Skip to content

Latest commit

 

History

History
7 lines (5 loc) · 296 Bytes

README.md

File metadata and controls

7 lines (5 loc) · 296 Bytes

While investigating a Windows malware infection, I encountered an obfuscated VBS payload. I reverse-engineered the obfuscation algorithm and then attempted to recreate the Python script used to obfuscate the VBS payload.

Usage: python vbs_obf.py input_vbs_filename output_vbs_filename