glinares / OfficeMalware
☆113Updated 7 years ago
Alternatives and similar repositories for OfficeMalware:
Users that are interested in OfficeMalware are comparing it to the libraries listed below
- Open Source Office Malware Generation & Polymorphic Engine for Red Teams and QA testing☆95Updated 7 years ago
- ☆97Updated 8 years ago
- POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's s…☆103Updated 7 years ago
- An offensive Powershell console☆30Updated 9 years ago
- ☆108Updated 7 years ago
- ☆59Updated 5 years ago
- A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics☆85Updated 7 years ago
- Talk given at DerbyCon and RuxCon 2016☆22Updated 8 years ago
- ☆84Updated 9 years ago
- Comprehensive Pivoting Framework☆20Updated 8 years ago
- Powershell Persistence Locator☆66Updated 8 years ago
- A collection of scripts to initialize a windows VM to run all the malwares!☆105Updated 4 years ago
- Offensive Data Storage☆58Updated 8 years ago
- All materials from our Black Hat 2018 "Subverting Sysmon" talk☆136Updated 6 years ago
- The AwesomerShell Code Sample☆50Updated 9 years ago
- All the Power with no Shell☆36Updated 3 years ago
- Proof of concept VBA code to add to Normal.dot to put restrictions on Word☆41Updated 8 years ago
- Simple DDE object detector☆56Updated 7 years ago
- Useful Threat Hunting Stuff☆30Updated 4 years ago
- Powershell Empire Persistence finder☆119Updated 8 years ago
- Listening Post for Throwback Implant☆110Updated 9 years ago
- This tool will extract useful information from the McAfee update SiteList file and decrypt the associated password for each entry.☆26Updated 7 years ago
- Generate ATT&CK Navigator layer file from PowerShell Empire agent logs☆49Updated 6 years ago
- Yet another AV evasion tool☆119Updated 3 years ago
- PowerShell implementations of path-finding algorithms using graph theory☆77Updated 8 years ago
- Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…☆82Updated 7 years ago
- ☆51Updated 6 years ago
- Quick and dirty System (Power)Shell using NamedPipe impersonation.☆43Updated 8 years ago
- lterm is a small script built to install a bash hook for full terminal logging.☆53Updated 8 years ago
- CloudBurst is a red team framework for interacting with cloud providers to capture, compromise, and exfil data.☆36Updated 6 years ago