Python olefile.OleFileIO方法代码示例

# 需要导入模块: import olefile [as 别名]
# 或者: from olefile import OleFileIO [as 别名]
def __init__(self, file):
        self.format = "ooxml"
        file.seek(0)  # TODO: Investigate the effect (required for olefile.isOleFile)
        # olefile cannot process non password protected ooxml files.
        # TODO: this code is duplicate of OfficeFile(). Merge?
        if olefile.isOleFile(file):
            ole = olefile.OleFileIO(file)
            self.file = ole
            with self.file.openstream('EncryptionInfo') as stream:
                self.type, self.info = _parseinfo(stream)
            logger.debug("OOXMLFile.type: {}".format(self.type))
            self.secret_key = None
            if self.type == 'agile':
                # TODO: Support aliases?
                self.keyTypes = ('password', 'private_key', 'secret_key')
            elif self.type == 'standard':
                self.keyTypes = ('password', 'secret_key')
            elif self.type == 'extensible':
                pass
        elif zipfile.is_zipfile(file):
            self.file = file
            self.type, self.info = None, None
            self.secret_key = None
        else:
            raise Exception("Unsupported file format") 

# 需要导入模块: import olefile [as 别名]
# 或者: from olefile import OleFileIO [as 别名]
def __init__(self, file):
        self.file = file
        ole = olefile.OleFileIO(file)  # do not close this, would close file
        self.ole = ole
        self.format = "doc97"
        self.keyTypes = ['password']
        self.key = None
        self.salt = None

        # https://msdn.microsoft.com/en-us/library/dd944620(v=office.12).aspx
        with ole.openstream('wordDocument') as stream:
            fib = _parseFib(stream)

        # https://msdn.microsoft.com/en-us/library/dd923367(v=office.12).aspx
        tablename = '1Table' if fib.base.fWhichTblStm == 1 else '0Table'

        Info = namedtuple('Info', ['fib', 'tablename'])
        self.info = Info(
            fib=fib,
            tablename=tablename,
        ) 

# 需要导入模块: import olefile [as 别名]
# 或者: from olefile import OleFileIO [as 别名]
def __init__(self, msg_file_path):
        self.msg_file_path = msg_file_path
        self.include_attachment_data = False

        if not self.is_valid_msg_file():
            raise Exception(
                "Invalid file provided, please provide valid Microsoft’s Outlook MSG file."
            )

        with OleFileIO(msg_file_path) as ole_file:
            # process directory entries
            ole_root = ole_file.root
            kids_dict = ole_root.kids_dict

            self._message = Message(kids_dict)
            self._message_dict = self._message.as_dict()

            # process msg properties
            self._set_properties()

            # process msg recipients
            self._set_recipients()

            # process attachments
            self._set_attachments() 

# 需要导入模块: import olefile [as 别名]
# 或者: from olefile import OleFileIO [as 别名]
def stomp_it(stomped_file):    
    # Open file to mangle the VBA streams.
    with olefile.OleFileIO(stomped_file, write_mode=True) as ole:
    
        # Mangle the macro VBA streams.
        for stream_name in ole.listdir():
        
            # Got macros?
            data = ole.openstream(stream_name).read()
            
            marker = b"Attrib"
            if marker not in data:
                continue
           
            # Find where to write.
            start = data.rindex(marker)

            # Stomp the rest of the data.
            new_data = data[:start]
            for i in range(start, len(data)):
                # Stomp with random bytes.
                new_data += os.urandom(1)
            
            # Write out the garbage data.
            ole.write_stream(stream_name, new_data) 

# 需要导入模块: import olefile [as 别名]
# 或者: from olefile import OleFileIO [as 别名]
def is_encrypted(self):
        # Heuristic
        if isinstance(self.file, olefile.OleFileIO):
            return True
        else:
            return False 

# 需要导入模块: import olefile [as 别名]
# 或者: from olefile import OleFileIO [as 别名]
def __init__(self, file):
        self.file = file
        ole = olefile.OleFileIO(file)  # do not close this, would close file
        self.ole = ole
        self.format = "xls97"
        self.keyTypes = ['password']
        self.key = None
        self.salt = None

        workbook = ole.openstream('Workbook')    # closed in destructor

        Data = namedtuple('Data', ['workbook'])
        self.data = Data(
            workbook=workbook,
        ) 

# 需要导入模块: import olefile [as 别名]
# 或者: from olefile import OleFileIO [as 别名]
def _open(self):

        # read the OLE directory and see if this is a likely
        # to be a Microsoft Image Composer file

        try:
            self.ole = olefile.OleFileIO(self.fp)
        except IOError:
            raise SyntaxError("not an MIC file; invalid OLE file")

        # find ACI subfiles with Image members (maybe not the
        # best way to identify MIC files, but what the... ;-)

        self.images = []
        for path in self.ole.listdir():
            if path[1:] and path[0][-4:] == ".ACI" and path[1] == "Image":
                self.images.append(path)

        # if we didn't find any images, this is probably not
        # an MIC file.
        if not self.images:
            raise SyntaxError("not an MIC file; no image entries")

        self.__fp = self.fp
        self.frame = None

        if len(self.images) > 1:
            self.category = Image.CONTAINER

        self.seek(0) 

