Invoke-PSObfuscation
JackKnife
Invoke-PSObfuscation | JackKnife | |
---|---|---|
3 | 2 | |
226 | 9 | |
- | - | |
0.0 | 5.1 | |
over 1 year ago | 6 months ago | |
PowerShell | PowerShell | |
GNU General Public License v3.0 only | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Invoke-PSObfuscation
-
Kali Linux Meterpreter AV Evasion.
XOR obfuscation is probably one of the most reknowned methods or simple concatenation techniques like this tool does also works wonders: https://github.com/gh0x0st/Invoke-PSObfuscation/blob/main/layer-0-obfuscation.md
-
Well, it happened. I got let go today.
Now, I'm not saying that the OP was trying to put their hand in the till, but at the very least I don't think that they are being completely transparent in the original post: if you work in a BANKING environment, then you don't run downloaded scripts out of curiosity, especially ones that are trying to obfuscate and bypass security like the one that the OP has said he was interested in (https://github.com/gh0x0st/Invoke-PSObfuscation), and if you are doing that, you shouldn't be working in a this environment; it shows a terminal lack of insight and awareness. Even if you don't know about a policy, you'd hope for a shred of common sense.
JackKnife
What are some alternatives?
SkyArk - SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
AdminToolbox - Repository for the AdminToolbox PowerShell Modules
RedTeaming-Tactics-and-Techniques - Red Teaming Tactics and Techniques
Public-Scripts - Various Scripts and Tools for Microsoft Technologies Professionals
PowerShell-Red-Team - Collection of PowerShell functions a Red Teamer may use in an engagement
sysmon-modular - A repository of sysmon configuration modules
AIPAS - AIPAS (Azure IP Address Solution) is built in Azure to let (Network) Administrators keep up-to-date records of IP assignments and available addresses used to configure Azure Virtual Networks (VNets).
MrKaplan - MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution.
RanSim - Ransomware simulation script written in PowerShell. Useful for testing your defenses and backups against real ransomware-like activity in a controlled setting.
Chimera - Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.