Alternatives and similar repositories for spoofing-office-macro

Users that are interested in spoofing-office-macro are comparing it to the libraries listed below

• rasta-mouse / TikiTorch

  View on GitHub
  Process Injection
  ☆766Oct 24, 2021Updated 4 years ago
• RedSiege / EXCELntDonut

  View on GitHub
  Excel 4.0 (XLM) Macro Generator for injecting DLLs and EXEs into memory.
  ☆515Sep 23, 2020Updated 5 years ago
• infosecn1nja / MaliciousMacroMSBuild

  View on GitHub
  Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.
  ☆513Aug 6, 2019Updated 6 years ago
• itm4n / VBA-RunPE

  View on GitHub
  A VBA implementation of the RunPE technique or how to bypass application whitelisting.
  ☆815Dec 17, 2019Updated 6 years ago
• outflanknl / Excel4-DCOM

  View on GitHub
  PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)
  ☆328Mar 26, 2019Updated 6 years ago
• michaelweber / Macrome

  View on GitHub
  Excel Macro Document Reader/Writer for Red Teamers & Analysts
  ☆524Feb 1, 2022Updated 4 years ago
• Mr-Un1k0d3r / RedTeamCSharpScripts

  View on GitHub
  C# Script used for Red Team
  ☆724Nov 16, 2021Updated 4 years ago
• med0x2e / NoAmci

  View on GitHub
  Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().
  ☆218Mar 5, 2020Updated 5 years ago
• Mr-Un1k0d3r / SCShell

  View on GitHub
  Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
  ☆1,594Jul 10, 2023Updated 2 years ago
• med0x2e / genxlm

  View on GitHub
  A simple script to generate JScript code for calling Win32 API functions using XLM/Excel 4.0 macros via Excel.Application "ExecuteExcel4M…
  ☆91Nov 9, 2019Updated 6 years ago
• mdsecactivebreach / SharpShooter

  View on GitHub
  Payload Generation Framework
  ☆1,956Aug 21, 2024Updated last year
• P1CKLES / SharpBox

  View on GitHub
  SharpBox is a C# tool for compressing, encrypting, and exfiltrating data to DropBox using the DropBox API.
  ☆110Jan 20, 2021Updated 5 years ago
• b4rtik / SharpMiniDump

  View on GitHub
  Create a minidump of the LSASS process from memory
  ☆261Nov 2, 2022Updated 3 years ago
• med0x2e / ExecuteAssembly

  View on GitHub
  Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS head…
  ☆595Jul 26, 2021Updated 4 years ago
• rvrsh3ll / SharpExcel4-DCOM

  View on GitHub
  Port of Invoke-Excel4DCOM
  ☆104Oct 12, 2019Updated 6 years ago
• rvrsh3ll / CPLResourceRunner

  View on GitHub
  Run shellcode from resource
  ☆260Dec 13, 2020Updated 5 years ago
• outflanknl / SharpHide

  View on GitHub
  Tool to create hidden registry keys.
  ☆491Oct 23, 2019Updated 6 years ago
• outflanknl / EvilClippy

  View on GitHub
  A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro…
  ☆2,233Dec 27, 2023Updated 2 years ago
• b4rtik / ATPMiniDump

  View on GitHub
  Evading WinDefender ATP credential-theft
  ☆256Dec 2, 2019Updated 6 years ago
• anthemtotheego / SharpExec

  View on GitHub
  ☆350Feb 21, 2022Updated 3 years ago
• monoxgas / Koppeling

  View on GitHub
  Adaptive DLL hijacking / dynamic export forwarding
  ☆808Jul 6, 2020Updated 5 years ago
• rvrsh3ll / NoMSBuild

  View on GitHub
  MSBuild without MSbuild.exe
  ☆135Dec 21, 2020Updated 5 years ago
• SpiderLabs / SharpCompile

  View on GitHub
  SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approa…
  ☆290Aug 7, 2020Updated 5 years ago
• Kevin-Robertson / InveighZero

  View on GitHub
  .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers
  ☆811Aug 28, 2022Updated 3 years ago
• Mr-Un1k0d3r / PoisonHandler

  View on GitHub
  lateral movement techniques that can be used during red team exercises
  ☆273Jan 13, 2020Updated 6 years ago
• offsecginger / AES-PowerShellCode

  View on GitHub
  Standalone version of my AES Powershell payload for Cobalt Strike.
  ☆111Dec 27, 2019Updated 6 years ago
• nccgroup / nccfsas

  View on GitHub
  Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.
  ☆608Aug 5, 2022Updated 3 years ago
• b4rtik / RedPeanut

  View on GitHub
  RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.
  ☆330Jul 7, 2023Updated 2 years ago
• icebearfriend / deckbuilder

  View on GitHub
  Cobalt Strike cna script for randomized argument spoofing
  ☆51Apr 4, 2019Updated 6 years ago
• med0x2e / GadgetToJScript

  View on GitHub
  A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from …
  ☆1,074Jul 26, 2021Updated 4 years ago
• Flangvik / NetLoader

  View on GitHub
  Loads any C# binary in mem, patching AMSI + ETW.
  ☆838Oct 3, 2021Updated 4 years ago
• bohops / GhostBuild

  View on GitHub
  GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects
  ☆251Sep 26, 2020Updated 5 years ago
• codewhitesec / LethalHTA

  View on GitHub
  Lateral Movement technique using DCOM and HTA
  ☆235Oct 18, 2022Updated 3 years ago
• checkymander / Sharp-SMBExec

  View on GitHub
  SMBExec C# module
  ☆219Aug 21, 2020Updated 5 years ago
• S3cur3Th1sSh1t / Invoke-SharpLoader

  View on GitHub
  ☆360Apr 24, 2021Updated 4 years ago
• Mr-Un1k0d3r / MaliciousMacroGenerator

  View on GitHub
  Malicious Macro Generator
  ☆831Apr 17, 2019Updated 6 years ago
• Mr-Un1k0d3r / Shellcoding

  View on GitHub
  Shellcoding utilities
  ☆224Dec 16, 2020Updated 5 years ago
• n1xbyte / donutCS

  View on GitHub
  dem sharp donuts
  ☆202Sep 11, 2022Updated 3 years ago
• rvrsh3ll / Rubeus-Rundll32

  View on GitHub
  Run Rubeus via Rundll32
  ☆208Apr 25, 2020Updated 5 years ago