Skip to content
This repository has been archived by the owner on Jan 23, 2024. It is now read-only.

Releases: cfalta/PowerShellArmoury

PSArmoury 2.0

25 Feb 20:51
Compare
Choose a tag to compare

New major version that introduces, besides a lot of cleanup, a modular design for evasion and obfuscation code. The goal is to make PSArmoury more easy to adapt.

Details:

[fixed] Current loader detected by AV on disk
[fixed] Current deobfuscation method (AES) detected through AMSI
[fixed] Fixed a bug in -VerifyOnly that led to a silent fail
[fixed] Broken link in default config

[new] Modular design for evasion and obfuscation
[new] Reduced size of the cleartext loader function on disk to a minimum
[new] 3 different obfuscation templates included
[new] ConvertTo-PowerShell now supports private main methods (thanks @theluemmel)
[new] Used ParameterSets to improve quality of Powershell help menu (aka. "man New-PSArmoury")
[new] Github credentials can now be passed as a parameter - no more prompting

[removed] Support for BlockDLL process mitigation

PSArmoury 1.6

21 Jul 15:38
Compare
Choose a tag to compare

[new] introducing Invoke-Shuffle.ps1 - a new utility script for code obfuscation
[fixed] modified AMSI bypass and decryption stub to prevent detection by Windows Defender

PSArmoury 1.5

24 Jan 21:35
dc58de2
Compare
Choose a tag to compare

[new] new json config - WARNING: BREAKING CHANGE! - old config formats will no longer work. Have a look at the README.
[new] New-PSArmoury will now run a config syntax check by default (like -ValidateOnly)
[new] GZIP compression is here, typically armoury size reduced by at least 50% percent
[new] finally wrote a useful readme... yeah, I know...
[fixed] UTF8 with BOM will no longer cause issues

PSArmoury 1.4

17 Jan 09:44
37765de
Compare
Choose a tag to compare

[new] Added support for BlockDLL process mitigation policy to enhance armoury protection

PSArmoury 1.3

15 Dec 14:12
Compare
Choose a tag to compare

New release for Andi ❤️
[new] choose Github branch in config file (dev/master/...) --> have a look at the sample config
[new] simply create armoury from local file or folder without the need to create a config file
[new] every armoury now contains an inventory function called Get-PSArmoury, so you know what's inside

PSArmoury 1.2

17 Nov 20:11
Compare
Choose a tag to compare

Added a small change to disable PS History automatically, which sadly bypasses some EDR solutions ;-)

PSArmoury 1.1

05 Oct 18:25
Compare
Choose a tag to compare

Small modifications regarding AMSI bypass. Updated tools inside.

PSArmoury 1.0

13 Jan 16:37
Compare
Choose a tag to compare
Adapted config