Tools

piotrflorczyk/cve-2018-8174_analysis

Analysis of VBS exploit CVE-2018-8174

nccgroup/droppedconnection

Emulates a Cisco ASA Anyconnect VPN service for credential harvesting and VBS payload delivery in red team phishing operations.

simoesctt/-sctt-2026-33-0002-dwm-visual-field-singularity

Weaponizes a Visual-Field Singularity in Windows Desktop Window Manager to achieve local privilege escalation to SYSTEM, bypassing Graphics Isolation…

syfi/cve-2018-8174

MS Word MS WordPad via IE VBS Engine RCE

simoesctt/sctt-2026-33-0002-dwm-visual-field-singularity

Exploit research targeting Windows DWM to achieve local privilege escalation via a theoretical Visual-Field Singularity, bypassing graphics isolation…

operatorequals/smbrat

A Windows Remote Administration Tool in Visual Basic with UNC paths

blackoclock/xls-to-dbatloader-or-guloader-for-agenttesla-variant

CVE-2017-0199 XLS --> HTA --> VBS --> STEGANOGRAPHY --> DBATLOADER/GULOADER STYLE MALWARE

buter-chkalova/rvbbitsafe

A next-generation multi-echelon anti-ransomware fortress for Windows, combining hypervisor, eBPF, AI deception, and hardware-enforced security.

s3cur3th1ssh1t/offensivevba

This repo covers some code execution and AV Evasion methods for Macros in Office documents