Alternatives and similar repositories for spoofing-office-macro

Users that are interested in spoofing-office-macro are comparing it to the libraries listed below

• RedSiege / EXCELntDonut
  Excel 4.0 (XLM) Macro Generator for injecting DLLs and EXEs into memory.
  ☆513Updated 4 years ago
• mandiant / DueDLLigence
  ☆474Updated 2 years ago
• outflanknl / Excel4-DCOM
  PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)
  ☆325Updated 6 years ago
• byt3bl33d3r / OffensiveDLR
  Toolbox containing research notes & PoC code for weaponizing .NET's DLR
  ☆521Updated 3 years ago
• infosecn1nja / MaliciousMacroMSBuild
  Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.
  ☆509Updated 5 years ago
• mandiant / OfficePurge
  ☆260Updated 2 years ago
• anthemtotheego / SharpExec
  ☆349Updated 3 years ago
• b4rtik / metasploit-execute-assembly
  Custom Metasploit post module to executing a .NET Assembly from Meterpreter session
  ☆346Updated 4 years ago
• BC-SECURITY / Invoke-PrintDemon
  This is a PowerShell Empire launcher PoC using PrintDemon and Faxhell.
  ☆202Updated 4 years ago
• b4rtik / RedPeanut
  RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.
  ☆328Updated 2 years ago
• michaelweber / Macrome
  Excel Macro Document Reader/Writer for Red Teamers & Analysts
  ☆523Updated 3 years ago
• threatexpress / metatwin
  The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into a…
  ☆352Updated 8 months ago
• bohops / GhostBuild
  GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects
  ☆248Updated 4 years ago
• rasta-mouse / TikiTorch
  Process Injection
  ☆762Updated 3 years ago
• outflanknl / Ps-Tools
  Ps-Tools, an advanced process monitoring toolkit for offensive operations
  ☆352Updated 4 years ago
• cobbr / PSAmsi
  PSAmsi is a tool for auditing and defeating AMSI signatures.
  ☆392Updated 7 years ago
• hoangprod / AndrewSpecial
  AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.
  ☆389Updated 6 years ago
• matterpreter / Shhmon
  Neutering Sysmon via driver unload
  ☆232Updated 2 years ago
• Mr-Un1k0d3r / Windows-SignedBinary
  ☆256Updated 6 years ago
• HarmJ0y / DAMP
  The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification
  ☆380Updated 5 years ago
• N7WEra / SharpAllTheThings
  The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.
  ☆480Updated 3 years ago
• GhostPack / SharpRoast
  DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.
  ☆253Updated 6 years ago
• ReversecLabs / physmem2profit
  Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely
  ☆418Updated 2 years ago
• fox-it / Invoke-ACLPwn
  ☆523Updated 2 years ago
• Und3rf10w / Aggressor-scripts
  Aggressor scripts I've made for Cobalt Strike
  ☆409Updated last year
• ewhitehats / InvisiblePersistence
  Persisting in the Windows registry "invisibly"
  ☆341Updated 6 years ago
• outflanknl / Recon-AD
  Recon-AD, an AD recon tool based on ADSI and reflective DLL’s
  ☆330Updated 5 years ago
• CBHue / PyFuscation
  Obfuscate powershell scripts by replacing Function names, Variables and Parameters.
  ☆519Updated 2 years ago
• itm4n / VBA-RunPE
  A VBA implementation of the RunPE technique or how to bypass application whitelisting.
  ☆810Updated 5 years ago
• optiv / Dent
  A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.
  ☆297Updated last year