python-obfuscation-framework 1.7.2__tar.gz → 1.7.4__tar.gz

{python_obfuscation_framework-1.7.2/python_obfuscation_framework.egg-info → python_obfuscation_framework-1.7.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-obfuscation-framework
-Version: 1.7.2
+Version: 1.7.4
 Summary: Python Obfuscation Framework
 Author-email: deoktr <35725720+deoktr@users.noreply.github.com>
 Maintainer-email: deoktr <35725720+deoktr@users.noreply.github.com>
@@ -173,6 +173,46 @@ globals()["".join([chr(ord(i) - 3) for i in "bbvqlwolxebb"[::-1]])].__dict__[
 
 More examples and usage can be found in `examples/` or in the section bellow.
 
+## Effectiveness
+
+The tests are done using the default configuration of pof, no sandbox evasion
+technique was used with obfuscation. Also note that I haven't tested the
+malware to see if they still work, they should, but they may break with
+obfuscation.
+
+Obfuscating a [Lazarus malware](https://bazaar.abuse.ch/sample/c3cb53c4a290bc9ab6c9eb825ed0ca38bb54bcc4a59f33be72becdff80cb091b/),
+we go from
+[18/63](https://www.virustotal.com/gui/file/c3cb53c4a290bc9ab6c9eb825ed0ca38bb54bcc4a59f33be72becdff80cb091b)
+to
+[0/63](https://www.virustotal.com/gui/file/2f427bc784e2a865d8f000c21f366cb8459842f97c56465cbe963f221b3e115a)
+on virus total:
+![](./examples/images/lazarus.png)
+
+Obfuscating [BTC-Clipper](https://github.com/NightfallGT/BTC-Clipper), we go
+from
+[13/64](https://www.virustotal.com/gui/file/9817d8de9bf7d2740b5b66e30ec1afdd98d7d119074a61cbba05514d4ebdc149)
+to
+[0/63](https://www.virustotal.com/gui/file/71631daa26fe6c2cf77d282a16f8b3fd31e4794b63709b956599563b95e64816)
+on virus total:
+![](./examples/images/btc_clipper.png)
+
+Obfuscating a
+[Braodo malware](https://bazaar.abuse.ch/sample/b86e4bff935db9345cc1467e615ff4fbe292fae618ae927595d328cfd9e8a08f/),
+we go from
+[10/61](https://www.virustotal.com/gui/file/b86e4bff935db9345cc1467e615ff4fbe292fae618ae927595d328cfd9e8a08f)
+to
+[0/63](https://www.virustotal.com/gui/file/8791188aaf7655093307e46fa68e3705ee7249cb81e05ea416ae96ad2fd2f0f2)
+on virus total:
+![](./examples/images/braodo.png)
+
+Obfuscating [Python-File-Stealer](https://github.com/KrizzhSriskantharajah-UK/Python-File-Stealer),
+we go from
+[4/63](https://www.virustotal.com/gui/file/2fc798f1df42adae3af2f7d2623edc74f6b8f08a7ae16ef3b67305c4ad668c82)
+to
+[0/63](https://www.virustotal.com/gui/file/8d529e6ee2806986ca376a427d683fdf6980d6332134e4759d790d604d6b5dcb)
+on virus total:
+![](./examples/images/python_stealer.png)
+
 ## Install
 
 There are multiple installation options, with PIP, a virtualenv, a container, or with Nix.
@@ -298,7 +338,7 @@ echo "print('Hello, world')" | pof -f obfuscator -k UUIDObfuscator | python
 
 ### Obfuscator
 
-`NamesObfuscator` the most basic obfuscator is changing variables, classes, function names, and imports.
+`NamesObfuscator` the most basic obfuscator is renaming variables, classes, functions, and imports.
 
 Source in `examples/source.py`.
 
