VBA purge your Office documents with OfficePurge. VBA purging removes P-code from module streams within Office documents. Documents that only contain source code and no compiled code are more likely to evade AV detection and YARA rules. Read more here .
The main features of fireeye/officepurge are: Initial Access Frameworks, Payload Development.
Open-source alternatives to fireeye/officepurge include: 0xsp-srd/mortar — evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR). aaaddress1/xlsgen — Tiny Excel BIFF8 Generator, to Embedded 4.0 Macros in *.xls. bats3c/darkarmour — Store and execute an encrypted windows binary from inside memory, without a single bit touching disk. 9emin1/charlotte — c++ fully undetected shellcode launcher ;). cobbr/sharpsploit — SharpSploit is a .NET post-exploitation library written in C# that aims to highlight the attack surface of .NET and… d00mfist/mystikal — macOS Initial Access Payload Generator.
Store and execute an encrypted windows binary from inside memory, without a single bit touching disk.
evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)
