Vba2Graph

Vba2Graph A tool for security researchers, who waste their time analyzing malicious Office macros. Generates a VBA call graph, with potential malicious keywords highlighted. Allows for quick analysis of malicous macros, and easy understanding of the execution flow. @MalwareCantFly Features Keywor...

VBA-macro-experiments

Experimentos de macros VBA Colección de macros VBA publicadas en nuestro twitter / blog. Si te interesa este tema, por favor lee nuestros artículos "Hackeando de forma epistolar: implementando kerberoast en VBA puro" y "Arrojando luz sobre la creación de macros VBA". También siéntete libre de...

XLMMacroDeobfuscator

XLMMacroDeobfuscator XLMMacroDeobfuscator can be used to decode obfuscated XLM macros also known as Excel 4.0 macros. It utilizes an internal XLM emulator to interpret the macros, without fully performing the code. It supports both xls, xlsm, and xlsb formats. It uses xlrd2, pyxlsb2 and its own...

oletools

python-oletools oletools 是一个 Python 工具包，用于分析 Microsoft OLE2 文件 （也称为结构化存储、复合文件二进制格式或复合文档文件格式）， 例如 Microsoft Office 97-2003 文档、MSI 文件或 Outlook 消息，主要用于恶意软件分析、 取证和调试。 它基于 olefile 解析器。 它还提供了分析 RTF 文件和基于 OpenXML 格式 （即 OOXML）的文件（如 MS Office 2007+ 文档、XPS 或 MSIX 文件）的工具。 例如，oletools 可以检测、提取和分析 VBA 宏、OLE...

MacroShop

MacroShop Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See http://khr0x40sh.wordpress.com for details. 1. macrosafe.py Generates safe for VB inclusion into an excel spreadsheet. Requires a batch file generated by Veil-Evasion powershell payloads. To...

OffensiveVBA

OffensiveVBA In preparation for a VBS AV Evasion Stream/Video I was doing some research for Office Macro code execution methods and evasion techniques. The list got longer and longer and I found no central place for offensive VBA templates - so this repo can be used for such. It is very far away...

CVE-2019-15233

CVE-2019-15233 FAB-2019-00157 Vulnerabilidad descubierta por mí CVE-2019-15233 Aviso: advisory Información básica root@kitploit: Advisory ID: FAB-2019-00157 Product: Live Input Macros Manufacturer: Old Street Solutions Affected Versions: 2.10 and before Tested Versions: 2.10 Vulnerability Type:...

Mystikal

Mystikal Generador de payloads de acceso inicial para macOS Diseñado para usarse con https://github.com/its-a-feature/Mythic Publicación de blog relacionada: https://posts.specterops.io/introducing-mystikal-4fbd2f7ae520 Uso: 1. Instala Xcode en la máquina de compilación requerido para el paquete ...

malware-samples

Muestras de malware Este repositorio está pensado para proporcionar acceso a una amplia variedad de archivos maliciosos y otros artefactos. Todas las muestras están en un archivo ZIP protegido con contraseña, utilizando la contraseña: infected Ejercicios de análisis de malware Además de...

luckystrike

luckystrike A PowerShell based utility for the creation of malicious Office macro documents. To be used for pentesting or educational purposes only. Getting Started 1. Read this: http://www.shellntel.com/blog/2016/9/13/luckystrike-a-database-backed-evil-macro-generator. 2. Read the wiki! 3. Make...

ServiceNow-CVE-2025-11449-CVE-2025-11450-Mitigation-Script

ServiceNow CVE-2025-11449 & CVE-2025-11450 Mitigation Script Overview This script automatically detects and remediates CVE-2025-11449 and CVE-2025-11450 security vulnerabilities in ServiceNow UI Macros. These vulnerabilities could allow arbitrary code execution in users' browsers through speciall...

7-Zip-CVE-2025-0411-POC

🦀 Rust Macros No Recoil image Download 🚀 Overview "Rust Macros No Recoil" offers a seamless experience for reducing weapon recoil in the game Rust. Utilizing efficient scripts and tailored macros, this tool grants players improved control and accuracy during gameplay. It’s optimized for...

PoC-CVE-2022-30190

PoC CVE-2022-30190 : CVE 0-day MS Office RCE, también conocido como msdt follina Info : Nueva vulnerabilidad de día cero en Microsoft Office utilizada en ataques para ejecutar PowerShell Resumen El 29 de mayo de 2022, el equipo NaoSec, un equipo independiente de investigación en ciberseguridad,...

test-fuzz

test-fuzz test-fuzz es un subcomando de Cargo y una colección de macros de Rust para automatizar ciertas tareas relacionadas con el fuzzing con afl.rs, incluyendo: generar un corpus de fuzzing implementar un harness de fuzzing test-fuzz logra esto en parte utilizando las facilidades de prueba de...

Astra Linux – Vulnerability in LibreOffice

LibreOffice supports digital signatures for ODF documents and macros within documents. It provides visual indicators that confirm that the document has not been altered since the last signature, and that the signature is valid. A vulnerability in certificate validation in LibreOffice allowed...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: powerpc/64s: Fixed the program check interrupt emergency stack path issue. The emergency stack path was jumping into a 3: label within the GENCOMMONBODY macro for the normal path after it had finished, rather than jumping over...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm: nv04: Fix for out-of-bounds access When the value of dcb-or is assigned in fabricatedcboutput, there may be an out-of-bounds access to the dacusers array, especially when dcb-or is zero. This occurs because ffsdcb-or is used...

Astra Linux – Vulnerability in LibreOffice

The Certificate Validation user interface in LibreOffice may contain potential vulnerabilities. Signed macros are scripts that have been digitally signed by the developer using a cryptographic signature. When a document containing a signed macro is opened, LibreOffice displays a warning before th...

EUVD-2026-62953

In Splunk Enterprise Security versions below 8.6.1, a user who holds the essanalyst Splunk Enterprise Security role could change User and Entity Behavior Analytics UEBA search macros that scheduled searches run with administrator permissions, allowing for access to all relevant data and system...

CVE-2026-76388

In Splunk Enterprise Security versions below 8.6.1, a user who holds the essanalyst Splunk Enterprise Security role could change User and Entity Behavior Analytics UEBA search macros that scheduled searches run with administrator permissions, allowing for access to all relevant data and system...