├── LICENSE.md ├── MMG.py ├── README.md ├── TEMPLATE.md ├── configs ├── dotnettojs-domain-evasion.json ├── generic-cmd-evasion.json ├── generic-cmd.json ├── recon-rename-wmi-cmd-evasion.json ├── recon.json ├── wmi-cmd-evasion-domain.json ├── wmi-cmd-evasion-process.json ├── wmi-cmd.json ├── wmi-evasion-uptime.json └── wmi-msbuild-evasion-domain.json ├── examples └── generic-cmd-evasion.vba ├── lib ├── __init__.py ├── encoder.py └── helper.py └── templates ├── evasions ├── diskcheck.vba ├── domain.vba ├── encoder.vba ├── hex-decode.vba ├── none.vba ├── password.vba ├── process.vba └── uptime.vba └── payloads ├── dotnettojs-evasion-template.vba ├── generic-cmd-evasion-template.vba ├── generic-cmd-template.vba ├── recon-rename-wmi-cmd-evasion.vba ├── recon-template.vba ├── wmi-evasion-domain-template.vba ├── wmi-evasion-process-template.vba ├── wmi-evasion-uptime-template.vba ├── wmi-msbuild-evasion-domain-template.vba └── wmi-template.vba /LICENSE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/LICENSE.md -------------------------------------------------------------------------------- /MMG.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/MMG.py -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/README.md -------------------------------------------------------------------------------- /TEMPLATE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/TEMPLATE.md -------------------------------------------------------------------------------- /configs/dotnettojs-domain-evasion.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/configs/dotnettojs-domain-evasion.json -------------------------------------------------------------------------------- /configs/generic-cmd-evasion.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/configs/generic-cmd-evasion.json -------------------------------------------------------------------------------- /configs/generic-cmd.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/configs/generic-cmd.json -------------------------------------------------------------------------------- /configs/recon-rename-wmi-cmd-evasion.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/configs/recon-rename-wmi-cmd-evasion.json -------------------------------------------------------------------------------- /configs/recon.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/configs/recon.json -------------------------------------------------------------------------------- /configs/wmi-cmd-evasion-domain.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/configs/wmi-cmd-evasion-domain.json -------------------------------------------------------------------------------- /configs/wmi-cmd-evasion-process.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/configs/wmi-cmd-evasion-process.json -------------------------------------------------------------------------------- /configs/wmi-cmd.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/configs/wmi-cmd.json -------------------------------------------------------------------------------- /configs/wmi-evasion-uptime.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/configs/wmi-evasion-uptime.json -------------------------------------------------------------------------------- /configs/wmi-msbuild-evasion-domain.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/configs/wmi-msbuild-evasion-domain.json -------------------------------------------------------------------------------- /examples/generic-cmd-evasion.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/examples/generic-cmd-evasion.vba -------------------------------------------------------------------------------- /lib/__init__.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /lib/encoder.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/lib/encoder.py -------------------------------------------------------------------------------- /lib/helper.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/lib/helper.py -------------------------------------------------------------------------------- /templates/evasions/diskcheck.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/evasions/diskcheck.vba -------------------------------------------------------------------------------- /templates/evasions/domain.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/evasions/domain.vba -------------------------------------------------------------------------------- /templates/evasions/encoder.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/evasions/encoder.vba -------------------------------------------------------------------------------- /templates/evasions/hex-decode.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/evasions/hex-decode.vba -------------------------------------------------------------------------------- /templates/evasions/none.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/evasions/none.vba -------------------------------------------------------------------------------- /templates/evasions/password.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/evasions/password.vba -------------------------------------------------------------------------------- /templates/evasions/process.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/evasions/process.vba -------------------------------------------------------------------------------- /templates/evasions/uptime.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/evasions/uptime.vba -------------------------------------------------------------------------------- /templates/payloads/dotnettojs-evasion-template.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/payloads/dotnettojs-evasion-template.vba -------------------------------------------------------------------------------- /templates/payloads/generic-cmd-evasion-template.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/payloads/generic-cmd-evasion-template.vba -------------------------------------------------------------------------------- /templates/payloads/generic-cmd-template.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/payloads/generic-cmd-template.vba -------------------------------------------------------------------------------- /templates/payloads/recon-rename-wmi-cmd-evasion.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/payloads/recon-rename-wmi-cmd-evasion.vba -------------------------------------------------------------------------------- /templates/payloads/recon-template.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/payloads/recon-template.vba -------------------------------------------------------------------------------- /templates/payloads/wmi-evasion-domain-template.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/payloads/wmi-evasion-domain-template.vba -------------------------------------------------------------------------------- /templates/payloads/wmi-evasion-process-template.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/payloads/wmi-evasion-process-template.vba -------------------------------------------------------------------------------- /templates/payloads/wmi-evasion-uptime-template.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/payloads/wmi-evasion-uptime-template.vba -------------------------------------------------------------------------------- /templates/payloads/wmi-msbuild-evasion-domain-template.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/payloads/wmi-msbuild-evasion-domain-template.vba -------------------------------------------------------------------------------- /templates/payloads/wmi-template.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Mr-Un1k0d3r/MaliciousMacroGenerator/HEAD/templates/payloads/wmi-template.vba --------------------------------------------------------------------------------