scriptchildie / MaliciousVBALinks
Reverse shell macro using Word VBA
☆17Updated 5 years ago
Alternatives and similar repositories for MaliciousVBA
Users that are interested in MaliciousVBA are comparing it to the libraries listed below
Sorting:
- PickleC2 is a post-exploitation and lateral movements framework☆96Updated 4 years ago
- AmsiHook is a project I created to figure out a bypass to AMSI via function hooking.☆67Updated 5 years ago
- Execute Mimikatz with different technique☆51Updated 4 years ago
- (kinda) Malicious Outlook Reader☆138Updated 4 years ago
- Windows TCPIP Finger Command / C2 Channel and Bypassing Security Software☆68Updated 2 years ago
- (PoC) Tiny Excel BIFF8 Generator, to Embedded 4.0 Macros in xls files without Excel.☆43Updated 4 years ago
- (Sim)ulate (Ba)zar Loader☆29Updated 5 years ago
- RDPThief donut shellcode inject into mstsc☆88Updated 4 years ago
- Remote Code Execution on Microsoft Exchange Server through fixed cryptographic keys☆22Updated 4 years ago
- PoC-Malware-TTPs☆49Updated 2 years ago
- Socks Proxy Server Plugin for Invoke-SocksProxy☆18Updated 10 months ago
- Get or remove RunMRU values☆61Updated 6 years ago
- Invoke-SocksProxy is a PowerShell script designed to create reverse proxies.☆49Updated 5 years ago
- Polymorphic code obfuscator for use in Red Team operations☆32Updated 3 years ago
- Perform Windows domain enumeration via LDAP☆37Updated 3 years ago
- PyQT5 app for LOLBAS and GTFOBins☆45Updated 3 years ago
- AutoStart teamserver and listeners with services☆75Updated 4 years ago
- I used this to see if an EDR is running in Safe Mode☆36Updated 4 years ago
- Perun's Fart (Slavic God's Luck). Another method for unhooking AV and EDR, this is my C# version.☆117Updated 4 years ago
- AppXSVC Service race condition - privilege escalation☆29Updated 6 years ago
- A simple injector that uses LoadLibraryA☆18Updated 5 years ago
- Harvis is designed to automate your C2 Infrastructure.☆107Updated 3 years ago
- A collection of Malleable C2 profiles that work with Cobalt Strike 3.x.☆30Updated 6 years ago
- ☆66Updated 2 years ago
- A curated list of tools and techniques written from experience in weaponization of malware☆41Updated 2 years ago
- C# POC code for the SessionEnv dll hijack by utilizing called functions of TSMSISrv.dll☆62Updated 6 years ago
- pypykatz plugin for volatility3 framework☆46Updated 8 months ago
- SMBGhost (CVE-2020-0796) and SMBleed (CVE-2020-1206) Scanner☆46Updated 5 years ago
- 64bit Windows 10 shellcode that adds user BOKU:SP3C1ALM0V3 to the system and the localgroups Administrators & "Remote Desktop Users"☆41Updated 4 years ago
- Small POC for process ghosting☆40Updated 4 years ago