGoogle Play Store

oletools

collection of Python tools for analyzing Microsoft Office documents

TLDR

Analyze document with oleid
$ oleid [document.doc]
copy
Extract VBA macros
$ olevba [document.xlsm]
copy
Detect malicious macros
$ mraptor [document.doc]
copy
Find RTF exploits
$ rtfobj [document.rtf]
copy
Analyze OLE structure
$ olemeta [document.doc]
copy
Check for Flash
$ oleobj [document.pptx]
copy

SYNOPSIS

oletools - Python tools for analyzing Office documents

DESCRIPTION

oletools is a collection of Python tools for analyzing Microsoft Office documents (OLE, VBA, Office Open XML). It's commonly used for malware analysis and detecting malicious documents.The toolkit includes multiple specialized tools for different analysis tasks.

INCLUDED TOOLS

$ oleid    - Quick analysis, indicators
olevba   - Extract/analyze VBA macros
mraptor  - Detect malicious VBA
olemeta  - Show metadata
oleobj   - Extract embedded objects
rtfobj   - Analyze RTF files
oletimes - Show timestamps
oledir   - List OLE directory
copy

INSTALLATION

$ pip install oletools
copy

INSTALL

nix profile install nixpkgs#oletools
copy

CAVEATS

Python package required. Heuristic detection may have false positives. Cannot decrypt password-protected files.

HISTORY

oletools was created by Philippe Lagadec for analyzing potentially malicious Office documents, widely used in malware analysis and incident response.

SEE ALSO

oleid(1), olevba(1), mraptor(1), yara(1)

Braincup
Open source brain training for math, memory and focus
Braincup mini-games
41 mini-games · Apache-2.0
No ads · No tracking
Play in browser
Download Braincup on the App StoreGet Braincup on Google PlayGet Braincup on F-Droid
276 stars
From the maker of Linux Command Library
Copied to clipboard
Braincup
Open source brain training for math, memory and focus. 41 mini-games, from mental arithmetic to Sudoku, N-Back and Solo Chess.
Apache-2.0 licensed · No ads · No tracking · No account
From the maker of Linux Command Library
Download Braincup on the App StoreGet Braincup on Google PlayGet Braincup on F-Droid