@@ -352,6 +392,9 @@ print('Helnelemd'.replace('nelem','lo, worl'))
 # One on n
 print("".join([d if g%3==0 else""for g,d in enumerate('H9IesYlvJl5loU4,dK nDw51ovsrozl0UdoI!jL')]))
 
+# Hex-encoded
+print('\x48\x65\x6c\x6c\x6f\x2c\x20\x77\x6f\x72\x6c\x64')
+
 # Unicode
 print('\u0048\u0065\u006c\u006c\u006f\u002c\u0020\u0077\u006f\u0072\u006c\u0064')
 

{python_obfuscation_framework-1.7.2 → python_obfuscation_framework-1.7.4}/README.md

@@ -128,6 +128,46 @@ globals()["".join([chr(ord(i) - 3) for i in "bbvqlwolxebb"[::-1]])].__dict__[
 
 More examples and usage can be found in `examples/` or in the section bellow.
 
+## Effectiveness
+
+The tests are done using the default configuration of pof, no sandbox evasion
+technique was used with obfuscation. Also note that I haven't tested the
+malware to see if they still work, they should, but they may break with
+obfuscation.
+
+Obfuscating a [Lazarus malware](https://bazaar.abuse.ch/sample/c3cb53c4a290bc9ab6c9eb825ed0ca38bb54bcc4a59f33be72becdff80cb091b/),
+we go from
+[18/63](https://www.virustotal.com/gui/file/c3cb53c4a290bc9ab6c9eb825ed0ca38bb54bcc4a59f33be72becdff80cb091b)
+to
+[0/63](https://www.virustotal.com/gui/file/2f427bc784e2a865d8f000c21f366cb8459842f97c56465cbe963f221b3e115a)
+on virus total:
+![](./examples/images/lazarus.png)
+
+Obfuscating [BTC-Clipper](https://github.com/NightfallGT/BTC-Clipper), we go
+from
+[13/64](https://www.virustotal.com/gui/file/9817d8de9bf7d2740b5b66e30ec1afdd98d7d119074a61cbba05514d4ebdc149)
+to
+[0/63](https://www.virustotal.com/gui/file/71631daa26fe6c2cf77d282a16f8b3fd31e4794b63709b956599563b95e64816)
+on virus total:
+![](./examples/images/btc_clipper.png)
+
+Obfuscating a
+[Braodo malware](https://bazaar.abuse.ch/sample/b86e4bff935db9345cc1467e615ff4fbe292fae618ae927595d328cfd9e8a08f/),
+we go from
+[10/61](https://www.virustotal.com/gui/file/b86e4bff935db9345cc1467e615ff4fbe292fae618ae927595d328cfd9e8a08f)
+to
+[0/63](https://www.virustotal.com/gui/file/8791188aaf7655093307e46fa68e3705ee7249cb81e05ea416ae96ad2fd2f0f2)
+on virus total:
+![](./examples/images/braodo.png)
+
+Obfuscating [Python-File-Stealer](https://github.com/KrizzhSriskantharajah-UK/Python-File-Stealer),
+we go from
+[4/63](https://www.virustotal.com/gui/file/2fc798f1df42adae3af2f7d2623edc74f6b8f08a7ae16ef3b67305c4ad668c82)
+to
+[0/63](https://www.virustotal.com/gui/file/8d529e6ee2806986ca376a427d683fdf6980d6332134e4759d790d604d6b5dcb)
+on virus total:
+![](./examples/images/python_stealer.png)
+
 ## Install
 
 There are multiple installation options, with PIP, a virtualenv, a container, or with Nix.
@@ -253,7 +293,7 @@ echo "print('Hello, world')" | pof -f obfuscator -k UUIDObfuscator | python
 
 ### Obfuscator
 
-`NamesObfuscator` the most basic obfuscator is changing variables, classes, function names, and imports.
+`NamesObfuscator` the most basic obfuscator is renaming variables, classes, functions, and imports.
 
 Source in `examples/source.py`.
 
