Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/uixss/offshell

Offensive Powershell obfuscator
https://github.com/uixss/offshell

obfuscation offensive powershell red-team

Last synced: 11 days ago
JSON representation

Offensive Powershell obfuscator

Awesome Lists containing this project

README

        

# OFFSHELL 🔥

**Offensive tool to obfuscate PowerShell payloads**

---

## Features 🌟

- ✅ **All-in-one portable script**
- 🔒 **Undetectable against AVs**
- 🛠 **Malleable obfuscation configuration via CLI parameters**
- 🔀 **Obfuscate variables**
- 🔧 **Obfuscate functions**
- ⚙️ **Obfuscate cmdlets**
- 🧩 **Obfuscate namespace classes**
- 📝 **Obfuscate comments**
- 🌐 **Obfuscate IP addresses**

---

## CLI Parameters 🖥

| Argument | Description |
|---------------------------|-----------------------------------------|
| `-f`, `--file` | Source PowerShell script to obfuscate |
| `-o`, `--output` | Store obfuscated script in a file |
| `-a`, `--all` | Use all obfuscation techniques |
| `-s`, `--safe` | Enable safe obfuscation mode |
| `--vars` | Enable variable obfuscation |
| `--funcs` | Enable functions obfuscation |
| `--cmdlets` | Enable cmdlets obfuscation |
| `--namespaces` | Enable namespace classes obfuscation |
| `--backticks` | Enable backticks obfuscation |
| `--case` | Enable uppercase/lowercase obfuscation |
| `--pipes` | Enable pipes and pipelines obfuscation |
| `--comments` | Remove and obfuscate comments |
| `--indentation` | Add random indentation |
| `--ips` | Obfuscate IP addresses to hex format |
| `-v`, `--verbose` | Enable verbose output |

---

## References 📚

- 🌐 [amsi.fail](https://amsi.fail)
- 🌐 [AMSITrigger](https://github.com/RythmStick/AMSITrigger)
- 🌐 [Invoke-Obfuscation](https://github.com/danielbohannon/Invoke-Obfuscation)
- 🌐 [nishang](https://github.com/samratashok/nishang)
- 🌐 [BetterXencrypt](https://github.com/GetRektBoy724/BetterXencrypt)
- 🌐 [Invoke-PSObfuscation](https://github.com/gh0x0st/Invoke-PSObfuscation)
- 🌐 [Layer-0 Obfuscation](https://github.com/gh0x0st/Invoke-PSObfuscation/blob/main/layer-0-obfuscation.md)
- 🌐 [Chameleon](https://github.com/klezVirus/chameleon)
- 🌐 [PyFuscation](https://github.com/CBHue/PyFuscation)

---

🚀 **Use OFFSHELL to stay ahead and stay safe!**