Inline obfuscation

[adityatelange]

This pull request adds support for command obfuscation to the interactive PowerShell shell in evil_winrm_py.py. Users can now toggle obfuscation on and off using the new obf/obs command, and the shell prompt visually indicates when obfuscation is enabled. The groundwork for obfuscating PowerShell commands is included, though the actual obfuscation logic is yet to be implemented.

Command obfuscation feature:

• Added a new obf/obs command to the shell menu, allowing users to toggle command obfuscation on or off.
• Introduced the global OBFUSCATION_ENABLED flag to track obfuscation state.
• Updated the shell prompt to show a visual indicator when obfuscation is enabled.
• Added a stub for the ps_obfuscate function, which will eventually obfuscate PowerShell commands before execution.
• Modified the command execution flow to pass all commands through ps_obfuscate if obfuscation is enabled, and implemented the toggle logic in the shell loop.

[Copilot]

Pull Request Overview

This PR introduces a command obfuscation feature for the interactive PowerShell shell, allowing users to toggle obfuscation on/off via a new obf/obs command. The shell prompt visually indicates when obfuscation is active, and the infrastructure routes commands through an obfuscation function (currently a stub returning the original command).

• Added obf/obs command to toggle obfuscation state
• Updated shell prompt to display obfuscation indicator when enabled
• Integrated ps_obfuscate function into command execution flow

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[hydr0nium]

Pretty cool idea. Any ideas how to implement the actual obfuscation?

[adityatelange]

Pretty cool idea. Any ideas how to implement the actual obfuscation?

I have it already implemented which already works with most public working AMSi bypass scripts.

Not be pushing it as no one needs the feature. People are happy using og evil-winrm. There's no need of this tool maybe.

[gumbyDE]

Pretty cool idea. Any ideas how to implement the actual obfuscation?

I have it already implemented which already works with most public working AMSi bypass scripts.

Not be pushing it as no one needs the feature. People are happy using og evil-winrm. There's no need of this tool maybe.

Just wanted to assure you that there's a huge community out there that hates evil-winrm and loves evil-winrm-py. So "there's no need of this tool maybe" is not true :)

[hydr0nium]

@gumbyDE I 100% agree with you. I tell everyone to use this tool. Not because the other one is bad but rather because dealing with Ruby is suuuchh a pain sometimes