discovered 03 Aug 2026
MaliciousMacroMSBuild
→ View on GitHubMalicious Macro MSBuild Generator v2.1 is a tool designed for adversary simulation and red teaming that generates malicious macros capable of executing PowerShell scripts or shellcode through MSBuild application whitelisting bypass techniques. Notable features include AMSI bypass capabilities, sandbox evasion through environmental keying, and customizable output options such as setting a kill date. The tool supports various payload types including shellcode and PowerShell, allowing users to simulate advanced attack scenarios.