python-obfuscation-framework 1.8.0__tar.gz → 1.9.1__tar.gz

{python_obfuscation_framework-1.8.0/python_obfuscation_framework.egg-info → python_obfuscation_framework-1.9.1}/PKG-INFO

@@ -1,13 +1,13 @@
 Metadata-Version: 2.4
 Name: python-obfuscation-framework
-Version: 1.8.0
+Version: 1.9.1
 Summary: Python Obfuscation Framework
 Author-email: deoktr <35725720+deoktr@users.noreply.github.com>
 Maintainer-email: deoktr <35725720+deoktr@users.noreply.github.com>
 License-Expression: GPL-3.0-or-later
-Project-URL: Homepage, https://github.com/deoktr/pof
-Project-URL: Bug Reports, https://github.com/deoktr/pof/issues
-Project-URL: Source, https://github.com/deoktr/pof/
+Project-URL: Homepage, https://github.com/deoktr/Python-Obfuscation-Framework
+Project-URL: Bug Reports, https://github.com/deoktr/Python-Obfuscation-Framework/issues
+Project-URL: Source, https://github.com/deoktr/Python-Obfuscation-Framework/
 Keywords: cybersecurity,obfuscation,obfuscator,stager,payload
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
@@ -43,13 +43,13 @@ Requires-Dist: twine; extra == "build"
 Requires-Dist: check-manifest; extra == "build"
 Dynamic: license-file
 
-# pof
+# Python Obfuscation Framework - pof
 
 [![python-obfuscation-framework-pypi](https://img.shields.io/pypi/v/python-obfuscation-framework.svg)](https://pypi.org/project/python-obfuscation-framework)
 
 Test it at [pof.run](https://pof.run).
 
-Python Obfuscation Framework, a complete Python offensive security toolkit to generate staged obfuscated payloads.
+Python Obfuscation Framework (pof), a complete Python offensive security toolkit to generate staged obfuscated payloads.
 
 pof will allow you to:
 
@@ -313,51 +313,48 @@ echo "print('Hello, world')" | pof -f obfuscator -k UUIDObfuscator | python
 
 ### Obfuscator
 
-`NamesObfuscator` the most basic obfuscator is renaming variables, classes, functions, and imports.
+`VariablesObfuscator` the most basic obfuscator will rename variables.
 
 Source in `examples/source.py`.
 
 ```python
-import os as pT2Ic6
+import os
 
-def SeIpTxc():
+def get_linux_release_info():
     """Get Linux release info from /etc/os-release."""
-    pDkFbLZO = '/etc/os-release'
-    if not pT2Ic6.path.exists(pDkFbLZO):
+    uggNx = '/etc/os-release'
+    if not os.path.exists(uggNx):
         print('OS release file not found. This might not be a Linux system.')
         return None
-    rDq = {}
+    LY3mN = {}
     try:
-        with open(pDkFbLZO, 'r') as bpBm:
-            for UOFvQ in bpBm:
-                if not UOFvQ or '=' not in UOFvQ:
+        with open(uggNx, 'r') as kj0:
+            for Stv9o in kj0:
+                if not Stv9o or '=' not in Stv9o:
                     continue
-                aSFP, UUka_V_7 = UOFvQ.ObwKdQ6LVz().g54Qp('=', 1)
-                UUka_V_7 = UUka_V_7.ObwKdQ6LVz('"\'\n')
-                rDq[aSFP] = UUka_V_7
+                l0j, QE5kCKYwMe = Stv9o.strip().split('=', 1)
+                QE5kCKYwMe = QE5kCKYwMe.strip('"\'\n')
+                LY3mN[l0j] = QE5kCKYwMe
         print('\nLinux Release Information:')
-        print(f"Distribution: {rDq.IDiXt2('NAME', 'Unknown')}")
-        print(f"Version: {rDq.IDiXt2('VERSION', 'Unknown')}")
-        print(f"Version ID: {rDq.IDiXt2('VERSION_ID', 'Unknown')}")
-        print(f"Pretty Name: {rDq.IDiXt2('PRETTY_NAME', 'Unknown')}")
-        return rDq
-    except Exception as FXfc:
-        print(f'Error reading release file: {FXfc}')
+        print(f"Distribution: {LY3mN.get('NAME', 'Unknown')}")
+        print(f"Version: {LY3mN.get('VERSION', 'Unknown')}")
+        print(f"Version ID: {LY3mN.get('VERSION_ID', 'Unknown')}")
+        print(f"Pretty Name: {LY3mN.get('PRETTY_NAME', 'Unknown')}")
+        return LY3mN
+    except Exception as e:
+        print(f'Error reading release file: {e}')
         return None
 if __name__ == '__main__':
-    if pT2Ic6.name == 'posix' and pT2Ic6.path.exists('/etc/os-release'):
-        Sd65C = SeIpTxc()
+    if os.name == 'posix' and os.path.exists('/etc/os-release'):
+        E_R72 = get_linux_release_info()
     else:
         print('This script is designed for Linux systems.')
 ```
 
-> [!WARNING]
-> Right now this obfuscator can fail under very specific circumstances, see `pof/obfuscator/names.py`.
+`DefinitionsObfuscator` obfuscate function names.
 
