In high school, I'd use VBScript and the associated VB controls to build interactive PowerPoint presentations to illustrate concepts
November 7, 2026 at 11:17 PM
In high school, I'd use VBScript and the associated VB controls to build interactive PowerPoint presentations to illustrate concepts
Quick question: why are you using vbscript from a task to launch PowerShell?
You can just launch PowerShell.
Also, VBScript is deprecated and will be removed in the next couple of years.
You can just launch PowerShell.
Also, VBScript is deprecated and will be removed in the next couple of years.
November 6, 2026 at 7:12 PM
Quick question: why are you using vbscript from a task to launch PowerShell?
You can just launch PowerShell.
Also, VBScript is deprecated and will be removed in the next couple of years.
You can just launch PowerShell.
Also, VBScript is deprecated and will be removed in the next couple of years.
Good question. The normal S4U path already runs PowerShell. The issue is the interactive fallback, where Windows creates a console before "-WindowStyle Hidden" takes effect, so it can still flash. The VBScript wrapper starts it hidden and waits for completion. Agreed it needs replacing long-term.
November 7, 2026 at 3:50 AM
Good question. The normal S4U path already runs PowerShell. The issue is the interactive fallback, where Windows creates a console before "-WindowStyle Hidden" takes effect, so it can still flash. The VBScript wrapper starts it hidden and waits for completion. Agreed it needs replacing long-term.
Ah right thank you! That's what I love about it, tho' occasionally the granularity trips me up (networking stuff mostly, different commands for DNS etc). You can literally "have a go" at something - stick to Get- and try out things like disk, network etc. So intuitive compared to wscript/vbscript
November 7, 2026 at 7:05 PM
Ah right thank you! That's what I love about it, tho' occasionally the granularity trips me up (networking stuff mostly, different commands for DNS etc). You can literally "have a go" at something - stick to Get- and try out things like disk, network etc. So intuitive compared to wscript/vbscript
#ExcelVBAマクロを使いこなす 105
IEを自動操作する際
「COMアプリケーションイベント」を使う：
Set objIE = CreateObject("InternetExplorer.Application")
CreateObjectの第二引数は…
・WSH (JScript/VBScript) だと
COMイベントの接頭辞。
・VBやVBAの場合は，
リモートサーバー名。
IEを自動操作する際
「COMアプリケーションイベント」を使う：
Set objIE = CreateObject("InternetExplorer.Application")
CreateObjectの第二引数は…
・WSH (JScript/VBScript) だと
COMイベントの接頭辞。
・VBやVBAの場合は，
リモートサーバー名。
November 8, 2026 at 5:09 AM
#ExcelVBAマクロを使いこなす 105
IEを自動操作する際
「COMアプリケーションイベント」を使う：
Set objIE = CreateObject("InternetExplorer.Application")
CreateObjectの第二引数は…
・WSH (JScript/VBScript) だと
COMイベントの接頭辞。
・VBやVBAの場合は，
リモートサーバー名。
IEを自動操作する際
「COMアプリケーションイベント」を使う：
Set objIE = CreateObject("InternetExplorer.Application")
CreateObjectの第二引数は…
・WSH (JScript/VBScript) だと
COMイベントの接頭辞。
・VBやVBAの場合は，
リモートサーバー名。
#WSH・JScriptでバッチ作成 6
オブジェクトの作り方
①
WScript.CreateObject("Scripting.FileSystemObject")
②
new ActiveXObject("Scripting.FileSystemObject")
WSH VBScriptでは①のみ使用可能。
WSH JScriptでは①②を使用可能。
htaファイル内のJScriptは②のみ使用可能。
オブジェクトの作り方
①
WScript.CreateObject("Scripting.FileSystemObject")
②
new ActiveXObject("Scripting.FileSystemObject")
WSH VBScriptでは①のみ使用可能。
WSH JScriptでは①②を使用可能。
htaファイル内のJScriptは②のみ使用可能。
November 6, 2026 at 6:08 PM
#WSH・JScriptでバッチ作成 6
オブジェクトの作り方
①
WScript.CreateObject("Scripting.FileSystemObject")
