Invoke-Stealth icon indicating copy to clipboard operation
Invoke-Stealth copied to clipboard

Program not working.

Open YildirimMesut opened this issue 1 year ago • 9 comments

I was using this program for 6-5 months but recently, you program is not working. it doesnt obfuscate anything.

image

YildirimMesut avatar Sep 05 '23 09:09 YildirimMesut

@YildirimMesut Hey, I have the same issue too but when I try to copy all the contents of commit b91145b and replace it in the main file, it starts to do all its functions. Until I understand all the changes he tried to make, I may realise what bug nuked the whole script.

Kinny092 avatar Sep 27 '23 15:09 Kinny092

Tested right now and works like a charm on Windows and Linux, without any change:

image image image image

JoelGMSec avatar Sep 27 '23 15:09 JoelGMSec

@JoelGMSec Confirming it is working. The difference I can see was before I used -technique All and that did not work, now I used -t all and it works. Also when I run it in native PS, I get the below error, but when I run it in ISE, it works perfectly. image

Kinny092 avatar Sep 27 '23 16:09 Kinny092

Thanks for the update, I will check and fix it as soon as possible. In the meantime, keep this in mind :)

Regards!

JoelGMSec avatar Sep 27 '23 16:09 JoelGMSec

you welcome, also do a few test with different ps scripts as I have a hunch that some rng may upset one or more functions. sometimes it does not encrypt anything, sometimes it encrypts but dosent run. for example, it works when the invoke expression is broken into "in"+"vO"+"ke"+"-e"+"xp"+"rE"+"Ss"+"Io"+"N" but it dosent work when its broken into "iNv"+"OkE"+"-eX"+"PrE"+"SSI"+"On"

image

lovely work though, im starting to love it so much.

Kinny092 avatar Sep 28 '23 15:09 Kinny092

The script is not working whether I use "-technique" or "-t".

image

The first line contains empty string though I am assuming it should contain encrypted file content in it.

Also I get no errors when I execute the script. I have python 3.11 installed on my local (Windows 11 Pro) machine.

aneesurrehman001 avatar Oct 24 '23 12:10 aneesurrehman001

Same error here. I believe the problem lies in the usage of ReverseB64 and it is Windows specific. The script works on Kali. Reverting Invoke-Stealth.ps1to previous versions does nothing.

LOLCATATONIA avatar Nov 13 '23 12:11 LOLCATATONIA

I ran into the exact same problem on Windows and for me the fix was to pass in the absolute path to the input script.

# does not work on Windows
Invoke-Stealth.ps1 RunMe.ps1 -Technique All

# this does work on Windows
Invoke-Stealth.ps1 $pwd\RunMe.ps1 -Technique All

ameily avatar Feb 02 '24 16:02 ameily

image

Anyone got it working on Linux pwsh?

mvthul avatar Feb 06 '24 21:02 mvthul

I ran into the exact same problem on Windows and for me the fix was to pass in the absolute path to the input script.

# does not work on Windows
Invoke-Stealth.ps1 RunMe.ps1 -Technique All

# this does work on Windows
Invoke-Stealth.ps1 $pwd\RunMe.ps1 -Technique All

This Fix Worked for me!

reggietorres avatar Mar 22 '24 05:03 reggietorres

Closed because it worked without problems as @reggietorres says :)

JoelGMSec avatar Mar 22 '24 07:03 JoelGMSec