-An alternative is `DefinitionsObfuscator`, that will only obfuscate function declarations.
-
-> [!NOTE]
-> There is an alternative implementation at `NamesRopeObfuscator` that uses `rope`, it's a work in progress and currently does not obfuscate variables declared inside functions.
+> [!WARNING]
+> `NamesObfuscator` obfuscator is renaming variables, classes, functions, and imports. Right now this obfuscator can fail under very specific circumstances, see `pof/obfuscator/names.py`. There is an alternative implementation at `NamesRopeObfuscator` that uses `rope`, it's a work in progress and currently does not obfuscate variables declared inside functions.
 
 Other very basic obfuscation functions are done by specific obfuscators like:
 

{python_obfuscation_framework-1.8.0 → python_obfuscation_framework-1.9.1}/README.md

@@ -1,10 +1,10 @@
-# pof
+# Python Obfuscation Framework - pof
 
 [![python-obfuscation-framework-pypi](https://img.shields.io/pypi/v/python-obfuscation-framework.svg)](https://pypi.org/project/python-obfuscation-framework)
 
 Test it at [pof.run](https://pof.run).
 
-Python Obfuscation Framework, a complete Python offensive security toolkit to generate staged obfuscated payloads.
+Python Obfuscation Framework (pof), a complete Python offensive security toolkit to generate staged obfuscated payloads.
 
 pof will allow you to:
 
@@ -268,51 +268,48 @@ echo "print('Hello, world')" | pof -f obfuscator -k UUIDObfuscator | python
 
 ### Obfuscator
 
-`NamesObfuscator` the most basic obfuscator is renaming variables, classes, functions, and imports.
+`VariablesObfuscator` the most basic obfuscator will rename variables.
 
 Source in `examples/source.py`.
 
 ```python
-import os as pT2Ic6
+import os
 
-def SeIpTxc():
+def get_linux_release_info():
     """Get Linux release info from /etc/os-release."""
-    pDkFbLZO = '/etc/os-release'
-    if not pT2Ic6.path.exists(pDkFbLZO):
+    uggNx = '/etc/os-release'
+    if not os.path.exists(uggNx):
         print('OS release file not found. This might not be a Linux system.')
         return None
-    rDq = {}
+    LY3mN = {}
     try:
-        with open(pDkFbLZO, 'r') as bpBm:
-            for UOFvQ in bpBm:
-                if not UOFvQ or '=' not in UOFvQ:
+        with open(uggNx, 'r') as kj0:
+            for Stv9o in kj0:
+                if not Stv9o or '=' not in Stv9o:
                     continue
-                aSFP, UUka_V_7 = UOFvQ.ObwKdQ6LVz().g54Qp('=', 1)
-                UUka_V_7 = UUka_V_7.ObwKdQ6LVz('"\'\n')
-                rDq[aSFP] = UUka_V_7
+                l0j, QE5kCKYwMe = Stv9o.strip().split('=', 1)
+                QE5kCKYwMe = QE5kCKYwMe.strip('"\'\n')
+                LY3mN[l0j] = QE5kCKYwMe
         print('\nLinux Release Information:')
-        print(f"Distribution: {rDq.IDiXt2('NAME', 'Unknown')}")
-        print(f"Version: {rDq.IDiXt2('VERSION', 'Unknown')}")
-        print(f"Version ID: {rDq.IDiXt2('VERSION_ID', 'Unknown')}")
-        print(f"Pretty Name: {rDq.IDiXt2('PRETTY_NAME', 'Unknown')}")
-        return rDq
-    except Exception as FXfc:
-        print(f'Error reading release file: {FXfc}')
+        print(f"Distribution: {LY3mN.get('NAME', 'Unknown')}")
+        print(f"Version: {LY3mN.get('VERSION', 'Unknown')}")
+        print(f"Version ID: {LY3mN.get('VERSION_ID', 'Unknown')}")
+        print(f"Pretty Name: {LY3mN.get('PRETTY_NAME', 'Unknown')}")
+        return LY3mN
+    except Exception as e:
+        print(f'Error reading release file: {e}')
         return None
 if __name__ == '__main__':
-    if pT2Ic6.name == 'posix' and pT2Ic6.path.exists('/etc/os-release'):
-        Sd65C = SeIpTxc()
+    if os.name == 'posix' and os.path.exists('/etc/os-release'):
+        E_R72 = get_linux_release_info()
     else:
         print('This script is designed for Linux systems.')
 ```
 
-> [!WARNING]
-> Right now this obfuscator can fail under very specific circumstances, see `pof/obfuscator/names.py`.
+`DefinitionsObfuscator` obfuscate function names.
 
