tokyoneon/Chimera

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1597 stars · 257 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Chimera is a PowerShell obfuscation script that transforms malicious PS1 payloads using string substitution and variable concatenation to bypass AMSI and antivirus detection signatures. It is an offensive security tool aimed at penetration testers demonstrating how trivial signature-based evasion can be.

Use cases

• obfuscate powershell payloads to bypass antivirus
• bypass AMSI detection on Windows
• evade signature-based AV detection for red team engagements
• generate obfuscated reverse shell scripts for penetration testing
• test antivirus detection capabilities against obfuscated scripts

When to choose

• you are a penetration tester or red teamer needing to evade signature-based AV on Windows targets
• you want to demonstrate AMSI bypass weaknesses in security assessments
• you need a quick, script-based PowerShell obfuscation tool on Kali Linux

When to avoid

• you need defensive tooling or malware analysis rather than offensive evasion
• you require a maintained, supported product - the project has had no releases since 2021 and no license
• your target uses behavior-based or modern EDR detection rather than simple signatures
• obfuscating PowerShell is prohibited in your environment or jurisdiction

Facets

cli-tool · maturity maintenance

security penetration-testing vulnerability-scanning security penetration-testing windows cli powershell-obfuscation amsi-bypass antivirus-evasion offensive-security payload-generator red-team linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="tokyoneon/Chimera")