$console = $host.UI.RawUI

$console.WindowTitle = "Powershell AES-Encoder"

Set-StrictMode -Version Latest

$ErrorActionPreference = "Stop"

$PSDefaultParameterValues['*:ErrorAction']='Stop'

function Create-Var() {

(1..9|%{[byte](Get-Random -Max 256)}|foreach ToString X2) -join ''

}

function RAND() {

$set = "xQpVQLuQpVQpVQpVQpVQWpVQpVQpVQpVQpVQpVQpKVQpVQpVQpVQpV"

(1..(6 + (Get-Random -minimum 8 -Maximum 10)) | %{ $set[(Get-Random -Minimum 10 -Maximum $set.Length)] } ) -join ''

}

function Invoke-AES-Encoder {

<#

[CmdletBinding()]

Param (

[Parameter(Mandatory,ValueFromPipeline,ValueFromPipelineByPropertyName)]

[string] $infile = $(Throw("-InFile is required")),

[Parameter(Mandatory,ValueFromPipeline,ValueFromPipelineByPropertyName)]

[string] $outfile = $(Throw("-OutFile is required")),

[Parameter(Mandatory=$false,ValueFromPipeline,ValueFromPipelineByPropertyName)]

[string] $iterations = 4

)

Process {

Write-Host `r`n

Write-Host -ForegroundColor Red " ░░░░░ ░░░░░░░ ░░░░░░░ ░░░░░░░ ░░░ ░░ ░░░░░░ ░░░░░░ ░░░░░░ ░░░░░░░ ░░░░░░ "

Write-Host -ForegroundColor White " ▒▒ ▒▒ ▒▒ ▒▒ ▒▒ ▒▒▒▒ ▒▒ ▒▒ ▒▒ ▒▒ ▒▒ ▒▒ ▒▒ ▒▒ ▒▒ "

Write-Host -ForegroundColor Red " ▒▒▒▒▒▒▒ ▒▒▒▒▒ ▒▒▒▒▒▒▒ ▒▒▒▒▒ ▒▒ ▒▒ ▒▒ ▒▒ ▒▒ ▒▒ ▒▒ ▒▒ ▒▒▒▒▒ ▒▒▒▒▒▒ "

Write-Host -ForegroundColor White " ▓▓ ▓▓ ▓▓ ▓▓ ▓▓ ▓▓ ▓▓ ▓▓ ▓▓ ▓▓ ▓▓ ▓▓ ▓▓ ▓▓ ▓▓ ▓▓ "

Write-Host -ForegroundColor Red " ██ ██ ███████ ███████ ███████ ██ ████ ██████ ██████ ██████ ███████ ██ ██ "

Write-Host -ForegroundColor Blue " ╔═════════════════════════════════════════╗ "

Write-Host -ForegroundColor White " ║ AES Encoder 1.0.0.0 ║ "

Write-Host -ForegroundColor Blue " ║ coded by Chainski ║ "

Write-Host -ForegroundColor White " ║ For Educational Purposes Only ║ "

Write-Host -ForegroundColor Red " ║ Github ║ "

Write-Host -ForegroundColor White " ║ https://github.com/chainski/AES-Encoder ║ "

Write-Host -ForegroundColor Blue " ╚═════════════════════════════════════════╝ "

Write-Host `r`n

sleep 1

# read

Write-Host "[*] Reading '$($infile)' ..."

$codebytes = [System.IO.File]::ReadAllBytes($infile)

for ($i = 1; $i -le $iterations; $i++) {

Write-Host "[*] Starting Encryption Process ..." -ForegroundColor Red

$paddingmodes = 'PKCS7','ISO10126','ANSIX923','Zeros'

$paddingmode = $paddingmodes | Get-Random

$ciphermode = 'CBC'

$keysizes = 128,192,256

$keysize = $keysizes | Get-Random

$compressiontypes = 'Gzip','Deflate'

$compressiontype = $compressiontypes | Get-Random

# compress

Write-Host "[*] Compressing ..."

