XLMMacroDeobfuscator

XLMMacroDeobfuscator XLMMacroDeobfuscator peut être utilisé pour décoder les macros XLM obfusquées également connues sous le nom de macros Excel 4.0. Il utilise un émulateur XLM interne pour interpréter les macros, sans exécuter complètement le code. Il prend en charge les formats xls, xlsm et...

MacroShop

MacroShop Набор скриптов для помощи в доставке полезных нагрузок через макросы Office. Большинство написано на Python. Подробности см. на http://khr0x40sh.wordpress.com. 1. macrosafe.py Генерирует безопасный для включения в VBA код для таблицы Excel. Требуется пакетный файл, созданный с помощью...

CVE-2019-15233

CVE-2019-15233 FAB-2019-00157 Уязвимость, обнаруженная мной, CVE-2019-15233 Рекомендация: advisory Основная информация Advisory ID: FAB-2019-00157 Product: Live Input Macros Manufacturer: Old Street Solutions Affected Versions: 2.10 and before Tested Versions: 2.10 Vulnerability Type: Cross-Site...

oletools

python-oletools oletools est un ensemble d'outils python pour analyser les fichiers Microsoft OLE2 également appelés Structured Storage, Compound File Binary Format ou Compound Document File Format, tels que les documents Microsoft Office 97-2003, les fichiers MSI ou les messages Outlook,...

OffensiveVBA

OffensiveVBA En préparation d’un Stream/Vidéo sur l’évasion AV pour VBS, je faisais des recherches sur les méthodes d’exécution de code dans les macros Office et les techniques d’évasion. La liste s’est allongée et je n’ai trouvé aucun endroit centralisé pour les templates VBA offensifs – ce dépô...

Mystikal

Mystikal Генератор полезной нагрузки для начального доступа macOS Предназначен для использования с https://github.com/its-a-feature/Mythic Связанная запись в блоге: https://posts.specterops.io/introducing-mystikal-4fbd2f7ae520 Использование: 1. Установите Xcode на сборочной машине требуется для...

Vba2Graph

Vba2Graph Un outil pour les chercheurs en sécurité, qui perdent leur temps à analyser des macros Office malveillantes. Génère un graphe d'appels VBA, avec les mots-clés potentiellement malveillants mis en évidence. Permet une analyse rapide des macros malveillantes et une compréhension facile du...

malware-samples

악성코드 샘플 이 저장소는 다양한 악성 파일 및 기타 아티팩트에 대한 접근을 제공하기 위한 것입니다. 모든 샘플은 비밀번호로 보호된 ZIP 아카이브에 있으며, 비밀번호는 infected 입니다. 악성코드 분석 실습 샘플에서 아티팩트를 제공하는 것 외에도, 정기적으로 악성코드 분석 실습을 게시할 예정입니다. 이 실습은 다양한 악성코드 분석 주제를 다루며, 상세한 해결 방법과 워크스루가 포함되어 있습니다. 2022 10월: VBA 매크로에서 셸코드 실행 추적 2021 12월: Maldocs - Python을 사용한 다운로드 URL...

luckystrike

luckystrike Un utilitaire basé sur PowerShell pour la création de documents Office macro malveillants. À utiliser uniquement à des fins de pentesting ou éducatives. Pour commencer 1. Lisez ceci : http://www.shellntel.com/blog/2016/9/13/luckystrike-a-database-backed-evil-macro-generator. 2. Lisez ...

ServiceNow-CVE-2025-11449-CVE-2025-11450-Mitigation-Script

Скрипт для устранения уязвимостей ServiceNow CVE-2025-11449 и CVE-2025-11450 Обзор Этот скрипт автоматически обнаруживает и устраняет уязвимости безопасности CVE-2025-11449 и CVE-2025-11450 в UI-макросах ServiceNow. Эти уязвимости могут позволить выполнение произвольного кода в браузерах...

Rocky Linux 8.6 [CIQ] Security Update: qt5-rpm-macros / qt5-srpm-macros (ciqsa-2026_0253)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260253 advisory. This advisory aggregates security fixes for the qt5 SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2022-25255. Tenable has extracted the preceding description block...

AlmaLinux 9.2 [TuxCare] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1747253770)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1747253770 advisory. - Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an...

Rocky Linux 9.6 [CIQ] Security Update: go-filesystem / go-rpm-macros / go-rpm-templates / go-srpm-macros Multiple Vulnerabilities (ciqsa-2026_1412)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261412 advisory. This advisory aggregates security fixes for the go-rpm-macros SRPM in CIQ LTS 9.6. It addresses 2 CVEs: CVE-2025-61726, CVE-2026-25679. Tenable has...

AlmaLinux 9.6 [TuxCare] Security Update: go-filesystem / go-rpm-macros / go-rpm-templates / go-srpm-macros (ALMALINUX9.6:CLSA-2026:1776966842)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776966842 advisory. - url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 Note that Nessus has not...

AlmaLinux 9.2 [TuxCare] Security Update: go-filesystem / go-rpm-macros / go-rpm-templates / go-srpm-macros (ALMALINUX9.2:CLSA-2025:1765824979)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765824979 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

7-Zip-CVE-2025-0411-POC

🦀 Rust Macros Sans Recul Téléchargement Téléchargement 🚀 Aperçu « Rust Macros Sans Recul » offre une expérience fluide pour réduire le recul des armes dans le jeu Rust. Grâce à des scripts efficaces et des macros sur mesure, cet outil permet aux joueurs d'améliorer leur contrôle et leur précision...

Rocky Linux 9.6 [TuxCare] Security Update: go-filesystem / go-rpm-macros / go-rpm-templates / go-srpm-macros (ALMALINUX9.6:CLSA-2025:1766233299)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766233299 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

AlmaLinux 9.6 [TuxCare] Security Update: go-filesystem / go-rpm-macros / go-rpm-templates / go-srpm-macros (ALMALINUX9.6:CLSA-2025:1766233299)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766233299 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

PoC-CVE-2022-30190

POC CVE-2022-30190 : CVE 0-day MS Offic RCE, также известная как msdt follina Информация : Новая 0-day уязвимость Microsoft Office используется в атаках для выполнения PowerShell Резюме 29 мая 2022 года команда NaoSec, независимая группа исследователей кибербезопасности, обнаружила вредоносный...

test-fuzz

test-fuzz test-fuzz — это подкоманда Cargo и набор макросов Rust для автоматизации задач, связанных с фаззингом с помощью afl.rs, включая: генерацию фаззинг-корпуса реализацию фаззинг-харнеса test-fuzz выполняет эти задачи частично с помощью средств тестирования Rust. Например, для генерации...