the_open_door
coffee
ESEN
← Tools

Bashfuscator

Obfuscates Bash commands to evade filters and signature detection.

Bash command obfuscator. It takes a readable command and rewrites it into something functionally identical but unrecognisable (variable expansions, arithmetic, substitutions, chopped strings), applying several layers on request. You use it when there is **command injection** but a filter blocks specific words (`cat`, `bash`, `/etc/passwd`), or when the goal is not leaving the obvious string in the logs. The price is length: the output grows a lot and sometimes will not fit in the vulnerable parameter.

Family Web exploitation

Flags -c -s --no-mangling --layers

Concepts OS Command Injection

Cheatsheet Command injection

Installation

python3 setup.py install --user

Useful commands3 commands

Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.