peewpw/Invoke-PSImage

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2188 stars · 386 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Invoke-PSImage is a PowerShell tool that encodes a PowerShell script into the pixels of a PNG image using steganography, then generates a oneliner to execute the payload. It can embed payloads in the least significant bits of an existing image or create new images, supporting execution from disk or the web.

Use cases

• hide a powershell script inside a png image
• generate a oneliner to execute a script embedded in an image
• embed mimikatz payload in a picture for red team ops
• encode powershell payload into image pixels for stealth delivery
• host an image on the web and execute the embedded script remotely

When to choose

• you need to smuggle a PowerShell script past simple inspection by hiding it in an image
• you want a self-contained oneliner that decodes and runs a payload from a PNG
• you are doing red team or penetration testing on Windows environments

When to avoid

• you need a defensive or detection tool rather than an offensive payload encoder
• your target is not Windows PowerShell
• you need robust, modern tooling - the project has not been updated since 2019

Facets

cli-tool · maturity maintenance

security cryptography cli security penetration-testing developer-tools windows cli steganography powershell offensive-security payload-encoding red-team

Member repositories

For agents

markdown · JSON · MCP: product_card(name="peewpw/Invoke-PSImage")