PyFuscation is a obfuscate powershell scripts by replacing Function names, Variables and Parameters. It Requires python3.
Usage
PyFuscation.py [-h] [-f] [-v] [-p] [–ps SCRIPT]
Also Read – Barq: The AWS Cloud Post Exploitation Framework
Optional arguments:
-h, –help show this help message and exit
-f Obfuscate functions
○ Do this First … Its probably the most likely to work well
-v Obfuscate variables
○ If your going to obfuscate variables do the parameters too.
-p Obfuscate parameters
○ If your going to obfuscate parameters do the variables too.
Required arguments: –ps <SCRIPT> Obfuscate PowerShell script
python3 PyFuscation.py -fvp –ps ./Scripts/Invoke-Mimikatz.ps1