@@ -307,6 +347,9 @@ print('Helnelemd'.replace('nelem','lo, worl'))
 # One on n
 print("".join([d if g%3==0 else""for g,d in enumerate('H9IesYlvJl5loU4,dK nDw51ovsrozl0UdoI!jL')]))
 
+# Hex-encoded
+print('\x48\x65\x6c\x6c\x6f\x2c\x20\x77\x6f\x72\x6c\x64')
+
 # Unicode
 print('\u0048\u0065\u006c\u006c\u006f\u002c\u0020\u0077\u006f\u0072\u006c\u0064')
 

{python_obfuscation_framework-1.7.2 → python_obfuscation_framework-1.7.4}/pof/obfuscator/definitions.py

@@ -19,6 +19,8 @@
 Rename function and classes names using external package: rope
 """
 
+# https://rope.readthedocs.io/en/latest/library.html
+
 import ast
 import io
 import keyword
@@ -30,6 +32,7 @@ from pof.logger import logger
 from pof.utils.generator import BasicGenerator
 
 try:
+    import rope
     from rope.base.project import Project
     from rope.refactor.rename import Rename
 
@@ -218,7 +221,7 @@ class DefinitionsObfuscator:
 
     DEFAULT_TMP_DIR = ".pof_cache"
 
-    def __init__(self, generator=None, tmp_dir=None, *, clean=False) -> None:
+    def __init__(self, generator=None, tmp_dir=None, *, clean=True) -> None:
         if generator is None:
             generator = BasicGenerator.alphabet_generator()
         self.generator = generator
@@ -303,8 +306,7 @@ class DefinitionsObfuscator:
 
         local_names = self.get_local(tokens)
 
-        msg = f"found {len(local_names)} local names"
-        logger.debug(msg)
+        logger.debug(f"found {len(local_names)} local names")
 
         self.create_tmp_dir()
 
@@ -312,35 +314,36 @@ class DefinitionsObfuscator:
         tmp_file_path = self.create_tmp_file(tokens, mod_name)
 
         # TODO (deoktr): find a way better way, do everything in memory
-        proj = Project(self.tmp_dir)
-        mod = proj.get_module(mod_name)
+        project = Project(self.tmp_dir)
+        mod = project.get_module(mod_name)
 
         todo = len(local_names)
         for done, name in enumerate(local_names):
             new_name = self.generate_new_name()
-            msg = f"{done + 1}/{todo} changing var {name} to {new_name}"
-            logger.debug(msg)
+            logger.debug(f"{done + 1}/{todo} renaming {name} to {new_name}")
             try:
                 old_name = mod.get_attribute(name)
-
                 pymod, lineno = old_name.get_definition_location()
-                # lineno_start, lineno_end = pymod.logical_lines.logical_line_in(lineno)
-
+                # pymod.logical_lines.logical_line_in(lineno)
                 offset = pymod.resource.read().index(
                     old_name.pyobject.get_name(),
                     pymod.lines.get_line_start(lineno),
                 )
+                renamer = Rename(project, pymod.get_resource(), offset)
+                change = renamer.get_changes(new_name)
+                project.do(change)
+            except (
+                # can happen on class functions
+                rope.base.exceptions.AttributeNotFoundError,
+                # this can happen if the function is not called for example and
+                # for other very obscure reasons
+                ValueError,
+            ):
+                logger.error(f"error trying to obfuscate var {name}")
+            except Exception as e:  # noqa: BLE001
+                logger.exception(f"error trying to obfuscate var {name}: {e!s}")
 
-                changes = Rename(proj, pymod.get_resource(), offset).get_changes(
-                    new_name,
-                )
-
-                proj.do(changes)
-            except Exception:  # noqa: BLE001
-                msg = f"error trying to obfuscate var {name}"
-                logger.error(msg)
-                # logger.exception(msg)
-        proj.close()
+        project.close()
 
         # finish by reading the file one last time
         with tmp_file_path.open() as f:

{python_obfuscation_framework-1.7.2 → python_obfuscation_framework-1.7.4}/pof/obfuscator/names.py

@@ -227,9 +227,11 @@ class NamesObfuscator:
         "update",  # on dict
         "copy",  # copy dict or list
         "join",  # on string "".join()
+        "decode",  # on string "".decode()
+        "encode",  # on string "".encode()
         "__dict__",
-        "quine",  # quine is used by pof to get the quine output
         # TODO (deoktr): add all the others
+        "quine",  # quine is used by pof to get the quine output
     )
 
