Skip to content

VBS macro template that can be easily modified per engagement to ensure stealth.

License

Notifications You must be signed in to change notification settings

LiveGray/SAGESPADE

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 

Repository files navigation

SAGESPADE

A fantastic macro structure that can be obfuscated easily per usage to ensure AV bypass. Works well against Windows systems, as well as email filtration checks.

Usage

Open up "sagespade.vbs" and add your base64 encoded payload to the intended area.

I recommend using an empire payload, or koadic. PoshC2 is also fantastic.

Embed within a convincing document, such as a resumè or blurred spreadsheet.