awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
danielbohannon avatar

danielbohannon/Invoke-Obfuscation

0
View on GitHub↗
4,201 stars·812 forks·PowerShell·apache-2.0·14 views

Invoke Obfuscation

Invoke-Obfuscation is a PowerShell-based tool for transforming PowerShell commands and scripts into obfuscated forms to evade signature-based detection. It applies token-level, string-level, and encoding techniques to hide execution logic, and supports compressing commands before obfuscation to reduce size while concealing the original code.

The tool distinguishes itself through layered obfuscation that can be applied and reversed one layer at a time, allowing users to restore a script's original form. It offers multiple encoding schemes including ASCII, hex, octal, binary, and XOR, and can hide command-line arguments from powershell.exe by pushing them to parent or grandparent processes. Invoke-Obfuscation also generates obfuscated launcher commands for execution on target systems and simulates obfuscation across PowerShell versions 2.0 through 5.0 to test security tool detection capabilities.

The tool provides both an interactive interface for navigating obfuscation layers and a command-line mode for direct obfuscation operations. It supports launching obfuscated scripts through various methods including CLIP, WMIC, and stdin with randomized execution flags, and includes regex-based and auto-detection menu navigation to avoid manual backtracking.

Features

  • PowerShell Obfuscation Tools - Transforms PowerShell commands and scripts into obfuscated forms to evade signature-based detection.
  • Language-Specific Command Obfuscation - Runs obfuscation operations directly from the command line using compact syntax without interactive mode.
  • Obfuscation Encodings - Encodes PowerShell scripts using ASCII, hex, octal, binary, and XOR to bypass security filters.
  • Layer Reversal Tools - Allows reversing obfuscation one layer at a time to restore a script's original form.
  • Process Argument Hiding - Hides command-line arguments by pushing them to parent or grandparent processes to evade logging.
  • Obfuscated Script Launchers - Provides multiple methods to launch obfuscated scripts with randomized flags for evasion.
  • Compressed Command Obfuscation - Compresses PowerShell commands before obfuscation to reduce size and conceal logic.
  • Obfuscated Launch Command Generators - Generates obfuscated PowerShell launcher commands for executing hidden scripts on target systems.
  • Whitespace and Special Character Insertions - Obfuscates scripts by inserting whitespace or special characters to alter appearance without changing functionality.
  • Obfuscation - Obfuscator for PowerShell.
  • Security And Privacy - Obfuscates code to evade detection.

Star history

Star history chart for danielbohannon/invoke-obfuscationStar history chart for danielbohannon/invoke-obfuscation

How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Open-source alternatives to Invoke Obfuscation

Similar open-source projects, ranked by how many features they share with Invoke Obfuscation.
  • 0xdea/haruspex0xdea avatar

    0xdea/haruspex

    126View on GitHub↗

    Vulnerability research assistant that extracts pseudocode from the IDA Hex-Rays decompiler.

    Rustida-pluginida-proidalib
    View on GitHub↗126
  • 0xdea/oneiromancer0xdea avatar

    0xdea/oneiromancer

    136View on GitHub↗

    Reverse engineering assistant that uses a locally running LLM to aid with pseudocode analysis.

    Rustaidapalollamapseudocode
    View on GitHub↗136
  • 0xdea/rhabdomancer0xdea avatar

    0xdea/rhabdomancer

    117View on GitHub↗

    Vulnerability research assistant that locates calls to potentially insecure API functions in a binary file.

    Rustida-pluginida-proidalib
    View on GitHub↗117
  • 0xdea/augur0xdea avatar

    0xdea/augur

    112View on GitHub↗

    Reverse engineering assistant that extracts strings and related pseudocode from a binary file.

    Rustida-pluginida-proidalib
    View on GitHub↗112
See all 30 alternatives to Invoke Obfuscation→

Frequently asked questions

What does danielbohannon/invoke-obfuscation do?

Invoke-Obfuscation is a PowerShell-based tool for transforming PowerShell commands and scripts into obfuscated forms to evade signature-based detection. It applies token-level, string-level, and encoding techniques to hide execution logic, and supports compressing commands before obfuscation to reduce size while concealing the original code.

What are the main features of danielbohannon/invoke-obfuscation?

The main features of danielbohannon/invoke-obfuscation are: PowerShell Obfuscation Tools, Language-Specific Command Obfuscation, Obfuscation Encodings, Layer Reversal Tools, Process Argument Hiding, Obfuscated Script Launchers, Compressed Command Obfuscation, Obfuscated Launch Command Generators.

What are some open-source alternatives to danielbohannon/invoke-obfuscation?

Open-source alternatives to danielbohannon/invoke-obfuscation include: 0xdea/haruspex — Vulnerability research assistant that extracts pseudocode from the IDA Hex-Rays decompiler. 0xdea/oneiromancer — Reverse engineering assistant that uses a locally running LLM to aid with pseudocode analysis. 0xdea/rhabdomancer — Vulnerability research assistant that locates calls to potentially insecure API functions in a binary file. 2bllw8/anemo. 2dust/v2rayn — v2rayN is a cross-platform graphical management suite designed to centralize the configuration and execution of… 0xdea/augur — Reverse engineering assistant that extracts strings and related pseudocode from a binary file.