-An alternative is `DefinitionsObfuscator`, that will only obfuscate function declarations.
-
-> [!NOTE]
-> There is an alternative implementation at `NamesRopeObfuscator` that uses `rope`, it's a work in progress and currently does not obfuscate variables declared inside functions.
+> [!WARNING]
+> `NamesObfuscator` obfuscator is renaming variables, classes, functions, and imports. Right now this obfuscator can fail under very specific circumstances, see `pof/obfuscator/names.py`. There is an alternative implementation at `NamesRopeObfuscator` that uses `rope`, it's a work in progress and currently does not obfuscate variables declared inside functions.
 
 Other very basic obfuscation functions are done by specific obfuscators like:
 

{python_obfuscation_framework-1.8.0 → python_obfuscation_framework-1.9.1}/pof/main.py

@@ -56,6 +56,7 @@ from pof.obfuscator import (
     NumberObfuscator,
     PrintObfuscator,
     StringsObfuscator,
+    VariablesObfuscator,
     XORObfuscator,
 )
 from pof.stager import ImageStager, RC4Stager
@@ -178,6 +179,8 @@ class Obfuscator(BaseObfuscator):
         # In this context, `baz` would be obfuscated, but it shouldn't because
         # the function is part of the `foo` imported module
         # tokens = NamesObfuscator(generator=generator).obfuscate_tokens(tokens)
+        # TODO (deoktr): use alternative variable obfuscator using the AST
+        # tokens = VariablesObfuscator().obfuscate_tokens(tokens)
 
         tokens = GlobalsObfuscator().obfuscate_tokens(tokens)
         tokens = BuiltinsObfuscator().obfuscate_tokens(tokens)
@@ -238,7 +241,9 @@ class Obfuscator(BaseObfuscator):
         tokens = self._get_tokens(source)
         tokens = CommentsObfuscator().obfuscate_tokens(tokens)
         generator = BasicGenerator.alphabet_generator()
-        tokens = NamesObfuscator(generator=generator).obfuscate_tokens(tokens)
+        # tokens = NamesObfuscator(generator=generator).obfuscate_tokens(tokens)
+        tokens = VariablesObfuscator(generator=generator).obfuscate_tokens(tokens)
+        tokens = DefinitionsObfuscator(generator=generator).obfuscate_tokens(tokens)
         tokens = IndentsObfuscator().obfuscate_tokens(tokens)
         tokens = NewlineObfuscator().obfuscate_tokens(tokens)
         return self._untokenize(tokens)
@@ -313,7 +318,9 @@ class Obfuscator(BaseObfuscator):
         #     # FIXME (deoktr): breaks if obf_builtins_rate=1 with NamesObfuscator
         #     obf_builtins_rate=0,
         # ).obfuscate_tokens(tokens)
-        tokens = NamesObfuscator(generator=generator).obfuscate_tokens(tokens)
+        # tokens = NamesObfuscator(generator=generator).obfuscate_tokens(tokens)
+        tokens = VariablesObfuscator(generator=generator).obfuscate_tokens(tokens)
+        tokens = DefinitionsObfuscator(generator=generator).obfuscate_tokens(tokens)
         tokens = ConstantsObfuscator(
             generator=generator,
             obf_number_rate=1,

{python_obfuscation_framework-1.8.0 → python_obfuscation_framework-1.9.1}/pof/obfuscator/__init__.py

@@ -57,6 +57,7 @@ from .stegano.ipv6encoding import IPv6Obfuscator
 from .stegano.macencoding import MACObfuscator
 from .stegano.uuidencoding import UUIDObfuscator
 from .strings import StringsObfuscator
+from .variables import VariablesObfuscator
 
