# danielbohannon/invoke-obfuscation

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/danielbohannon-invoke-obfuscation).**

4,201 stars · 812 forks · PowerShell · apache-2.0

## Links

- GitHub: https://github.com/danielbohannon/Invoke-Obfuscation
- awesome-repositories: https://awesome-repositories.com/repository/danielbohannon-invoke-obfuscation.md

## Description

Invoke-Obfuscation is a PowerShell-based tool for transforming PowerShell commands and scripts into obfuscated forms to evade signature-based detection. It applies token-level, string-level, and encoding techniques to hide execution logic, and supports compressing commands before obfuscation to reduce size while concealing the original code.

The tool distinguishes itself through layered obfuscation that can be applied and reversed one layer at a time, allowing users to restore a script's original form. It offers multiple encoding schemes including ASCII, hex, octal, binary, and XOR, and can hide command-line arguments from powershell.exe by pushing them to parent or grandparent processes. Invoke-Obfuscation also generates obfuscated launcher commands for execution on target systems and simulates obfuscation across PowerShell versions 2.0 through 5.0 to test security tool detection capabilities.

The tool provides both an interactive interface for navigating obfuscation layers and a command-line mode for direct obfuscation operations. It supports launching obfuscated scripts through various methods including CLIP, WMIC, and stdin with randomized execution flags, and includes regex-based and auto-detection menu navigation to avoid manual backtracking.

## Tags

### Security & Cryptography

- [PowerShell Obfuscation Tools](https://awesome-repositories.com/f/security-cryptography/powershell-obfuscation-tools.md) — Transforms PowerShell commands and scripts into obfuscated forms to evade signature-based detection. ([source](https://github.com/danielbohannon/Invoke-Obfuscation#readme))
- [Language-Specific Command Obfuscation](https://awesome-repositories.com/f/security-cryptography/payload-obfuscation/executable-obfuscators/language-specific-command-obfuscation.md) — Runs obfuscation operations directly from the command line using compact syntax without interactive mode. ([source](https://github.com/danielbohannon/Invoke-Obfuscation#readme))

### Software Engineering & Architecture

- [Obfuscation Encodings](https://awesome-repositories.com/f/software-engineering-architecture/string-validation-and-normalization/string-encodings/obfuscation-encodings.md) — Encodes PowerShell scripts using ASCII, hex, octal, binary, and XOR to bypass security filters. ([source](https://github.com/danielbohannon/Invoke-Obfuscation#readme))

### Data & Databases

- [Layer Reversal Tools](https://awesome-repositories.com/f/data-databases/data-transformation-functions/recursive-processors/obfuscation-layers/layer-reversal-tools.md) — Allows reversing obfuscation one layer at a time to restore a script's original form. ([source](https://github.com/danielbohannon/Invoke-Obfuscation#readme))

### Development Tools & Productivity

- [Process Argument Hiding](https://awesome-repositories.com/f/development-tools-productivity/command-line-argument-handlers/argument-obfuscation/process-argument-hiding.md) — Hides command-line arguments by pushing them to parent or grandparent processes to evade logging. ([source](https://github.com/danielbohannon/Invoke-Obfuscation#readme))
- [Obfuscated Script Launchers](https://awesome-repositories.com/f/development-tools-productivity/shell-script-execution-engines/custom-run-scripts/scheduled-script-executions/obfuscated-script-launchers.md) — Provides multiple methods to launch obfuscated scripts with randomized flags for evasion. ([source](https://github.com/danielbohannon/Invoke-Obfuscation#readme))

### Operating Systems & Systems Programming

- [Compressed Command Obfuscation](https://awesome-repositories.com/f/operating-systems-systems-programming/terminal-command-line-environments/shells-scripting/powershell/script-obfuscation/compressed-command-obfuscation.md) — Compresses PowerShell commands before obfuscation to reduce size and conceal logic. ([source](https://github.com/danielbohannon/Invoke-Obfuscation#readme))
- [Obfuscated Launch Command Generators](https://awesome-repositories.com/f/operating-systems-systems-programming/terminal-command-line-environments/shells-scripting/powershell/script-obfuscation/obfuscated-launch-command-generators.md) — Generates obfuscated PowerShell launcher commands for executing hidden scripts on target systems. ([source](https://github.com/danielbohannon/Invoke-Obfuscation#readme))
- [Whitespace and Special Character Insertions](https://awesome-repositories.com/f/operating-systems-systems-programming/terminal-command-line-environments/shells-scripting/powershell/script-obfuscation/whitespace-and-special-character-insertions.md) — Obfuscates scripts by inserting whitespace or special characters to alter appearance without changing functionality. ([source](https://github.com/danielbohannon/Invoke-Obfuscation#readme))

### Part of an Awesome List

- [Security And Privacy](https://awesome-repositories.com/f/awesome-lists/security/security-and-privacy.md) — Obfuscates code to evade detection.