scriptchildie / MaliciousVBALinks
Reverse shell macro using Word VBA
☆17Updated 5 years ago
Alternatives and similar repositories for MaliciousVBA
Users that are interested in MaliciousVBA are comparing it to the libraries listed below
Sorting:
- AmsiHook is a project I created to figure out a bypass to AMSI via function hooking.☆67Updated 5 years ago
- PickleC2 is a post-exploitation and lateral movements framework☆94Updated 4 years ago
- RDPThief donut shellcode inject into mstsc☆88Updated 4 years ago
- Socks Proxy Server Plugin for Invoke-SocksProxy☆18Updated 9 months ago
- Windows TCPIP Finger Command / C2 Channel and Bypassing Security Software☆68Updated 2 years ago
- Execute Mimikatz with different technique☆51Updated 4 years ago
- (PoC) Tiny Excel BIFF8 Generator, to Embedded 4.0 Macros in xls files without Excel.☆43Updated 4 years ago
- Windows File Enumeration Intel Gathering Tool.☆17Updated 2 years ago
- ☆66Updated 2 years ago
- Polymorphic code obfuscator for use in Red Team operations☆32Updated 3 years ago
- Small POC for process ghosting☆40Updated 3 years ago
- (kinda) Malicious Outlook Reader☆138Updated 4 years ago
- Harvis is designed to automate your C2 Infrastructure.☆107Updated 3 years ago
- Weaponizing for privileged file writes bugs with PrintNotify Service☆136Updated 3 years ago
- transmit cs beacon (shellcode) over self-made dns to avoid anti-kill and AV☆50Updated 5 years ago
- Remote Code Execution on Microsoft Exchange Server through fixed cryptographic keys☆22Updated 4 years ago
- Invoke-SocksProxy is a PowerShell script designed to create reverse proxies.☆49Updated 4 years ago
- (Sim)ulate (Ba)zar Loader☆29Updated 5 years ago
- pypykatz plugin for volatility3 framework☆45Updated 7 months ago
- Perform Windows domain enumeration via LDAP☆37Updated 3 years ago
- AutoStart teamserver and listeners with services☆75Updated 4 years ago
- A simple injector that uses LoadLibraryA☆18Updated 5 years ago
- Use smb2 protocol to detect remote computer os version, support win7/server2008-win10/server2019☆59Updated 4 years ago
- Simple DLL that add a user to the local Administrators group☆77Updated 4 years ago
- Perun's Fart (Slavic God's Luck). Another method for unhooking AV and EDR, this is my C# version.☆117Updated 4 years ago
- AMSI Bypass Via the Heap☆107Updated 5 years ago
- Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used☆92Updated 4 years ago
- IOXIDResolver from AirBus Security/PingCastle☆51Updated 5 years ago
- ☆37Updated 5 years ago
- Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged☆88Updated 3 years ago