②
new ActiveXObject("Scripting.FileSystemObject")
WSH VBScriptでは①のみ使用可能。
WSH JScriptでは①②を使用可能。
htaファイル内のJScriptは②のみ使用可能。
オブジェクトの作り方
①
WScript.CreateObject("Scripting.FileSystemObject")
②
new ActiveXObject("Scripting.FileSystemObject")
WSH VBScriptでは①のみ使用可能。
WSH JScriptでは①②を使用可能。
htaファイル内のJScriptは②のみ使用可能。
VB, VBA, VB.NET, VBScript, and VB6 all look like they belong in the same family reunion. They do, sort of. But using the wrong example can lead to some wonderfully confusing results. youtu.be/U_YqdYIkeIA
Which Visual Basic? VB vs VBA vs VB.NET vs VBScript Explained - QQ 108
YouTube video by Computer Learning Zone
youtu.be
November 3, 2026 at 8:31 PM
VB, VBA, VB.NET, VBScript, and VB6 all look like they belong in the same family reunion. They do, sort of. But using the wrong example can lead to some wonderfully confusing results. youtu.be/U_YqdYIkeIA
もうかかわることはないのでさいなら
2027年に廃止予定のVBScript！どのマクロがエラーになる？どうしたらいい？
YouTube video by Office TANAKA
www.youtube.com
November 2, 2026 at 12:23 AM
もうかかわることはないのでさいなら
#コマンドプロンプト・BATを使いこなす 116
BAT内で高度な処理：mshta＋VBScript編
mshta vbscript:execute("VBScriptのコード")
例：
mshta vbscript:execute("MsgBox (1+1): window.close")
1+1が計算され「2」と表示される。
良いBATをコーディングするためには，
WSHの知識も必要。
BAT内で高度な処理：mshta＋VBScript編
mshta vbscript:execute("VBScriptのコード")
例：
mshta vbscript:execute("MsgBox (1+1): window.close")
1+1が計算され「2」と表示される。
良いBATをコーディングするためには，
WSHの知識も必要。
October 31, 2026 at 5:38 AM
#コマンドプロンプト・BATを使いこなす 116
BAT内で高度な処理：mshta＋VBScript編
mshta vbscript:execute("VBScriptのコード")
例：
mshta vbscript:execute("MsgBox (1+1): window.close")
1+1が計算され「2」と表示される。
良いBATをコーディングするためには，
WSHの知識も必要。
BAT内で高度な処理：mshta＋VBScript編
mshta vbscript:execute("VBScriptのコード")
例：
mshta vbscript:execute("MsgBox (1+1): window.close")
1+1が計算され「2」と表示される。
良いBATをコーディングするためには，
WSHの知識も必要。
#ESETresearch APT Activity Report (Apr–Sep 2026): Russia-aligned APTs continued targeting 🇺🇦 Ukrainian defense, government, and infrastructure entities. #Gamaredon deployed #Turla’s new VBScript reconnaissance tool #Rezzuar – confirming continued FSB-linked collaboration. 1/4
October 30, 2026 at 8:47 AM
#ESETresearch APT Activity Report (Apr–Sep 2026): Russia-aligned APTs continued targeting 🇺🇦 Ukrainian defense, government, and infrastructure entities. #Gamaredon deployed #Turla’s new VBScript reconnaissance tool #Rezzuar – confirming continued FSB-linked collaboration. 1/4
#コマンドプロンプト・BATを使いこなす 116
BAT内で高度な処理：mshta＋VBScript編
mshta vbscript:execute("VBScriptのコード")
例：
mshta vbscript:execute("MsgBox (1+1): window.close")
1+1が計算され「2」と表示される。
良いBATをコーディングするためには，
WSHの知識も必要。
BAT内で高度な処理：mshta＋VBScript編
mshta vbscript:execute("VBScriptのコード")
例：
mshta vbscript:execute("MsgBox (1+1): window.close")
1+1が計算され「2」と表示される。
良いBATをコーディングするためには，
WSHの知識も必要。
October 31, 2026 at 5:38 AM
#コマンドプロンプト・BATを使いこなす 116
BAT内で高度な処理：mshta＋VBScript編
mshta vbscript:execute("VBScriptのコード")
例：
mshta vbscript:execute("MsgBox (1+1): window.close")
1+1が計算され「2」と表示される。
良いBATをコーディングするためには，
WSHの知識も必要。
BAT内で高度な処理：mshta＋VBScript編
mshta vbscript:execute("VBScriptのコード")
例：
mshta vbscript:execute("MsgBox (1+1): window.close")
1+1が計算され「2」と表示される。
良いBATをコーディングするためには，
WSHの知識も必要。
ESET says FrostyNeighbor (UNC1151) used Chisel, UltraVNC, Cobalt Strike and a VBScript wiper via Group Policy against a Ukrainian manufacturing company tied to transportation, marking its first documented destructive attack by a Belarus-aligned actor in Europe.
