Obfuscation
PowerShell Obfuscation
Source: https://github.com/danielbohannon/Invoke-Obfuscation
# Load the Module
Import-Module ./Invoke-Obfuscation.psd1
# Run the Tool
Invoke-Obfuscation
# Set the Script Location
set ScriptPath C:\Users\Hassan\Mimikatz.ps1
# Start the Obfs
token
# Remove Comments
comment
1
back
# Change Strings
string
1
2
back
# Change Variables
variable
1
back
# Change Arguments
argument
3
back
# Change Members
member
3
back
# Change Commands
command
3
back
# Save the File
out C:\Users\Hassan\dump.ps1
# Exit the Program
exit
# Different shapes of strings in powershell (all the same meaning)
echo "Hello World"
echo ('H'+'ello '+'Wo'+'rld')
echo ("{0}{3}{2}{1}" -f'Hel','d','orl','lo W')
# Different shapes of variables in powershell (all the same meaning)
$param = 5
${p`AR`Am} = 5
# Different shapes of assigning members to object in powershell
$param.category = "Test"
$param.CaTEGoRY = "Test"
$param."CAT`Eg`Ory" = "Test"
# Different shapes of arguments in powershell (all the same meaning)
Add-Member -Name blabla
Add-Member -Name b`LAb`la
Add-Member -Name ('blabl'+'a')
Add-Member -Name ("{2}{1}{0}"-f'a','bl','bla')
Last updated