khr0x40sh/MacroShop

The repository introduces several new scripts for generating executable payloads. \exeinvba.py\ and \b64enc.py\ generate VBA macros that decode and execute base64-encoded executables, with \exeinvba.py\ specifically handling large files by splitting the encoded payload into chunks to avoid VBA procedure size limits. \macro\_safe.py\ and \macro\_safe\_old.py\ convert Veil-generated PowerShell batch files into safe VBA macro text, with the newer version including architecture detection for 32/64-bit systems. Additionally, \macro.bat\ and \test.bat\ provide direct execution commands using PowerShell's \Invoke-Expression\ to decompress and run payloads, while \macro.txt\ and \test.txt\ contain the corresponding VBA code templates.

(repo-wide) · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 37 → 41 (+3.4)
• Rubric changed (rubric-2026.09.16 → rubric-2026.10.5) — scores are not directly comparable.

• Code Health 100 → 100 (-0.3)
• Architecture 69 (new)
• Maturity 24 → 44 (+19.9)
• Readiness 15 → 15 (+0.0)
• Security 100 → 100 (+0.0)

• Documentation: no installation or build instructions (README.md)
• Duplicated block (7 lines × 3) (exeinvba.py)

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

khr0x40sh/MacroShop was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.