https://github.com/waived/venom-exploit-builder

Windows SmartScreen bypass methods for silent file downloads --- lnk, vbs, hta, cmd, bat, etc...
https://github.com/waived/venom-exploit-builder

hackertool smartscreen-bypass smartscreenbypass visual-basic windows-11

Last synced: 4 months ago
JSON representation

Windows SmartScreen bypass methods for silent file downloads --- lnk, vbs, hta, cmd, bat, etc...

• Host: GitHub
• URL: https://github.com/waived/venom-exploit-builder
• Owner: waived
• Created: 2024-06-24T00:20:28.000Z (12 months ago)
• Default Branch: main
• Last Pushed: 2024-10-16T20:05:27.000Z (8 months ago)
• Last Synced: 2025-01-01T05:31:57.539Z (6 months ago)
• Topics: hackertool, smartscreen-bypass, smartscreenbypass, visual-basic, windows-11
• Homepage:
• Size: 77.1 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.txt

Awesome Lists containing this project

README

        
____   ____                              ____    _______   

\   \ /   /____   ____   ____   _____   /_   |   \   _  \  

 \   Y   // __ \ /    \ /  _ \ /     \   |   |   /  /_\  \ 

  \     /\  ___/|   |  (  <_> )  Y Y  \  |   |   \  \_/   \

   \___/  \___  >___|  /\____/|__|_|  /  |___| /\ \_____  /

              \/     \/             \/         \/       \/ 

Program: Venom Exploit Builder

Version: 1.0

Language: Visual Basic .NET

.NET Framework: 4.8

Overview:

    Venom Exploit Builder is a program that aims to bypass SmartScreen filters by embedding download

    instructions into files such as...

        LNK --- Windows Shortcut

        HTA --- HTML Application

        VBS --- Visual Basic script

        BAT --- Windows Batchfile

        CMD --- Windows Command script

    Once the command is executed, the payload is downloaded into the Temporary Files directory and

    executed. Each file-type supports a download request using with various Powershell invokations

    or via the system BitsAdmin command.

Note: BitsAdmin can be finickey and requires a filename/extension in the URL. 

        Bad URL: http://www.example.com/files/myscript

        OK URL: http://www.example.com/files/myscript.exe

Updates:

    In the future I will add updates to this, including using CertUtil (Windows Certificate Utility)

    as a third delivery method to download files. I'll also do my best to keep each payload FUD and

    uneffected by SmartScreen filters.