     RESERVED = RESERVED_WORDS + BUILTINS + tuple(keyword.kwlist)

{python_obfuscation_framework-1.7.2 → python_obfuscation_framework-1.7.4}/pof/obfuscator/names_rope.py

@@ -209,7 +209,11 @@ class NamesRopeObfuscator:
         "update",  # on dict
         "copy",  # copy dict or list
         "join",  # on string "".join()
+        "decode",  # on string "".decode()
+        "encode",  # on string "".encode()
+        "__dict__",
         # TODO (deoktr): add all the others
+        "quine",  # quine is used by pof to get the quine output
     )
 
     RESERVED = RESERVED_WORDS + BUILTINS + tuple(keyword.kwlist)
@@ -344,7 +348,7 @@ class NamesRopeObfuscator:
         imports = self.get_imports(tokens)
         local_names = self.get_local(tokens, imports)
 
-        msg = f"found {len(local_names)} local names"
+        msg = f"found {len(local_names)} local names to obfuscate"
         logger.debug(msg)
 
         self.create_tmp_dir()
@@ -359,7 +363,7 @@ class NamesRopeObfuscator:
         todo = len(local_names)
         for done, name in enumerate(local_names):
             new_name = self.generate_new_name()
-            msg = f"{done + 1}/{todo} changing var {name} to {new_name}"
+            msg = f"{done + 1}/{todo} renaming {name} to {new_name}"
             logger.debug(msg)
             try:
                 old_name = mod.get_attribute(name)

{python_obfuscation_framework-1.7.2 → python_obfuscation_framework-1.7.4}/pof/obfuscator/strings.py

@@ -49,11 +49,12 @@ class StringsObfuscator:
         ADDITION = 2  # FIXME (deoktr): doesn't seems to work <
         ONLY_ADDITION = 3
         BASE85 = 4
-        UNICODE = 5
-        SHIFT = 6
-        REPLACE = 7
-        REVERSE = 8
-        ONE_ON_N = 9
+        HEX = 5
+        UNICODE = 6
+        SHIFT = 7
+        REPLACE = 8
+        REVERSE = 9
+        ONE_ON_N = 10
 
     ALL = (
         Strats.BASE64,
@@ -134,6 +135,18 @@ class StringsObfuscator:
             (RPAR, ")"),
         ]
 
+    @staticmethod
+    def hex(tokval: str):
+        # Hello --> \x48\x65\x6c\x6c\x6f
+        raw_string = eval(tokval)  # noqa: S307
+        if isinstance(raw_string, bytes):
+            raw_string = raw_string.decode()
+        encoded = ""
+        for c in raw_string:
+            hexcode = f"\\x{hex(ord(c))[2:]:0>2}" if not c.isdigit() else c  # noqa: FURB116
+            encoded += hexcode
+        return [(STRING, f"'{encoded}'")]
+
     @staticmethod
     def unicode(tokval: str):
         # Hell --> \u0048\u0065\u006C\u006C
@@ -327,6 +340,7 @@ class StringsObfuscator:
             strategies = list(strategies)
             strategies.extend(
                 [
+                    self.Strats.HEX,
                     self.Strats.UNICODE,
                     self.Strats.SHIFT,
                 ],
@@ -342,6 +356,8 @@ class StringsObfuscator:
             tokens = self.only_additions(tokval)
         elif strategy == self.Strats.BASE85:
             tokens = self.obf_base85(tokval)
+        elif strategy == self.Strats.HEX:
+            tokens = self.hex(tokval)
         elif strategy == self.Strats.UNICODE:
             tokens = self.unicode(tokval)
         elif strategy == self.Strats.SHIFT:

{python_obfuscation_framework-1.7.2 → python_obfuscation_framework-1.7.4}/pof/utils/generator/unicode.py

@@ -16,6 +16,7 @@
 
 """Unicode random names generators."""
 
