S3cur3Th1sSh1t/OffensiveVBA resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1276 stars · 227 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A curated collection of offensive VBA macro templates for code execution and antivirus evasion in Microsoft Office documents. It aggregates techniques like shellcode injection, AMSI bypasses, PPID spoofing, and process creation via Win32/WMI from various public sources into one reference repository.

Use cases

• find VBA macro templates for code execution in Office documents
• learn antivirus evasion techniques for Office macros
• run shellcode from a Word or Excel macro
• bypass AMSI from VBA
• study red team tradecraft for phishing payloads
• collect offensive VBA snippets in one place

When to choose

• you are a red teamer or pentester building Office macro payloads
• you want a reference collection of public VBA evasion techniques
• you are learning how macros achieve code execution and evade AV

When to avoid

• you need a maintained tool or library rather than copy-paste templates
• you want defensive macro detection or Office hardening guidance
• your target environment is not Windows/Office

Facets

learning-resource · maturity maintenance

penetration-testing security developer-tools penetration-testing security windows windows cross-platform vba office-macros av-evasion red-team offensive-security shellcode amsi-bypass code-execution

Member repositories

For agents

markdown · JSON · MCP: product_card(name="S3cur3Th1sSh1t/OffensiveVBA")