{"adoption": {"forks": 368, "observed_at": "2026-08-28T04:06:02.881018+00:00", "stars": 1988}, "canonical_url": "https://ross.abutalabs.com/products/sharpshooter", "card": {"archived": false, "artifact_type": "framework", "description": "Payload Generation Framework", "domain": ["security", "penetration-testing"], "enriched": true, "function": ["penetration-testing", "security"], "health_score": 20, "homepage": null, "language": "VBA", "license": "BSD-3-Clause", "license_family": "permissive", "maturity": "maintenance", "member_repos": ["mdsecactivebreach/SharpShooter"], "name": "mdsecactivebreach/SharpShooter", "platform": ["windows", "python", "cli"], "pushed_at": "2024-08-21T12:09:54+00:00", "repo": "mdsecactivebreach/SharpShooter", "stars": 1988, "tags": ["payload-generation", "red-team", "offensive-security", "shellcode", "macro-payloads", "amsi-bypass", "html-smuggling", "dotnettojscript"], "topics": [], "urls": [], "use_cases": ["generate malicious document payloads for red team engagements", "create HTA, JS, VBS or WSF payloads that execute shellcode", "deliver payloads via web or DNS staging", "bypass AMSI and evade antivirus detection in penetration tests", "embed payloads in HTML files using HTML smuggling", "generate macro-enabled Office documents with embedded shellcode"], "what_it_is": "SharpShooter is a payload creation framework for retrieving and executing arbitrary CSharp source code, generating payloads in formats like HTA, JS, VBS, WSF, VBA, and Excel 4 macros. It supports staged and stageless delivery via web or DNS, RC4 encryption, sandbox detection, AMSI bypass, and HTML smuggling for red team operations.", "when_to_avoid": ["you need a defensive or detection tool rather than offensive payload generation", "you target non-Windows platforms, since it relies on .NET and Windows scripting hosts", "you want a maintained tool with modern evasion guarantees, as techniques like AMSI bypass may be outdated"], "when_to_choose": ["you are a red teamer needing script-based payload generation for Windows targets", "you need staged or stageless shellcode execution across multiple scripting formats", "you want sandbox evasion and environment keying built into payloads"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/sharpshooter", "repo": "mdsecactivebreach/SharpShooter", "role": "main", "score": 32}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:06:02.881018+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T03:02:58.883367+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "02d9a920944ed07db03416fb0a1b23a94db068625cd69f283e14e24c729eb0b9", "fetched_at": "2026-08-28T04:06:02.881018+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mdsecactivebreach/SharpShooter"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:06:02.881018+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T03:02:58.883367+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "02d9a920944ed07db03416fb0a1b23a94db068625cd69f283e14e24c729eb0b9", "fetched_at": "2026-08-28T04:06:02.881018+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mdsecactivebreach/SharpShooter"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T03:02:58.883367+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "02d9a920944ed07db03416fb0a1b23a94db068625cd69f283e14e24c729eb0b9", "fetched_at": "2026-08-28T04:06:02.881018+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mdsecactivebreach/SharpShooter"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:06:02.881018+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:06:02.881018+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:06:02.881018+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T03:02:58.883367+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "02d9a920944ed07db03416fb0a1b23a94db068625cd69f283e14e24c729eb0b9", "fetched_at": "2026-08-28T04:06:02.881018+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mdsecactivebreach/SharpShooter"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:06:02.881018+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:06:02.881018+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T03:02:58.883367+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "02d9a920944ed07db03416fb0a1b23a94db068625cd69f283e14e24c729eb0b9", "fetched_at": "2026-08-28T04:06:02.881018+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mdsecactivebreach/SharpShooter"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:06:02.881018+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:06:02.881018+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:06:02.881018+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T03:02:58.883367+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "02d9a920944ed07db03416fb0a1b23a94db068625cd69f283e14e24c729eb0b9", "fetched_at": "2026-08-28T04:06:02.881018+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mdsecactivebreach/SharpShooter"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:06:02.881018+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:06:02.881018+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T03:02:58.883367+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "02d9a920944ed07db03416fb0a1b23a94db068625cd69f283e14e24c729eb0b9", "fetched_at": "2026-08-28T04:06:02.881018+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mdsecactivebreach/SharpShooter"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T03:02:58.883367+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "02d9a920944ed07db03416fb0a1b23a94db068625cd69f283e14e24c729eb0b9", "fetched_at": "2026-08-28T04:06:02.881018+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mdsecactivebreach/SharpShooter"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T03:02:58.883367+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "02d9a920944ed07db03416fb0a1b23a94db068625cd69f283e14e24c729eb0b9", "fetched_at": "2026-08-28T04:06:02.881018+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mdsecactivebreach/SharpShooter"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T03:02:58.883367+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "02d9a920944ed07db03416fb0a1b23a94db068625cd69f283e14e24c729eb0b9", "fetched_at": "2026-08-28T04:06:02.881018+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mdsecactivebreach/SharpShooter"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_releases"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 3102, "days_push": 742, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 32, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}