PyFuscation : Obfuscate Powershell Scripts By Replacing Function Names, Variables & Parameters

PyFuscation is a obfuscate powershell scripts by replacing Function names, Variables and Parameters. It Requires python3.

Usage

PyFuscation.py [-h] [-f] [-v] [-p] [–ps SCRIPT]

Also Read – Barq: The AWS Cloud Post Exploitation Framework

Optional arguments:

-h, –help show this help message and exit
-f Obfuscate functions
○ Do this First … Its probably the most likely to work well
-v Obfuscate variables
○ If your going to obfuscate variables do the parameters too.
-p Obfuscate parameters
○ If your going to obfuscate parameters do the variables too.

Required arguments: –ps <SCRIPT> Obfuscate PowerShell script

python3 PyFuscation.py -fvp –ps ./Scripts/Invoke-Mimikatz.ps1