Module refinery.lib.ole

Library for parsing Microsoft OLE/Office compound file formats, including RTF embedded object extraction, VBA macro extraction from OLE and OOXML documents, OLE form variable parsing, and VBA p-code disassembly and decompilation.

Expand source code Browse git
"""
Library for parsing Microsoft OLE/Office compound file formats, including RTF embedded object
extraction, VBA macro extraction from OLE and OOXML documents, OLE form variable parsing, and VBA
p-code disassembly and decompilation.
"""
from __future__ import annotations

Sub-modules

refinery.lib.ole.crypto

Decryption support for encrypted Microsoft Office documents …

refinery.lib.ole.decompiler

VBA p-code decompiler that converts disassembled p-code back to VBA source code. This module is based on pcode2code by Nicolas Zilio (@Big5_sec), …

refinery.lib.ole.file

Parser for Microsoft OLE2 Compound Binary Files (CFB).

refinery.lib.ole.forms

Parser for VBA user form controls embedded in OLE compound files …

refinery.lib.ole.pcode

VBA p-code disassembler for Microsoft Office documents …

refinery.lib.ole.rtf

Port of oletools rtfobj.py and oleobj.py for RTF embedded object extraction. Parses RTF documents and extracts OLE 1.0 objects and OLE Package streams …

refinery.lib.ole.vba

Parser for VBA macro extraction from OLE and OOXML documents …