[System.IO.MemoryStream] $output = New-Object System.IO.MemoryStream

if ($compressiontype -eq "Gzip") {

$compressionStream = New-Object System.IO.Compression.GzipStream $output, ([IO.Compression.CompressionMode]::Compress)

} elseif ( $compressiontype -eq "Deflate") {

$compressionStream = New-Object System.IO.Compression.DeflateStream $output, ([IO.Compression.CompressionMode]::Compress)

}

$compressionStream.Write( $codebytes, 0, $codebytes.Length )

$compressionStream.Close()

$output.Close()

$compressedBytes = $output.ToArray()

# generate key

Write-Host "[*] Generating Encryption Key ..."

$aesManaged = New-Object "System.Security.Cryptography.AesManaged"

$aesManaged.Mode = [System.Security.Cryptography.CipherMode]::CBC

if ($paddingmode -eq 'PKCS7') {

$aesManaged.Padding = [System.Security.Cryptography.PaddingMode]::PKCS7

} elseif ($paddingmode -eq 'ISO10126') {

$aesManaged.Padding = [System.Security.Cryptography.PaddingMode]::ISO10126

} elseif ($paddingmode -eq 'ANSIX923') {

$aesManaged.Padding = [System.Security.Cryptography.PaddingMode]::ANSIX923

} elseif ($paddingmode -eq 'Zeros') {

$aesManaged.Padding = [System.Security.Cryptography.PaddingMode]::Zeros

}

$aesManaged.BlockSize = 128

$aesManaged.KeySize = 256

$aesManaged.GenerateKey()

$b64key = [System.Convert]::ToBase64String($aesManaged.Key)

# encrypt

Write-Host "[*] Encrypting with AES ..." -ForegroundColor Red

$encryptor = $aesManaged.CreateEncryptor()

$encryptedData = $encryptor.TransformFinalBlock($compressedBytes, 0, $compressedBytes.Length);

[byte[]] $fullData = $aesManaged.IV + $encryptedData

$aesManaged.Dispose()

$b64encrypted = [System.Convert]::ToBase64String($fullData)

Write-Host "[*] Randomizing Cases ..."

# write

Write-Host "[*] Obfuscating Layers ..."

# Added Support for Unicode and HTML Decoding

$stub_template = ''

$code_alternatives = @()

$code_alternatives += '([SYstEm.teXt.encODIng]::uTf8.gETSTriNG([sysTEM.cONVErT]::fRomBAse64StRInG("QWRkLVR5cGUgLUFzc2VtYmx5TmFtZSBTeXN0ZW0uV2ViID4gJG51bGw="))) | iex' + "`r`n"

$code_alternatives += '${2} = [coNVeRT]::fROmbASE64sTRINg("{0}")' + "`r`n"

$code_alternatives += '${2} = [coNVeRT]::fROmbASE64sTRINg("{0}")' + "`r`n"

$code_alternatives += '${3} = [coNVeRT]::fRomBaSE64sTRINg("{1}")' + "`r`n"

$code_alternatives += '${4} = [System.Net.WebUtility]::HtmlDecode("&#x4e;&#x65;&#x77;&#x2d;&#x4f;&#x62;&#x6a;&#x65;&#x63;&#x74;&#x20;&#x22;&#x53;&#x79;&#x73;&#x74;&#x65;&#x6d;&#x2e;&#x53;&#x65;&#x63;&#x75;&#x72;&#x69;&#x74;&#x79;&#x2e;&#x43;&#x72;&#x79;&#x70;&#x74;&#x6f;&#x67;&#x72;&#x61;&#x70;&#x68;&#x79;&#x2e;&#x41;&#x65;&#x73;&#x4d;&#x61;&#x6e;&#x61;&#x67;&#x65;&#x64;&#x22;") | iex' + "`r`n"

$code_alternatives_shuffled = $code_alternatives

$stub_template += $code_alternatives_shuffled -join ''

