Didier Stevens

Saturday 2 January 2016

Update: shellcode2vba.py Version 0.4

Filed under: My Software,Shellcode,Update — Didier Stevens @ 13:33

shellcode2vba.py is a Python program to create VBA code to inject shellcode. This new version has 3 new options:

Option –nocreatethread allows you to instruct the program not to add the VBA code to create a new thread.

Option –writememory: from now on, the VBA code uses RtlMoveMemory in stead of WriteProcessMemory. To use WriteProcessMemory, use option –writememory process

Option –start allows you to specify the name of the start function (ExecuteShellCode by default).

shellcode2vba_v0_4.zip (https)
MD5: DA1580DEF5B5CFF08ACF5FA921AF0822
SHA256: BDC0A5EC3E918B3DA27C392E1B2F909B7BDAD319C43A4250689DD38C81FF876F

5 Comments »

  1. I’m gonna use almost everthing on this website lol.Good job man šŸ™‚

    Comment by B3mB4m — Saturday 2 January 2016 @ 15:16

  2. Hi Didier

    Will you make a youtube demo for shellcode2vba.py

    Comment by vasco — Saturday 2 January 2016 @ 21:20

  3. just happens that I’m working on one.

    Comment by Didier Stevens — Saturday 2 January 2016 @ 23:10

  4. is this possible to convert all dll in vba ?

    Comment by vasco — Tuesday 5 January 2016 @ 13:39

  5. This tool does not convert DLLs to VBA.

    Comment by Didier Stevens — Tuesday 5 January 2016 @ 15:34


RSS feed for comments on this post. TrackBack URI

Leave a Reply (comments are moderated)

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Blog at WordPress.com.