oletools

import os from oletools.olevba import VBA_Parser, get_filepath_or_data # Create a dummy OLE file for demonstration dummy_file_path = 'dummy_macro.doc' with open(dummy_file_path, 'wb') as f: # A very basic, non-functional OLE header structure # In a real scenario, this would be a proper MS Office file f.write(b'\xD0\xCF\x11\xE0\xA1\xB1\x1A\xE1\x00\x00\x00\x00\x00\x00\x00\x00') f.write(b'\x00' * 500) # Padding to make it somewhat resemble a file try: # Initialize VBA_Parser with the file path # olevba handles file paths and file-like objects vbaparser = VBA_Parser(dummy_file_path) if vbaparser.detect_vba_macros(): print(f"VBA Macros detected in {dummy_file_path}:") # Analyze and print macro details results = vbaparser.analyze_macros() for kw, description, typ, filename, original_code, code in results: print(f" [{typ}] {kw}: {description}") if code: print(f" Code:\n{code[:200]}...") else: print(f"No VBA macros detected in {dummy_file_path}.") vbaparser.close() except Exception as e: print(f"An error occurred: {e}") finally: # Clean up the dummy file if os.path.exists(dummy_file_path): os.remove(dummy_file_path)