GithubHelp home page GithubHelp logo

klezvirus / chameleon Goto Github PK

View Code? Open in Web Editor NEW
474.0 474.0 89.0 102 KB

PowerShell Script Obfuscator

License: MIT License

Python 100.00%
amsi-bypass amsi-evasion bypass-antivirus obfuscation powershell

chameleon's Issues

Functions not obfuscating

Hi!
I am having trouble finding out as to why the functions are not obfuscating in my small script:

test1.ps1---------------
function runmefor-fun {
$variablenopurpose = "no purpose"
Write-Host $variablenopurpose
}
#commment
runmefor-fun
#hi


My command line is:
chameleon.py -l 1 -o OUTPUT.ps1 -v -c -f Test1.ps1

and my output file is this: --------------------------------

function runmefor-fun {
Write-Host "Hey!"
$pretendreallylongobfuscationishortenedfordisplay = "no purpose"
Write-Host $pretendreallylongobfuscationishortenedfordisplay

}
#commentthatislong
runmefor-fun
#commentthatislong

any ideas as to why this will not work?

Error using --base64 Option

Hey,
When I use --base64 to obfuscate a script the resulting script can not be executed.

The error is:

Get-Command : Die Benennung "Get-Command" wurde nicht als Name eines Cmdlet, einer
Funktion, einer Skriptdatei oder eines ausführbaren Programms erkannt. Überprüfen Sie die
Schreibweise des Namens, oder ob der Pfad korrekt ist (sofern enthalten), und wiederholen
Sie den Vorgang.
In Zeile:1 Zeichen:1

As you can see the highlighted section contains some invalid characters. Any reasons why this happens? Or am I doing something wrong?

Adding random lettering in front of a function declaration

My simple statement is: python chameleon.py -o OUTPUT.ps1 -v Test1.ps1 .
The only thing in Test1.ps1 is :
-----------------------------------------------start of file
function runmeforfun {
Write-Host "Hey!"
$variablenopurpose = "no purpose"
Write-Host $variablenopurpose
}
#single line comment
runmeforfun

-------------------------------------------------end of file

Unfortunately when I run the statement above I get this in the OUTPUT.ps1 file:

-------------------------------------------------start of file
function runmeforfun {
Write-Host "Hey!"
$obfuscatedrandomletteringnothereforpostingpurposes= "no purpose"
Write-Host $obfuscatedrandomletteringnothereforpostingpurposes
}

runmeforfun
-------------------------------------------------end of file

Notice the comment is completely gone and there is now random lettering in front of the function, making the ps1 file now with errors and will not run.

Upon further investigation it looks like the "zeroing out comments" section seems to be the problem

Let me know if I have done something wrong or if this is an error with the python code!! Thank you!

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.