Obfuscator

Encode and obfuscate payloads for defense evasion. URL encoding, HTML entities, Base64, PowerShell -EncodedCommand, shell tricks, SQL bypasses, and more — with restricted character filtering.

PowerShell -EncodedCommand

Encodes as UTF-16LE Base64 for powershell -EncodedCommand. Classic AV / EDR bypass.

Enter a payload above to see the encoded output…

PS Backtick Insertion

Inserts backticks (`) between characters. PowerShell silently ignores them; breaks signature matching.

Enter a payload above to see the encoded output…

CMD Caret (^) Insertion

Inserts carets (^) between characters. cmd.exe strips them; bypasses string-based AV detections.

Enter a payload above to see the encoded output…

PS Case Alternation

Alternates upper/lower case (wHoAmI). PowerShell is case-insensitive; defeats exact-string signatures.

Enter a payload above to see the encoded output…

PS String Concatenation

Splits the command into two string literals joined with +. Evades static string detection.

Enter a payload above to see the encoded output…

PS [char] Array Cast

Converts each character to its decimal code point and uses [char[]] casting. No literal strings in output.

Enter a payload above to see the encoded output…

PS Format Operator (-f)

Splits the command into 2-char chunks and reconstructs with the -f format operator. Fragments the literal.

Enter a payload above to see the encoded output…