$code_alternatives = @()

$code_alternatives += '${4}.ModE = [REGex]::uNesCapE("\u005b\u0053\u0079\u0073\u0074\u0065\u006d\u002e\u0053\u0065\u0063\u0075\u0072\u0069\u0074\u0079\u002e\u0043\u0072\u0079\u0070\u0074\u006f\u0067\u0072\u0061\u0070\u0068\u0079\u002e\u0043\u0069\u0070\u0068\u0065\u0072\u004d\u006f\u0064\u0065\u005d\u003a\u003a\u0043\u0042\u0043") | iex' + "`r`n"

$code_alternatives += '${4}.Padding = [sYsTem.SECuRIty.cRYptOGRaPhy.PaDdiNgMoDe]::'+$paddingmode + "`r`n"

$code_alternatives += '${4}.BlOckSIze = [SySTEm.NET.WeButiliTy]::hTmLdEcOdE("&#x31;&#x32;&#x38;") | iex' + "`r`n"

$code_alternatives += '${4}.KeySize = '+$keysize + "`n" + '${4}.Key = ${3}' + "`r`n"

$code_alternatives += '${4}.Iv = ${2}[0..15]' + "`r`n"

$code_alternatives_shuffled = $code_alternatives

$stub_template += $code_alternatives_shuffled -join ''

$code_alternatives = @()

$code_alternatives += '${6} = nEw-OBJECt sySTeM.io.mEmorYSTrEam(,${4}.CrEAtedECrYptor().TRaNsFOrmfinaLBlOCk(${2},16,${2}.LEnGth-16))' + "`r`n"

$code_alternatives += '${7} = [RegEX]::UnESCaPe("\u004e\u0065\u0077\u002d\u004f\u0062\u006a\u0065\u0063\u0074\u0020\u0053\u0079\u0073\u0074\u0065\u006d\u002e\u0049\u004f\u002e\u004d\u0065\u006d\u006f\u0072\u0079\u0053\u0074\u0072\u0065\u0061\u006d") | iex' + "`r`n"

$code_alternatives_shuffled = $code_alternatives

$stub_template += $code_alternatives_shuffled -join ''

if ($compressiontype -eq "Gzip") {

$stub_template += '${5} = nEw-oBject sYSTEM.IO.cOmPreSsiOn.gZIpStReAM ${6}, ([IO.Compression.CompressionMode]::Decompress)' + "`r`n"

} elseif ( $compressiontype -eq "Deflate") {

$stub_template += '${5} = NEw-oBject SySteM.iO.ComprESsIoN.DEfLAtEsTReAM ${6}, ([io.CompREsSION.COmPressionMOdE]::DecompReSs)' + "`r`n"

}

$stub_template += '${5}.CoPyTo(${7})' + "`r`n"

$code_alternatives = @()

$code_alternatives += '${5}.ClosE()' + "`r`n"

$code_alternatives += '${4}.DisPoSe()' + "`r`n"

$code_alternatives += '${6}.ClosE()' + "`r`n"

$code_alternatives += '${8} = [sYStem.texT.enCoDIng]::uTF8.GETstrInG(${7}.tOArraY())' + "`r`n"

$code_alternatives_shuffled = $code_alternatives

$stub_template += $code_alternatives_shuffled -join ''

$stub_template += ('INVoke-ExPREsSion','IeX' | Get-Random)+'(${8})' + "`r`n"

# it's ugly, but it beats concatenating each value manually.

$code = $stub_template -f $b64encrypted, $b64key, (Create-Var), (Create-Var), (RAND), (Create-Var), (Create-Var), (Create-Var), (Create-Var), (Create-Var)

$codebytes = [System.Text.Encoding]::UTF8.GetBytes($code)

}

Write-Host "[*] Writing '$($outfile)' ..."

[System.IO.File]::WriteAllText($outfile,$code)

Write-Host "[+] Done!" -ForegroundColor Red

}

}