+import ast
 import random
 
 from .base import BaseGenerator
@@ -35,7 +36,7 @@ class UnicodeGenerator(BaseGenerator):
             if name in previous or name in cls.RESERVED:
                 continue
             try:
-                exec(f"{name}=None")  # noqa: S102
+                ast.parse(f"{name}=None")
 
                 # if we need to call `getattr` on the variable name, then normalize
                 # the variable name BEFORE adding it to the string, or uncomment the

{python_obfuscation_framework-1.7.2 → python_obfuscation_framework-1.7.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "python-obfuscation-framework"
-version = "1.7.2"
+version = "1.7.4"
 description = "Python Obfuscation Framework"
 readme = "README.md"
 requires-python = ">=3.5"

{python_obfuscation_framework-1.7.2 → python_obfuscation_framework-1.7.4/python_obfuscation_framework.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-obfuscation-framework
-Version: 1.7.2
+Version: 1.7.4
 Summary: Python Obfuscation Framework
 Author-email: deoktr <35725720+deoktr@users.noreply.github.com>
 Maintainer-email: deoktr <35725720+deoktr@users.noreply.github.com>
@@ -173,6 +173,46 @@ globals()["".join([chr(ord(i) - 3) for i in "bbvqlwolxebb"[::-1]])].__dict__[
 
 More examples and usage can be found in `examples/` or in the section bellow.
 
+## Effectiveness
+
+The tests are done using the default configuration of pof, no sandbox evasion
+technique was used with obfuscation. Also note that I haven't tested the
+malware to see if they still work, they should, but they may break with
+obfuscation.
+
+Obfuscating a [Lazarus malware](https://bazaar.abuse.ch/sample/c3cb53c4a290bc9ab6c9eb825ed0ca38bb54bcc4a59f33be72becdff80cb091b/),
+we go from
+[18/63](https://www.virustotal.com/gui/file/c3cb53c4a290bc9ab6c9eb825ed0ca38bb54bcc4a59f33be72becdff80cb091b)
+to
+[0/63](https://www.virustotal.com/gui/file/2f427bc784e2a865d8f000c21f366cb8459842f97c56465cbe963f221b3e115a)
+on virus total:
+![](./examples/images/lazarus.png)
+
+Obfuscating [BTC-Clipper](https://github.com/NightfallGT/BTC-Clipper), we go
+from
+[13/64](https://www.virustotal.com/gui/file/9817d8de9bf7d2740b5b66e30ec1afdd98d7d119074a61cbba05514d4ebdc149)
+to
+[0/63](https://www.virustotal.com/gui/file/71631daa26fe6c2cf77d282a16f8b3fd31e4794b63709b956599563b95e64816)
+on virus total:
+![](./examples/images/btc_clipper.png)
+
+Obfuscating a
+[Braodo malware](https://bazaar.abuse.ch/sample/b86e4bff935db9345cc1467e615ff4fbe292fae618ae927595d328cfd9e8a08f/),
+we go from
+[10/61](https://www.virustotal.com/gui/file/b86e4bff935db9345cc1467e615ff4fbe292fae618ae927595d328cfd9e8a08f)
+to
+[0/63](https://www.virustotal.com/gui/file/8791188aaf7655093307e46fa68e3705ee7249cb81e05ea416ae96ad2fd2f0f2)
+on virus total:
+![](./examples/images/braodo.png)
+
+Obfuscating [Python-File-Stealer](https://github.com/KrizzhSriskantharajah-UK/Python-File-Stealer),
+we go from
+[4/63](https://www.virustotal.com/gui/file/2fc798f1df42adae3af2f7d2623edc74f6b8f08a7ae16ef3b67305c4ad668c82)
+to
+[0/63](https://www.virustotal.com/gui/file/8d529e6ee2806986ca376a427d683fdf6980d6332134e4759d790d604d6b5dcb)
+on virus total:
+![](./examples/images/python_stealer.png)
+
 ## Install
 
 There are multiple installation options, with PIP, a virtualenv, a container, or with Nix.
@@ -298,7 +338,7 @@ echo "print('Hello, world')" | pof -f obfuscator -k UUIDObfuscator | python
 
 ### Obfuscator
 
-`NamesObfuscator` the most basic obfuscator is changing variables, classes, function names, and imports.
+`NamesObfuscator` the most basic obfuscator is renaming variables, classes, functions, and imports.
 
