Skip to content

README.md

Latest commit

 

History

History
63 lines (45 loc) · 2.41 KB

README.md

File metadata and controls

63 lines (45 loc) · 2.41 KB
Raw

AES-Encoder 🔒

PowerShell Crypter

Make your own crypter

Original Features

  • Bypasses All modern AVs in use on VirusTotal
  • Compresses and encrypts powershell scripts
  • Has a minimal and often even negative (thanks to the compression) overhead
  • Randomizes variable names to further obfuscates the decrypter stub
  • Randomizes encryption, compression and even the order that the statements appear in the code for maximum entropy!
  • Super easy to modify to create your own crypter variant
  • Supports recursive layering (crypter crypting the crypted output)
  • Supports Import-Module as well as standard running as long as the input script also supported it
  • GPLv3 - Free and Open-Source!
  • All features in a single file so you can take it with you anywhere!

Added Features

  • AMSI Bypass
  • Math Obfuscation

Usage

Import-Module ./AES-Encoder.ps1
InvokeAESEncoder -InFile invoke-mimikatz.ps1 -OutFile aesmimi.ps1

or

powershell .\AES-Encoder.ps1 -InFile invoke-mimikatz.ps1 -OutFile aesmimi.ps1

It also supports recursive layering via the -Iterations flag.

Invoke-AES-Encoder -InFile invoke-mimikatz.ps1 -OutFile aesmimi.ps1 -Iterations 100

Warning though, the files can get big and generating the output file can take a very long time depending on the scripts and number of iterations requested.

DISCLAIMER !!!

This tool is for educational use only, the author will not be held responsible for any misuse of this tool.

Credits