v1.7 - Added RUNDLL and MSHTA Launchers

Added 3 new LAUNCHER options: RUNDLL RUNDLL++ MSHTA++
fengziHK · Mar 3, 2017 · 3619e16 · 3619e16
1 parent e6b01ed
commit 3619e16
Show file tree

Hide file tree

Showing 10 changed files with 156 additions and 84 deletions.
diff --git a/Invoke-Obfuscation.ps1 b/Invoke-Obfuscation.ps1
diff --git a/Out-EncodedAsciiCommand.ps1 b/Out-EncodedAsciiCommand.ps1
diff --git a/Out-EncodedBXORCommand.ps1 b/Out-EncodedBXORCommand.ps1
diff --git a/Out-EncodedBinaryCommand.ps1 b/Out-EncodedBinaryCommand.ps1
diff --git a/Out-EncodedHexCommand.ps1 b/Out-EncodedHexCommand.ps1
diff --git a/Out-EncodedOctalCommand.ps1 b/Out-EncodedOctalCommand.ps1
diff --git a/Out-ObfuscatedStringCommand.ps1 b/Out-ObfuscatedStringCommand.ps1
diff --git a/Out-PowerShellLauncher.ps1 b/Out-PowerShellLauncher.ps1
diff --git a/Out-SecureStringCommand.ps1 b/Out-SecureStringCommand.ps1
diff --git a/README.md b/README.md
@@ -1,4 +1,4 @@
-Invoke-Obfuscation v1.6
+Invoke-Obfuscation v1.7
 ===============
 
 ![Invoke-Obfuscation Screenshot](https://github.com/danielbohannon/danielbohannon.github.io/blob/master/Invoke-Obfuscation%20Screenshot.png)
@@ -139,4 +139,8 @@ ENCODING functions to add numerous command-line syntaxes for IEX.
 encapsulate variables in ${} if they are already encapsulated (so ${${var}} won't 
 happen as this causes errors).
 - Replaced Invoke-Obfuscation.psm1 with Invoke-Obfuscation.psd1 (thanks @Carlos_Perez).
-- Fixed several TOKEN-level obfuscation bugs reported by @cobbr_io and @IISResetMe.
+- Fixed several TOKEN-level obfuscation bugs reported by @cobbr_io and @IISResetMe.
+
+v1.7 - 2017-03-03 nullcon (Goa, India):
+- Added 3 new LAUNCHERs: RUNDLL, RUNDLL++ and MSHTA++
+- Added additional ExecutionContext wildcard variable strings (E*t, *cut*t, etc.)