 Source in `examples/source.py`.
 
@@ -352,6 +392,9 @@ print('Helnelemd'.replace('nelem','lo, worl'))
 # One on n
 print("".join([d if g%3==0 else""for g,d in enumerate('H9IesYlvJl5loU4,dK nDw51ovsrozl0UdoI!jL')]))
 
+# Hex-encoded
+print('\x48\x65\x6c\x6c\x6f\x2c\x20\x77\x6f\x72\x6c\x64')
+
 # Unicode
 print('\u0048\u0065\u006c\u006c\u006f\u002c\u0020\u0077\u006f\u0072\u006c\u0064')
 

{python_obfuscation_framework-1.7.2 → python_obfuscation_framework-1.7.4}/python_obfuscation_framework.egg-info/SOURCES.txt

@@ -163,11 +163,19 @@ tests/obfuscator/test_b32.py
 tests/obfuscator/test_b32hex.py
 tests/obfuscator/test_b64.py
 tests/obfuscator/test_b85.py
+tests/obfuscator/test_binascii.py
+tests/obfuscator/test_call.py
 tests/obfuscator/test_comments.py
+tests/obfuscator/test_doc.py
 tests/obfuscator/test_docstrings.py
 tests/obfuscator/test_exceptions.py
+tests/obfuscator/test_ipv6encoding.py
+tests/obfuscator/test_number.py
 tests/obfuscator/test_print.py
+tests/obfuscator/test_snt.py
+tests/obfuscator/test_tokens.py
 tests/obfuscator/test_xor.py
+tests/obfuscator/utils.py
 tests/obfuscator/test_names/test_names.py
 tests/obfuscator/test_names/code/out.py
 tests/obfuscator/test_names/code/source.py

python_obfuscation_framework-1.7.4/tests/obfuscator/test_a85.py

@@ -0,0 +1,41 @@
+# POF, a free and open source Python obfuscation framework.
+# Copyright (C) 2022 - 2025  POF Team
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+import io
+from tokenize import generate_tokens, untokenize
+
+from pof.obfuscator import NumberObfuscator
+from .utils import exec_capture
+
+source = """
+def main_function():
+    a = [1, 2, 3, 4]
+    b = a[0] + a[1]
+    c = a[2] + a[3]
+    print(b + c)
+
+main_function()
+"""
+
+
+def test_NumberObfuscator():
+    io_obj = io.StringIO(source)
+    tokens = list(generate_tokens(io_obj.readline))
+    tokens = NumberObfuscator().obfuscate_tokens(tokens)
+
+    out = untokenize(tokens)
+    captured_output = exec_capture(out)
+    assert captured_output == "10\n"

{python_obfuscation_framework-1.7.2 → python_obfuscation_framework-1.7.4}/tests/obfuscator/test_b16.py

@@ -18,6 +18,7 @@ import io
 from tokenize import generate_tokens, untokenize
 
 from pof.obfuscator import Base16Obfuscator
+from .utils import exec_capture
 
 source = """
 def main_function():
@@ -35,4 +36,5 @@ def test_Base16Obfuscator():
     tokens = Base16Obfuscator().obfuscate_tokens(tokens)
 
     out = untokenize(tokens)
-    exec(out)
+    captured_output = exec_capture(out)
+    assert captured_output == "Hello, world!\n"

{python_obfuscation_framework-1.7.2 → python_obfuscation_framework-1.7.4}/tests/obfuscator/test_b32.py

