Skip to content
This repository has been archived by the owner on Feb 22, 2022. It is now read-only.
/ powerob Public archive
forked from cwolff411/powerob

An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity.

Notifications You must be signed in to change notification settings

swzhouu/powerob

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

32 Commits
 
 
 
 
 
 

Repository files navigation

fenrir-desktop-bg

Powerob

An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity.

This only obfuscates functions and removes found in PowerShell scripts. Roadmap includes bfuscating variables. Pull requests and collaborative welcomed.

About

This was built out of the need to bypass endpoint security on a recent engagement. During priv esc attempts I could not download PowerUp.ps1 until it was obfuscated.

This is technically v2 and has been updated to remove comments.

Installation

git clone https://github.com/cwolff411/powerob

Usage

python3 powerob.py obfuscate originalfile.ps1 obfuscatedfile.ps1

Takes an INPUTFILE obfuscates it and dumps the obfuscated version into OUTPUTFILE.

PowerOb


python3 powerob.py list

Lists all of the currently obfuscated files along with their commands and associated obfuscated commands.

PowerOb


python3 powerob.py getcommand COMMAND_NAME

For reference on the fly for when you forget. Takes the original command name and displays the obfuscated command name to be used in Powershell.

PowerOb


python3 powerob.py cleardb

Maintenance function to clear the db of past obfuscated files and functions.

License

MIT License

About

An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 100.0%