{"id":13843604,"url":"https://github.com/cwolff411/powerob","last_synced_at":"2025-07-11T19:32:28.970Z","repository":{"id":56474552,"uuid":"234427273","full_name":"cwolff411/powerob","owner":"cwolff411","description":"An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity.","archived":false,"fork":false,"pushed_at":"2021-10-28T18:22:36.000Z","size":834,"stargazers_count":142,"open_issues_count":0,"forks_count":43,"subscribers_count":12,"default_branch":"master","last_synced_at":"2024-08-05T17:38:20.249Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cwolff411.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-01-16T22:52:57.000Z","updated_at":"2024-08-02T10:06:25.000Z","dependencies_parsed_at":"2022-08-15T19:30:40.829Z","dependency_job_id":null,"html_url":"https://github.com/cwolff411/powerob","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cwolff411%2Fpowerob","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cwolff411%2Fpowerob/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cwolff411%2Fpowerob/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cwolff411%2Fpowerob/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cwolff411","download_url":"https://codeload.github.com/cwolff411/powerob/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225755042,"owners_count":17519192,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T17:02:19.760Z","updated_at":"2024-11-21T15:31:11.806Z","avatar_url":"https://github.com/cwolff411.png","language":"Python","funding_links":[],"categories":["Python (1887)","Python"],"sub_categories":[],"readme":"![fenrir-desktop-bg](https://user-images.githubusercontent.com/8293038/133816238-7152221b-c37d-46ca-831d-ff636178f44f.png)\n\n# Powerob\nAn on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity.\n\nThis only obfuscates functions and removes found in PowerShell scripts. Roadmap includes bfuscating variables. Pull requests and collaborative welcomed.\n\n### About\nThis was built out of the need to bypass endpoint security on a recent engagement. During priv esc attempts I could not download [PowerUp.ps1](https://github.com/PowerShellMafia/PowerSploit/blob/master/Privesc/PowerUp.ps1) until it was obfuscated.\n\nThis is technically v2 and has been updated to remove comments.\n\n### Installation\n`git clone https://github.com/cwolff411/powerob`\n\n### Usage\n`python3 powerob.py obfuscate originalfile.ps1 obfuscatedfile.ps1`\n\nTakes an INPUTFILE obfuscates it and dumps the obfuscated version into OUTPUTFILE.\n\n![PowerOb](https://user-images.githubusercontent.com/8293038/81839384-7059b300-9515-11ea-912a-c9432a5e0287.png)\n\n\n* * *\n`python3 powerob.py list`\n\nLists all of the currently obfuscated files along with their commands and associated obfuscated commands.\n\n![PowerOb](https://user-images.githubusercontent.com/8293038/81839399-751e6700-9515-11ea-86c7-d9374221f483.png)\n\n* * *\n`python3 powerob.py getcommand COMMAND_NAME`\n\nFor reference on the fly for when you forget. Takes the original command name and displays the obfuscated command name to be used in Powershell.\n\n![PowerOb](https://user-images.githubusercontent.com/8293038/81839407-78195780-9515-11ea-8b0e-58d7bd44b783.png)\n\n* * *\n`python3 powerob.py cleardb`\n\nMaintenance function to clear the db of past obfuscated files and functions.\n\n\n### License\n[MIT License](https://opensource.org/licenses/MIT)","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcwolff411%2Fpowerob","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcwolff411%2Fpowerob","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcwolff411%2Fpowerob/lists"}