modules.packages.pub.PUB

Package modules :: Package packages :: Module pub :: Class PUB |
[hide private]
[frames] | no frames]

# Class PUB

source code

                      object --+
                               |
    lib.common.abstracts.Package --+
                                   |
                                  PUB

Word analysis package.

Instance Methods | [hide private]
start(self, path) Run analysis package. | source code
Inherited from `lib.common.abstracts.Package`: `__init__`, `check`, `enum_paths`, `execute`, `finish`, `get_path`, `get_path_glob`, `init_regkeys`, `move_curdir`, `package_files`, `set_pids` Inherited from `object`: `__delattr__`, `__format__`, `__getattribute__`, `__hash__`, `__new__`, `__reduce__`, `__reduce_ex__`, `__repr__`, `__setattr__`, `__sizeof__`, `__str__`, `__subclasshook__`

Class Variables | [hide private]
| PATHS = `[("ProgramFiles", "Microsoft Office", "MSPUB.EXE"), ("`...``
| REGKEYS = `[[HKEY_CURRENT_USER, "Software\\Microsoft\\Office\\1`...``

Properties | [hide private]
Inherited from `object`: `__class__`

Method Details | [hide private]

### start(self, path) | source code
Run analysis package. Raises: `NotImplementedError` - this method is abstract. Overrides: lib.common.abstracts.Package.start (inherited documentation)

Class Variable Details | [hide private]

  ### PATHS Value:
      [("ProgramFiles", "Microsoft Office", "MSPUB.EXE"), ("ProgramFiles", "
      Microsoft Office", "Office10", "MSPUB.EXE"), ("ProgramFiles", "Microso
      ft Office", "Office11", "MSPUB.EXE"), ("ProgramFiles", "Microsoft Offi
      ce", "Office12", "MSPUB.EXE"), ("ProgramFiles", "Microsoft Office", "O
      ffice14", "MSPUB.EXE"), ("ProgramFiles", "Microsoft Office", "Office15
      ", "MSPUB.EXE"), ("ProgramFiles", "Microsoft Office", "Office16", "MSP
      UB.EXE"), ("ProgramFiles", "Microsoft Office 15", "root", "office15",
      "MSPUB.EXE"), ("ProgramFiles", "Microsoft Office", "root", "Office16",
      ...

  ### REGKEYS Value:
      [[HKEY_CURRENT_USER, "Software\\Microsoft\\Office\\12.0\\Publisher\\Se
      curity", {"VBAWarnings": 1, "AccessVBOM": 1, "ExtensionHardening": 0,}
      ,], [HKEY_CURRENT_USER, "Software\\Microsoft\\Office\\15.0\\Publisher\
      \Security", {"VBAWarnings": 1, "AccessVBOM": 1, "ExtensionHardening":
      0,},], [HKEY_CURRENT_USER, "Software\\Microsoft\\Office\\16.0\\Publish
      er\\Security", {"VBAWarnings": 1, "AccessVBOM": 1,},],]