ObPS1 is a Powershell obfuscation script that aims to help obfuscate powershell. It is currently still being developed but has some very useful features.
- Var obfuscation - Changes all var names to 32 character vars
- Function obfuscation - Pretty much the same as above but it'll do it with function names
- Command obfuscation - Currently replaces functions a get-command obfuscation. This will change their output to something like this &(Get-Command Wr????O?tpu?*) (Write-Output)
- String to byte obfuscation - Will convert strings to byte/hex so instead of text it'll look like this: $(char)$(char)$(char)$(char)$(char)$(char)
- Junk adder - This is currently static but I hope to work to make it a dynamic junk code generator in the future, currently you can adjust how much junk code it adds to help prevent readability
- Junk Function adder - Generates fake functions with Junk inside of them to appear more real.
- Minifier - This will minify the script affecting it's readability. (Currently pretty broken)
- GZip Compression - This will take the whole script (including if you have already obfuscated it) and GZIP compress it into a base64 and then export it as a launcher of sorts with obfuscation as well.
This is pretty non-invasive so it should work with most scripts, currently it doesn't accept prams but I plan on making it more standardised in the future.
Known Issues:
- Junk code adders don't account for multiline strings