ai-agent

EvilClippy: Build stealthy MS‑Office docs with hidden VBA macros

Name: EvilClippy: Build stealthy MS‑Office docs with hidden VBA macros
Author: outflanknl

Generate Office files that conceal VBA code and use P‑Code stomping to evade analysis, running on Linux, macOS and Windows – perfect for red‑team founders. 2.3k+ GitHub stars.

From the repo · “A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.”

2,260 stars397 forksC#Guide quality 9/10 · reviewed Oct 14Updated 12/27/2023100% free · open source

What it does

EvilClippy creates covert MS Office documents with hidden or obfuscated VBA macros for security testing and research purposes.

When to use it

•When testing the security of MS Office document handlers in your application
•To create realistic phishing documents for security awareness training
•When evaluating the effectiveness of macro-based malware detection tools

Ready-to-paste prompt

dotnet EvilClippy.dll --macro /path/to/payload.vba --output /path/to/output.docx --pcode

Heads up: The tool requires the .NET Core runtime to be installed on the system, and the build script assumes that the 'dotnet' command is available in the system's PATH

Saves to your device

Use with Claude

New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

✅ Light setup

Installs with a command or two; your AI agent can do it for you.

Try it instantly — no install

Claude Code

mkdir -p ~/.claude/skills/evilclippy && curl -fsSL https://workflowstacks.com/api/skills/evilclippy/claude-skill -o ~/.claude/skills/evilclippy/SKILL.md

Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)

claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

How EvilClippy: Build stealthy MS‑Office docs with hidden VBA macros works

Codeflow

Free to inspect

EvilClippy: Build stealthy MS‑Office docs with hidden VBA macros is a small C# project (~2.7k lines across 4 code files). Setup is light: small project — see the README for how to run it. Last commit 34 months ago, GPL-3.0 license, no tests found.

Size

Small codebase

~2.7k lines · 4 code files · 22 min skim

Setup

Light setup

Small project — see the README for how to run it.

Runs on

No API keys detected

C# 100%

Where to start reading

1
README.md
Start here — what it does and how to install it

READMENo tests foundThin docsNo CIGPL-3.0 licenseLast update 34 mo ago

Use with Claude

New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

✅ Light setup

Installs with a command or two; your AI agent can do it for you.

Try it instantly — no install

Claude Code

mkdir -p ~/.claude/skills/evilclippy && curl -fsSL https://workflowstacks.com/api/skills/evilclippy/claude-skill -o ~/.claude/skills/evilclippy/SKILL.md

Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)

claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

Quick Actions

Details

Creator

outflanknl

Language