git clone https://github.com/Mister-Joe/NetFuscator -> open solution in Visual Studio -> build
Caution
This obfuscator is meant to be used in conjunction with a loader like PositiveIntent or ek47. Your mileage may vary running the obfuscated assemblies "raw."
.\NetFuscator.exe -f .\Rubeus.exe
...snip...
Obfuscating: Rubeus.Commands.RenewCommand
Obfuscating: Rubeus.Commands.S4u
Obfuscating: Rubeus.Commands.Golden
Obfuscating: Rubeus.Commands.Silver
Obfuscating: Rubeus.Commands.Tgssub
Obfuscating: Rubeus.Commands.Tgtdeleg
Obfuscating: Rubeus.Commands.Triage
Obfuscating: Rubeus.Asn1.Asn1Extensions
Obfuscated: .\Rubeus.exe -> OEBeELAy.exe
Done.
- Assembly metadata like GuidAttribute, AssemblyDescriptionAttribute, etc. is either removed or obfuscated.
- Namespaces, classes, methods, strings, delegates, structs, etc. are obfuscated.
- Text files (e.g. books or dictionary) can optionally be embedded in the assembly to keep Shannon entropy between 4.50-5.50.