@@ -18,6 +18,7 @@ import io
 from tokenize import generate_tokens, untokenize
 
 from pof.obfuscator import Base32Obfuscator
+from .utils import exec_capture
 
 source = """
 def main_function():
@@ -35,4 +36,5 @@ def test_Base32Obfuscator():
     tokens = Base32Obfuscator().obfuscate_tokens(tokens)
 
     out = untokenize(tokens)
-    exec(out)
+    captured_output = exec_capture(out)
+    assert captured_output == "Hello, world!\n"

{python_obfuscation_framework-1.7.2 → python_obfuscation_framework-1.7.4}/tests/obfuscator/test_b32hex.py

@@ -18,6 +18,7 @@ import io
 from tokenize import generate_tokens, untokenize
 
 from pof.obfuscator import Base32HexObfuscator
+from .utils import exec_capture
 
 source = """
 def main_function():
@@ -35,4 +36,5 @@ def test_Base32HexObfuscator():
     tokens = Base32HexObfuscator().obfuscate_tokens(tokens)
 
     out = untokenize(tokens)
-    exec(out)
+    captured_output = exec_capture(out)
+    assert captured_output == "Hello, world!\n"

{python_obfuscation_framework-1.7.2 → python_obfuscation_framework-1.7.4}/tests/obfuscator/test_b64.py

@@ -18,6 +18,7 @@ import io
 from tokenize import generate_tokens, untokenize
 
 from pof.obfuscator import Base64Obfuscator
+from .utils import exec_capture
 
 source = """
 def main_function():
@@ -35,4 +36,5 @@ def test_Base64Obfuscator():
     tokens = Base64Obfuscator().obfuscate_tokens(tokens)
 
     out = untokenize(tokens)
-    exec(out)
+    captured_output = exec_capture(out)
+    assert captured_output == "Hello, world!\n"

{python_obfuscation_framework-1.7.2 → python_obfuscation_framework-1.7.4}/tests/obfuscator/test_b85.py

@@ -18,6 +18,7 @@ import io
 from tokenize import generate_tokens, untokenize
 
 from pof.obfuscator import Base85Obfuscator
+from .utils import exec_capture
 
 source = """
 def main_function():
@@ -35,4 +36,5 @@ def test_Base85Obfuscator():
     tokens = Base85Obfuscator().obfuscate_tokens(tokens)
 
     out = untokenize(tokens)
-    exec(out)
+    captured_output = exec_capture(out)
+    assert captured_output == "Hello, world!\n"

python_obfuscation_framework-1.7.4/tests/obfuscator/test_binascii.py

@@ -0,0 +1,40 @@
+# POF, a free and open source Python obfuscation framework.
+# Copyright (C) 2022 - 2025  POF Team
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+import io
+from tokenize import generate_tokens, untokenize
+
+from pof.obfuscator import BinasciiObfuscator
+from .utils import exec_capture
+
+source = """
+def main_function():
+    x = "Hello"
+    y = ", world!"
+    print(x + y)
+
+main_function()
+"""
+
+
+def test_BinasciiObfuscator():
+    io_obj = io.StringIO(source)
+    tokens = list(generate_tokens(io_obj.readline))
+    tokens = BinasciiObfuscator().obfuscate_tokens(tokens)
+
+    out = untokenize(tokens)
+    captured_output = exec_capture(out)
+    assert captured_output == "Hello, world!\n"

python_obfuscation_framework-1.7.4/tests/obfuscator/test_call.py

@@ -0,0 +1,40 @@
+# POF, a free and open source Python obfuscation framework.
+# Copyright (C) 2022 - 2025  POF Team
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+import io
+from tokenize import generate_tokens, untokenize
+
+from pof.obfuscator import CallObfuscator
+from .utils import exec_capture
+
+source = """
+def main_function():
+    x = "Hello"
+    y = ", world!"
+    print(x + y)
+
+main_function()
+"""
+
+
+def test_CallObfuscator():
+    io_obj = io.StringIO(source)
+    tokens = list(generate_tokens(io_obj.readline))
+    tokens = CallObfuscator().obfuscate_tokens(tokens)
+
+    out = untokenize(tokens)
+    captured_output = exec_capture(out)
+    assert captured_output == "Hello, world!\n"