Final year school project, obfuscate Word macros.

This program obfuscates the Visual Basic code from Microsoft Word macros. The transformations applied on the code allows the macros to evade signature scans from Antivirus softwares.

With Docker:

cat YOUR_MACRO.vbs | docker run -i --rm bonnetn/vba-obfuscator /dev/stdin

This command will obfuscate the whole code.

⚠️ Pay attention to the first two lines!

⚠️ It is necessary to add a document variable to the word document before pasting the code. You can dispose of the first two lines once it has been executed once on the Word document.

Install python3 and the requirements.

pip install -r requirements.txt

To run the tests:

pytest

Then run:

python3 obfuscate.py YOUR_MACRO.vbs

Thomas Leroy - [email protected]

Nicolas Bonnet – [email protected]

Tutorial video on how to obfuscate your macros and put them in a Word Document.

Click on the picture to see the video (enable the subtitles).

Antivirus signature scan evasion.

Click on the picture to see the video (enable the subtitles).

The report of this project is available here. It is in French, so we are sorry for people that don't speak this lovely language.

The VBA obfuscator tool is provided for educational and research purposes only. The authors of this project are no way responsible for any misuse of this tool.

Do not attempt to violate the law with our project, we will not take any responsability for your actions.