Skip to content

cwolff411/powerob

master
Switch branches/tags
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 
 
 

fenrir-desktop-bg

Powerob

An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity.

This only obfuscates functions and removes found in PowerShell scripts. Roadmap includes bfuscating variables. Pull requests and collaborative welcomed.

About

This was built out of the need to bypass endpoint security on a recent engagement. During priv esc attempts I could not download PowerUp.ps1 until it was obfuscated.

This is technically v2 and has been updated to remove comments.

Installation

git clone https://github.com/cwolff411/powerob

Usage

python3 powerob.py obfuscate originalfile.ps1 obfuscatedfile.ps1

Takes an INPUTFILE obfuscates it and dumps the obfuscated version into OUTPUTFILE.

PowerOb


python3 powerob.py list

Lists all of the currently obfuscated files along with their commands and associated obfuscated commands.

PowerOb


python3 powerob.py getcommand COMMAND_NAME

For reference on the fly for when you forget. Takes the original command name and displays the obfuscated command name to be used in Powershell.

PowerOb


python3 powerob.py cleardb

Maintenance function to clear the db of past obfuscated files and functions.

License

MIT License

About

An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages