-
RD-Bypass-AV
This is a Rubber Ducky script that downloads an executable file externally while bypassing Windows antivirus and added to the exclusions list.
-
SurveyJS
Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.
I don't know much about it other than what I picked up in a Levelonetechs video, but look into the beef project since you do a little website development and the vector will be in the browser anyway.
Best way imo is to use a rubber ducky and run a keylogger on this rubber ducky script https://github.com/Quessts/RD-Bypass-AV.