ESET Reports First Documented Destructive Cyberattack by Belarus-Aligned Actor in Europe
ESET says FrostyNeighbor (UNC1151) used Chisel, UltraVNC, Cobalt Strike and a VBScript wiper via Group Policy against a Ukrainian manufacturing company tied…
cyber.hendryadrian.com
October 30, 2026 at 1:48 PM
ESET says FrostyNeighbor (UNC1151) used Chisel, UltraVNC, Cobalt Strike and a VBScript wiper via Group Policy against a Ukrainian manufacturing company tied to transportation, marking its first documented destructive attack by a Belarus-aligned actor in Europe.
NanoCore's VBScript loader hides its payload behind chr() division math and comment padding. https://intel.threadlinqs.com/threat/TL-2026-4792?utm_source=bluesky #ThreatIntel #NanoCore
October 30, 2026 at 2:43 AM
NanoCore's VBScript loader hides its payload behind chr() division math and comment padding. https://intel.threadlinqs.com/threat/TL-2026-4792?utm_source=bluesky #ThreatIntel #NanoCore
#ESETresearch APT Activity Report (Apr–Sep 2026): Russia-aligned APTs continued targeting 🇺🇦 Ukrainian defense, government, and infrastructure entities. #Gamaredon deployed #Turla’s new VBScript reconnaissance tool #Rezz…
— from @ESETresearch (https://x.com/ESETresearch/status/2116089496168992863)
— from @ESETresearch (https://x.com/ESETresearch/status/2116089496168992863)
October 30, 2026 at 8:57 AM
#ESETresearch APT Activity Report (Apr–Sep 2026): Russia-aligned APTs continued targeting 🇺🇦 Ukrainian defense, government, and infrastructure entities. #Gamaredon deployed #Turla’s new VBScript reconnaissance tool #Rezz…
— from @ESETresearch (https://x.com/ESETresearch/status/2116089496168992863)
— from @ESETresearch (https://x.com/ESETresearch/status/2116089496168992863)
This Cobalt Strike HTA hides behind stacked encoding, then pulls a VBScript stage from a bare IP. https://intel.threadlinqs.com/threat/TL-2026-4793?utm_source=bluesky #ThreatIntel #Cobalt #Obfuscated #CyberChef
October 30, 2026 at 3:09 AM
This Cobalt Strike HTA hides behind stacked encoding, then pulls a VBScript stage from a bare IP. https://intel.threadlinqs.com/threat/TL-2026-4793?utm_source=bluesky #ThreatIntel #Cobalt #Obfuscated #CyberChef
Fake notary and invoice emails in Brazil and Portugal start with a VBScript file, then use built-in Windows tools and signed apps to install remote-access trojans, WatchGuard says. IOCs inside.
threatroundup.com/news/vbscrip...
threatroundup.com/news/vbscrip...