# 需要导入模块: import olefile [as 别名]
# 或者: from olefile import OleFileIO [as 别名]
def _open(self):
        #
        # read the OLE directory and see if this is a likely
        # to be a FlashPix file

        try:
            self.ole = olefile.OleFileIO(self.fp)
        except IOError:
            raise SyntaxError("not an FPX file; invalid OLE file")

        if self.ole.root.clsid != "56616700-C154-11CE-8553-00AA00A1F95B":
            raise SyntaxError("not an FPX file; bad root CLSID")

        self._open_index(1) 

# 需要导入模块: import olefile [as 别名]
# 或者: from olefile import OleFileIO [as 别名]
def _open(self):

        # read the OLE directory and see if this is a likely
        # to be a Microsoft Image Composer file

        try:
            self.ole = olefile.OleFileIO(self.fp)
        except OSError:
            raise SyntaxError("not an MIC file; invalid OLE file")

        # find ACI subfiles with Image members (maybe not the
        # best way to identify MIC files, but what the... ;-)

        self.images = []
        for path in self.ole.listdir():
            if path[1:] and path[0][-4:] == ".ACI" and path[1] == "Image":
                self.images.append(path)

        # if we didn't find any images, this is probably not
        # an MIC file.
        if not self.images:
            raise SyntaxError("not an MIC file; no image entries")

        self.__fp = self.fp
        self.frame = None

        if len(self.images) > 1:
            self.category = Image.CONTAINER

        self.seek(0) 

# 需要导入模块: import olefile [as 别名]
# 或者: from olefile import OleFileIO [as 别名]
def _open(self):
        #
        # read the OLE directory and see if this is a likely
        # to be a FlashPix file

        try:
            self.ole = olefile.OleFileIO(self.fp)
        except OSError:
            raise SyntaxError("not an FPX file; invalid OLE file")

        if self.ole.root.clsid != "56616700-C154-11CE-8553-00AA00A1F95B":
            raise SyntaxError("not an FPX file; bad root CLSID")

        self._open_index(1) 

# 需要导入模块: import olefile [as 别名]
# 或者: from olefile import OleFileIO [as 别名]
def __init__(self, filename):
        OleFile.OleFileIO.__init__(self, filename) 

# 需要导入模块: import olefile [as 别名]
# 或者: from olefile import OleFileIO [as 别名]
def ole_parser(s):
    ole = olefile.OleFileIO(s)
    meta = ole.get_metadata()
    attrs = meta.DOCSUM_ATTRIBS + meta.SUMMARY_ATTRIBS
    #meta.dump()
    result = {}
    for attr in attrs:
        if hasattr(meta, attr):
            result[attr] = getattr(meta, attr)
    ole.close()
    return result 

# 需要导入模块: import olefile [as 别名]
# 或者: from olefile import OleFileIO [as 别名]
def scan(self, payload: Payload, request: Request) -> WorkerResponse:
        extracted: List[ExtractedPayload] = []
        errors: List[Error] = []
        ole_object = olefile.OleFileIO(payload.content)
        streams = ole_object.listdir(streams=True)
        for stream in streams:
            try:
                stream_buffer = ole_object.openstream(stream).read()
                name = ''.join(
                    filter(lambda x: x in string.printable, '_'.join(stream))
                )
                if stream_buffer.endswith(b'\x01Ole10Native'):
                    ole_native = oleobj.OleNativeStream(stream_buffer)
                    if ole_native.filename:
                        name = f'{name}_{str(ole_native.filename)}'
                    else:
                        name = f'{name}_olenative'
                    meta = PayloadMeta(
                        should_archive=False,
                        extra_data={'index': streams.index(stream), 'name': name},
                    )
                    extracted.append(ExtractedPayload(ole_native.data, meta))
                else:
                    meta = PayloadMeta(
                        should_archive=False,
                        extra_data={'index': streams.index(stream), 'name': name},
                    )
                    extracted.append(ExtractedPayload(stream_buffer, meta))
            except Exception as err:
                errors.append(
                    Error(
                        error=str(err),
                        plugin_name=self.plugin_name,
                        payload_id=payload.payload_id,
                    )
                )
        return WorkerResponse(extracted=extracted, errors=errors) 

# 需要导入模块: import olefile [as 别名]
# 或者: from olefile import OleFileIO [as 别名]
def extract_ole_metadata(self, file_path):
        with open(file_path, 'rb') as fh:
            if not isOleFile(fh):
                return
            fh.seek(0)
            try:
                ole = OleFileIO(fh)
                self.extract_olefileio_metadata(ole)
            except (RuntimeError, IOError):
                # OLE reading can go fully recursive, at which point it's OK
                # to just eat this runtime error quietly.
                log.warning("Failed to read OLE data: %s", self.result)
            except Exception:
                log.exception("Failed to read OLE data: %s", self.result) 

# 需要导入模块: import olefile [as 别名]
# 或者: from olefile import OleFileIO [as 别名]
def ole_parser(s):
    ole = olefile.OleFileIO(s)
    meta = ole.get_metadata()
    #meta.dump()
    result = {
        'author': meta.author,
        'last saved by': meta.last_saved_by,
        'company': meta.company,
    }
    ole.close()
    return result