Comparison of entries

All supported entries (184)

Windows

Executable	Obfuscation types	Character Substitution	Character Insertion	Option Character Substitution	Quote Insertion	Shorthands	File Path Transformations	URL Transformations	RaNdOmCaSe	Reordering args
certreq	7	✅	✅	✅	✅		✅	✅	✅
reg	6	✅	✅	✅	✅		✅		✅
powershell (and `pwsh`)	6			✅	✅	✅	✅		✅	✅
expand	6	✅	✅	✅	✅		✅		✅
certutil	6	✅	✅	✅	✅		✅		✅
arp	6	✅	✅	✅	✅			✅	✅
runas	5		✅		✅	✅	✅		✅
robocopy	5	✅		✅	✅		✅		✅
regsvr32	5		✅	✅	✅		✅		✅
regedit	5		✅	✅	✅		✅		✅
ping	5		✅	✅	✅			✅	✅
nslookup	5		✅	✅	✅	✅			✅
netstat	5	✅	✅	✅	✅				✅
msiexec	5	✅		✅			✅	✅	✅
msbuild	5			✅	✅		✅	✅	✅
makecab	5	✅		✅	✅		✅		✅
ipconfig	5	✅	✅	✅	✅				✅
findstr	5	✅		✅	✅		✅		✅
extrac32	5	✅		✅	✅		✅		✅
dism	5		✅	✅	✅		✅		✅
cacls	5	✅	✅		✅		✅		✅
bcdedit	5			✅	✅		✅	✅	✅
wmic	4	✅		✅			✅		✅
where	4			✅	✅		✅		✅
vbc	4			✅	✅		✅		✅
takeown	4			✅	✅		✅		✅
schtasks	4			✅	✅			✅	✅
rpcping	4		✅	✅	✅				✅
route	4	✅		✅	✅				✅
psexec	4			✅	✅		✅		✅
procdump	4			✅	✅		✅		✅
pnputil	4			✅	✅		✅		✅
nltest	4	✅		✅	✅				✅
net (and `net1`)	4				✅	✅	✅		✅
jsc	4			✅	✅		✅		✅
ftp	4			✅	✅		✅		✅
forfiles	4			✅	✅		✅		✅
curl	4				✅		✅	✅	✅
cmdkey	4		✅	✅		✅			✅
bitsadmin	4				✅		✅	✅	✅
auditpol	4			✅	✅		✅		✅
aspnet_compiler	4			✅	✅		✅		✅
adfind	4	✅		✅	✅				✅
xcopy	3				✅		✅		✅
wscript	3				✅		✅		✅
winget	3				✅		✅		✅
whoami	3			✅	✅				✅
wevtutil	3			✅	✅				✅
w32tm	3			✅	✅				✅
tasklist	3			✅	✅				✅
taskkill	3			✅	✅				✅
tar	3			✅	✅		✅
secedit	3				✅		✅		✅
query	3			✅	✅				✅
netsh	3				✅	✅			✅
icacls	3				✅		✅		✅
fsutil	3				✅		✅		✅
driverquery	3			✅	✅				✅
cscript	3				✅		✅		✅
csc	3			✅			✅		✅
cmstp	3	✅					✅		✅
cipher	3				✅		✅		✅
at	3				✅	✅			✅
addinutil	3				✅		✅		✅
vaultcmd	2				✅				✅
sc	2				✅				✅
nbtstat	2			✅	✅
fltmc	2				✅				✅

