Obfuscation

PowerShell Obfuscation

Source: https://github.com/danielbohannon/Invoke-Obfuscation

# Load the Module
Import-Module ./Invoke-Obfuscation.psd1

# Run the Tool
Invoke-Obfuscation

# Set the Script Location
set ScriptPath C:\Users\Hassan\Mimikatz.ps1

# Start the Obfs
token

# Remove Comments
comment
1
back

# Change Strings
string
1
2
back

# Change Variables
variable
1
back

# Change Arguments
argument
3
back

# Change Members
member
3
back

# Change Commands
command
3
back

# Save the File
out C:\Users\Hassan\dump.ps1

# Exit the Program
exit

# Different shapes of strings in powershell (all the same meaning)
echo "Hello World"
echo ('H'+'ello '+'Wo'+'rld')
echo ("{0}{3}{2}{1}" -f'Hel','d','orl','lo W')

# Different shapes of variables in powershell (all the same meaning)
$param = 5
${p`AR`Am} = 5

# Different shapes of assigning members to object in powershell
$param.category = "Test"
$param.CaTEGoRY = "Test"
$param."CAT`Eg`Ory" = "Test"

# Different shapes of arguments in powershell (all the same meaning)
Add-Member -Name blabla
Add-Member -Name b`LAb`la
Add-Member -Name ('blabl'+'a')
Add-Member -Name ("{2}{1}{0}"-f'a','bl','bla')