October 28, 2026 at 6:02 PM
Fake notary and invoice emails in Brazil and Portugal start with a VBScript file, then use built-in Windows tools and signed apps to install remote-access trojans, WatchGuard says. IOCs inside.
threatroundup.com/news/vbscrip...
threatroundup.com/news/vbscrip...
some real freak shit would be putting microsoft access/vba/vbscript developer on your dating profile
October 25, 2026 at 3:50 PM
some real freak shit would be putting microsoft access/vba/vbscript developer on your dating profile
Not just one guy, but yeah, the early days be like that.
Then team after team and company after company tried it and started seeing the benefits:
1. Shorter and more maintainable than VBScript
2. Less parsing and praying than Bash
3. Increased interoperability with the object pipeline.
Then team after team and company after company tried it and started seeing the benefits:
1. Shorter and more maintainable than VBScript
2. Less parsing and praying than Bash
3. Increased interoperability with the object pipeline.
October 26, 2026 at 6:19 PM
Not just one guy, but yeah, the early days be like that.
Then team after team and company after company tried it and started seeing the benefits:
1. Shorter and more maintainable than VBScript
2. Less parsing and praying than Bash
3. Increased interoperability with the object pipeline.
Then team after team and company after company tried it and started seeing the benefits:
1. Shorter and more maintainable than VBScript
2. Less parsing and praying than Bash
3. Increased interoperability with the object pipeline.
ハッカー、PowerShellとWindowsエラー報告を悪用して感染PCにマルウェアを隠蔽
フィッシング、難読化されたVBScript、PowerShell、正規のWindowsアプリケーションを組み合わせ、感染を隠蔽するマルウェアキャンペーンが確認されました。標的はブラジルとポルトガルのユーザーです。Malwareanalysis service 調査の対象は、Overlord RAT、Lampion、そ
フィッシング、難読化されたVBScript、PowerShell、正規のWindowsアプリケーションを組み合わせ、感染を隠蔽するマルウェアキャンペーンが確認されました。標的はブラジルとポルトガルのユーザーです。Malwareanalysis service 調査の対象は、Overlord RAT、Lampion、そ
ハッカー、PowerShellとWindowsエラー報告を悪用して感染PCにマルウェアを隠蔽
フィッシング、難読化されたVBScript、PowerShell、正規のWindowsアプリケーションを組み合わせ、感染を隠蔽するマルウェアキャンペーンが確認されました。標的はブラジルとポルトガルのユーザーです。Malwareanalysis service 調査の対象は、Overlord RAT、Lampion、そ
blackhatnews.tokyo
October 26, 2026 at 7:22 AM
ハッカー、PowerShellとWindowsエラー報告を悪用して感染PCにマルウェアを隠蔽
フィッシング、難読化されたVBScript、PowerShell、正規のWindowsアプリケーションを組み合わせ、感染を隠蔽するマルウェアキャンペーンが確認されました。標的はブラジルとポルトガルのユーザーです。Malwareanalysis service 調査の対象は、Overlord RAT、Lampion、そ
フィッシング、難読化されたVBScript、PowerShell、正規のWindowsアプリケーションを組み合わせ、感染を隠蔽するマルウェアキャンペーンが確認されました。標的はブラジルとポルトガルのユーザーです。Malwareanalysis service 調査の対象は、Overlord RAT、Lampion、そ
Netresec (Erik Hjelmvik) retrohunted a WhatsApp VBScript campaign and found a .vbs pulling a dropper from Backblaze B2. The dropper deployed NSecRTS.exe, the Ping32 agent.
The same C2 server showed up in a ValleyRAT sample. Netresec says Silver Fox is possible, not confirmed.
The same C2 server showed up in a ValleyRAT sample. Netresec says Silver Fox is possible, not confirmed.
October 25, 2026 at 3:56 PM
Netresec (Erik Hjelmvik) retrohunted a WhatsApp VBScript campaign and found a .vbs pulling a dropper from Backblaze B2. The dropper deployed NSecRTS.exe, the Ping32 agent.
