https://github.com/aserper/DDEtect
Simple DDE object detector
https://github.com/aserper/DDEtect
dde office security
Last synced: 11 months ago
JSON representation
Simple DDE object detector
- Host: GitHub
- URL: https://github.com/aserper/DDEtect
- Owner: aserper
- License: gpl-3.0
- Created: 2017-11-19T22:40:03.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2017-11-24T15:44:42.000Z (over 8 years ago)
- Last Synced: 2025-07-13T18:03:12.491Z (12 months ago)
- Topics: dde, office, security
- Language: Python
- Size: 84 KB
- Stars: 56
- Watchers: 4
- Forks: 12
- Open Issues: 0
-
Metadata Files:
- Readme: README.MD
- License: LICENSE
Awesome Lists containing this project
README
# DDEtect
Written by Amit Serper, [@0xAmit](http://twitter.com/0xAmit)
DDEtector is a simple DDE object detector written in python
- Currently supports only word DOCX and legacy DOC files
- Prints the contents of the DDE payloads (Note: In some cases DDEtect won't print the entire DDE payload. I'm working on writing a better matching algorithm)
- More features coming soon...
### Notes
This was done quick-n-dirty. I'm sure that there is a better and more elegant way of doing everything in here but I wasn't giving it a lot of thought.
Constructive feedback is always welcome, twitter is the best way of contacting me. This is a work in progress...
### Running DDEtector
Execute the python file and supply a path to a docx file as an argument. Use the -d argument for a regular doc file or -x for a docx file:
DDEtector requires the following python modules:
- zipfile
- xmltodict
- nested_lookup
- re
- argparse
### Todos
- Format autodetection
- Support other office formats (ie. excel)