Linux

Executable	Obfuscation types	Character Insertion	Shorthands	File Path Transformations	URL Transformations	Reordering args
xxd	4	✅	✅	✅		✅
wget	4		✅	✅	✅	✅
dig	4		✅	✅	✅	✅
arp	4		✅	✅	✅	✅
zip	3		✅	✅		✅
wc	3		✅	✅		✅
uniq	3		✅	✅		✅
timeout	3		✅	✅		✅
tcpdump	3		✅	✅		✅
tar	3		✅	✅		✅
tail	3		✅	✅		✅
systemctl	3		✅	✅		✅
sudo	3		✅	✅		✅
strings	3		✅	✅		✅
ssh	3			✅	✅	✅
sort	3		✅	✅		✅
sftp	3			✅	✅	✅
sed	3		✅	✅		✅
scp	3			✅	✅	✅
rsync	3			✅	✅	✅
nc (and `netcat`)	3			✅	✅	✅
mv	3		✅	✅		✅
mount	3		✅	✅		✅
ln	3		✅	✅		✅
less	3		✅	✅		✅
journalctl	3		✅	✅		✅
ip	3		✅	✅		✅
head	3		✅	✅		✅
gzip	3		✅	✅		✅
grep	3		✅	✅		✅
gcc (and `g++`)	3			✅	✅	✅
file	3		✅	✅		✅
expand	3		✅	✅		✅
date	3		✅	✅		✅
cut	3		✅	✅		✅
curl	3		✅		✅	✅
cp	3		✅	✅		✅
chown	3		✅	✅		✅
chmod	3		✅	✅		✅
bash	3		✅	✅		✅
at	3		✅	✅		✅
whois	2		✅			✅
unzip	2			✅		✅
python3	2			✅		✅
ping	2				✅	✅
perl	2			✅		✅
jq	2			✅		✅
id	2		✅			✅
dpkg	2				✅	✅
dash	2			✅		✅
base64	2		✅			✅
apt (and `apt-get`)	2			✅		✅

macOS

Executable	Obfuscation types	Character Insertion	Shorthands	File Path Transformations	URL Transformations	RaNdOmCaSe	Reordering args
scutil	5		✅	✅	✅	✅	✅
nc	5		✅	✅	✅	✅	✅
dig	5		✅	✅	✅	✅	✅
xattr	4		✅	✅		✅	✅
uniq	4		✅	✅		✅	✅
tmutil	4		✅	✅		✅	✅
tar	4		✅	✅		✅	✅
tail	4		✅	✅		✅	✅
strings	4		✅	✅		✅	✅
streamzip	4		✅	✅		✅	✅
spctl	4		✅	✅		✅	✅
security	4		✅	✅		✅	✅
say	4		✅	✅		✅	✅
profiles	4		✅	✅		✅	✅
ping	4		✅		✅	✅	✅
open	4		✅	✅		✅	✅
nscurl	4			✅	✅	✅	✅
mv	4		✅	✅		✅	✅
mount	4		✅	✅		✅	✅
mktemp	4		✅	✅		✅	✅
log	4		✅	✅		✅	✅
head	4		✅	✅		✅	✅
dsexport	4			✅	✅	✅	✅
dns-sd	4	✅		✅		✅	✅
ditto	4		✅	✅		✅	✅
chflags	4		✅	✅		✅	✅
setfile	4		✅	✅		✅	✅
zsh	3			✅		✅	✅
wc	3			✅		✅	✅
sysctl	3			✅		✅	✅
sw_vers	3		✅			✅	✅
ssh-keygen	3			✅		✅	✅
softwareupdate	3		✅			✅	✅
sed	3			✅		✅	✅
screencapture	3			✅		✅	✅
osascript	3			✅		✅	✅
osacompile	3			✅		✅	✅
nvram	3			✅		✅	✅
mdls	3			✅		✅	✅
ln	3		✅	✅			✅
launchctl	3			✅		✅	✅
last	3			✅		✅	✅
kextstat	3		✅			✅	✅
hdiutil	3			✅		✅	✅
expand	3			✅		✅	✅
dsconfigad	3		✅			✅	✅
defaults	3			✅		✅	✅
date	3			✅		✅	✅
cut	3			✅		✅	✅
cp	3			✅		✅	✅
chmod	3		✅	✅			✅
caffeinate	3			✅		✅	✅
arp	3			✅		✅	✅
getfileinfo	3	✅		✅		✅
whois	2					✅	✅
systemsetup	2					✅	✅
system_profiler	2					✅	✅
pbpaste	2	✅				✅
pbcopy	2	✅				✅
networksetup	2			✅		✅
ioreg	2					✅	✅
dscacheutil	2					✅	✅
chown	2			✅			✅
base64	2		✅				✅