The same C2 server showed up in a ValleyRAT sample. Netresec says Silver Fox is possible, not confirmed.
The same C2 server showed up in a ValleyRAT sample. Netresec says Silver Fox is possible, not confirmed.
Thanks to Hare Sudhan (cyberbuff on GitHub) for the entry and Michael Haag for the merge.
Netresec write-up: www.netresec.com/?page=Blog&...
Netresec write-up: www.netresec.com/?page=Blog&...
Ping32 RMM and ValleyRAT
Fareed Radzi recently blogged about a malware campaign observed earlier in June by Kasperskys GReAT team. The malware campaign embedded malicious code in VBScripts, which were distributed through WhatsApp DMs. The VBScript then dropped the legitimate Remote Monitoring and Management (RMM) tool Manag[...]
www.netresec.com
October 25, 2026 at 3:56 PM
Thanks to Hare Sudhan (cyberbuff on GitHub) for the entry and Michael Haag for the merge.
Netresec write-up: www.netresec.com/?page=Blog&...
Netresec write-up: www.netresec.com/?page=Blog&...
How VBScript Malware Hides behind Trusted Tools to Evade Detection https://packetstorm.news/news/view/46276 #news
October 23, 2026 at 8:21 PM
How VBScript Malware Hides behind Trusted Tools to Evade Detection https://packetstorm.news/news/view/46276 #news
VBScriptでWindowsだいたいなんでも制御できちゃの、革命的な仕組みだっちゃと思うし、それをApplicationにも搭載してさらにドキュメントにスクリプトを埋め込めるようにして世界がぶっ壊れましちゃね。
October 23, 2026 at 10:17 AM
VBScriptでWindowsだいたいなんでも制御できちゃの、革命的な仕組みだっちゃと思うし、それをApplicationにも搭載してさらにドキュメントにスクリプトを埋め込めるようにして世界がぶっ壊れましちゃね。
Trusted tools can hide malicious threats.
In the latest Red Cell Chronicles, WatchGuard Red Cell's Euler Neto examines three VBScript malware campaigns and how attackers evade detection.
Learn what defenders should watch for: wgrd.tech/4zHO4Hq
#Cybersecurity #Malware
In the latest Red Cell Chronicles, WatchGuard Red Cell's Euler Neto examines three VBScript malware campaigns and how attackers evade detection.
Learn what defenders should watch for: wgrd.tech/4zHO4Hq
#Cybersecurity #Malware
How VBScript Malware Hides Behind Trusted Tools to Evade Detection | WatchGuard Technologies
TL;DR
wgrd.tech
October 22, 2026 at 10:03 PM
Trusted tools can hide malicious threats.
In the latest Red Cell Chronicles, WatchGuard Red Cell's Euler Neto examines three VBScript malware campaigns and how attackers evade detection.
Learn what defenders should watch for: wgrd.tech/4zHO4Hq
#Cybersecurity #Malware
In the latest Red Cell Chronicles, WatchGuard Red Cell's Euler Neto examines three VBScript malware campaigns and how attackers evade detection.
Learn what defenders should watch for: wgrd.tech/4zHO4Hq
#Cybersecurity #Malware
ClickFix keeps evolving. Microsoft Threat Intelligence found compromised sites quietly caching a VBScript in the browser, disguised as a PNG.
The fake Cloudflare check has you paste a Run command that does not download anything. It just finds the cached file by size and runs it.
The fake Cloudflare check has you paste a Run command that does not download anything. It just finds the cached file by size and runs it.
October 23, 2026 at 6:57 PM
ClickFix keeps evolving. Microsoft Threat Intelligence found compromised sites quietly caching a VBScript in the browser, disguised as a PNG.
The fake Cloudflare check has you paste a Run command that does not download anything. It just finds the cached file by size and runs it.
The fake Cloudflare check has you paste a Run command that does not download anything. It just finds the cached file by size and runs it.