|
| 1 | +<a href="https://github.com/chainski/AES-Encoder"><img src="https://img.shields.io/badge/OPEN--SOURCE-YES-green"></a> |
| 2 | +<a href="https://github.com/chainski/AES-Encoder"><img src="https://img.shields.io/badge/license-GPL--3.0-orange"></a> |
| 3 | +<a href="https://github.com/chainski/AES-Encoder/releases"><img src="https://img.shields.io/github/v/release/Chainski/AES-Encoder"></a> |
| 4 | +<a href="https://github.com/Chainski/AES-Encoder/blob/main/AES-Encoder.ps1"><img src="https://img.shields.io/badge/power-shell-blue"></a> |
| 5 | + |
1 | 6 | # AES-Encoder |
2 | | -A PowerShell script anti-virus evasion tool |
| 7 | + |
| 8 | + |
| 9 | +# PowerShell Crypter v 1.0 |
| 10 | + |
| 11 | +## Authors |
| 12 | + |
| 13 | +[Xentropy](http://twitter.com/SamuelAnttila) |
| 14 | +[SecForce](http://twitter.com/SECFORCE_LTD) |
| 15 | + |
| 16 | +[Make your own cryter](https://netsec.expert/2020/02/06/write-a-crypter-in-any-language.html) |
| 17 | + |
| 18 | +# Features |
| 19 | + |
| 20 | +## AES-Encoder |
| 21 | + |
| 22 | +- Bypasses AMSI and all modern AVs in use on VirusTotal (as of writing) |
| 23 | +- Compresses and encrypts powershell scripts |
| 24 | +- Has a minimal and often even negative (thanks to the compression) overhead |
| 25 | +- Randomizes variable names to further obfuscate the decrypter stub |
| 26 | +- Randomizes encryption, Obfuscate with Unicode and HTML Encoding then Compress for maximum entropy! |
| 27 | +- Super easy to modify to create your own crypter variant |
| 28 | +- Supports recursive layering (crypter crypting the crypted output) |
| 29 | +- Supports Import-Module as well as standard running as long as the input script also supported it |
| 30 | +- GPLv3 -- Free and open-source! |
| 31 | +- All features in a single file so you can take it with you anywhere! |
| 32 | + |
| 33 | + |
| 34 | +## Usage |
| 35 | + |
| 36 | +``` |
| 37 | +Import-Module ./AES-Encoder.ps1 |
| 38 | +Invoke-AES-Encoder -InFile invoke-mimikatz.ps1 -OutFile aesmimi.ps1 |
| 39 | +``` |
| 40 | + |
| 41 | +You will now have an encrypted aesmimi.ps1 file in your current working directory. You can use it in the same way as you would the original script, so in this case: |
| 42 | + |
| 43 | +``` |
| 44 | +Import-Module ./AES-Encoder.ps1 |
| 45 | +Invoke-Mimikatz |
| 46 | +``` |
| 47 | +It also supports recursive layering via the -Iterations flag. |
| 48 | + |
| 49 | +``` |
| 50 | +Invoke-AES-Encoder -InFile invoke-mimikatz.ps1 -OutFile aesmimi.ps1 -Iterations 100 |
| 51 | +``` |
| 52 | +**Warning though, the files can get big and generating the output file can take a very long time depending on the scripts and number of iterations requested.** |
| 53 | + |
| 54 | + |
| 55 | +### DISCLAIMER !!! |
| 56 | + |
| 57 | +**This tool is for educational use only, the author will not be held responsible for any misuse of this tool.** |
| 58 | + |
| 59 | + |
| 60 | + |
| 61 | +### Support and Contributions |
| 62 | +My software is open source and free for public use. |
| 63 | +If you found any of these repos useful and would like to support this project financially, |
| 64 | +feel free to donate to my bitcoin address. |
| 65 | + |
| 66 | +### 16T1fUehoGR4E2sj98u9e9mKuQ7uSLvxRJ |
| 67 | + |
0 commit comments