Client-Side RCE Payloads: Excel Macros, mshta, and JS
RCE macro and Windows client-side payloads are essential for social engineering, Red Team, and APT simulations.
This generator instantly creates ready-to-use VBA macros, mshta, and JavaScript payloads for reverse shells or download-and-execute attacks.
Each snippet is designed to evade basic defenses and helps simulate real-world phishing and lateral movement.
- Generate PowerShell-based reverse shell macros for Excel and Word
- Create mshta and JavaScript one-liners for phishing, LNK, HTA, or HTML drops
- Copy & paste with one click. Each payload comes with usage notes and stealth tips
Professional Red Team and CTF Use Only
Always test payloads in isolated labs or permitted environments.
Real-world attacks may need mutation, obfuscation, or AV bypass—try Base64/Hex encoding and macro mutation for evasion.
For new techniques, combine with privdayz's payload, shell, and obfuscation tools!