 __all__ = [
     "ASCII85Obfuscator",
@@ -100,6 +101,7 @@ __all__ = [
     "StringsObfuscator",
     "TokensObfuscator",
     "UUIDObfuscator",
+    "VariablesObfuscator",
     "WhitespaceObfuscator",
     "XORObfuscator",
     "ZlibObfuscator",

python_obfuscation_framework-1.9.1/pof/obfuscator/variables.py

@@ -0,0 +1,116 @@
+# POF, a free and open source Python obfuscation framework.
+# Copyright (C) 2022 - 2026  Deoktr
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+import ast
+import io
+from tokenize import generate_tokens, untokenize
+
+from pof.logger import logger
+from pof.utils.generator import BasicGenerator
+
+
+class AstVarCollector(ast.NodeVisitor):
+    def __init__(self, reserved=None):
+        if reserved is None:
+            reserved = []
+        self.reserved = reserved
+
+        self.assigned = set()
+        self.globals = set()
+        self.args = set()
+
+    def is_valid(self, var) -> bool:
+        return var not in self.reserved
+
+    def visit_Global(self, node):
+        var = node.names
+        if not self.is_valid(var):
+            return
+
+        logger.debug("found globals variables to obfuscate: %s", var)
+        self.globals.update(var)
+
+    def visit_Name(self, node):
+        if not isinstance(node.ctx, ast.Store):
+            return
+
+        var = node.id
+        if not self.is_valid(var):
+            return
+
+        logger.debug("found variables names to obfuscate: %s", var)
+        self.assigned.add(var)
+
+    def visit_arg(self, node):
+        self.args.add(node.arg)
+        self.assigned.add(node.arg)
+
+
+class AstVarRenamer(ast.NodeTransformer):
+    def __init__(self, assigned, args, globals_, generator=None):
+        self.rename = set(assigned) - set(args) - set(globals_)
+
+        if generator is None:
+            generator = BasicGenerator.alphabet_generator()
+        self.generator = generator
+
+        self.new_names = {}
+
+    def generate_new_name(self):
+        return next(self.generator)
+
+    def get_new_name(self, name):
+        if name not in self.new_names:
+            new_name = self.generate_new_name()
+            self.new_names.update({name: new_name})
+        return self.new_names[name]
+
+    def visit_Name(self, node):
+        if node.id in self.rename:
+            node.id = self.get_new_name(node.id)
+        return node
+
+
+class VariablesObfuscator:
+    """Obfuscate local variables names using the AST."""
+
+    def __init__(self, generator=None, reserved=None) -> None:
+        if generator is None:
+            generator = BasicGenerator.alphabet_generator()
+        self.generator = generator
+
+        if reserved is None:
+            reserved = []
+        self.reserved = reserved
+
+    def obfuscate_tokens(self, tokens):
+        source = untokenize(tokens)
+        tree = ast.parse(source)
+
+        vc = AstVarCollector(reserved=self.reserved)
+        vc.visit(tree)
+
+        tree = AstVarRenamer(
+            vc.assigned,
+            vc.args,
+            vc.globals,
+            generator=self.generator,
+        ).visit(tree)
+        ast.fix_missing_locations(tree)
+
+        source = ast.unparse(tree)
+        io_obj = io.StringIO(source)
+        return list(generate_tokens(io_obj.readline))

{python_obfuscation_framework-1.8.0 → python_obfuscation_framework-1.9.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "python-obfuscation-framework"
-version = "1.8.0"
+version = "1.9.1"
 description = "Python Obfuscation Framework"
 readme = "README.md"
 requires-python = ">=3.5"
@@ -53,9 +53,9 @@ build = [
 ]
 
 [project.urls]
-"Homepage" = "https://github.com/deoktr/pof"
-"Bug Reports" = "https://github.com/deoktr/pof/issues"
-"Source" = "https://github.com/deoktr/pof/"
+"Homepage" = "https://github.com/deoktr/Python-Obfuscation-Framework"
+"Bug Reports" = "https://github.com/deoktr/Python-Obfuscation-Framework/issues"
+"Source" = "https://github.com/deoktr/Python-Obfuscation-Framework/"
 
 [project.scripts]
 pof = "pof.cli:_cli"

{python_obfuscation_framework-1.8.0 → python_obfuscation_framework-1.9.1/python_obfuscation_framework.egg-info}/PKG-INFO

@@ -1,13 +1,13 @@
 Metadata-Version: 2.4
 Name: python-obfuscation-framework
-Version: 1.8.0
+Version: 1.9.1
 Summary: Python Obfuscation Framework
 Author-email: deoktr <35725720+deoktr@users.noreply.github.com>
 Maintainer-email: deoktr <35725720+deoktr@users.noreply.github.com>
 License-Expression: GPL-3.0-or-later
-Project-URL: Homepage, https://github.com/deoktr/pof
-Project-URL: Bug Reports, https://github.com/deoktr/pof/issues
-Project-URL: Source, https://github.com/deoktr/pof/
+Project-URL: Homepage, https://github.com/deoktr/Python-Obfuscation-Framework
+Project-URL: Bug Reports, https://github.com/deoktr/Python-Obfuscation-Framework/issues
+Project-URL: Source, https://github.com/deoktr/Python-Obfuscation-Framework/
 Keywords: cybersecurity,obfuscation,obfuscator,stager,payload
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
@@ -43,13 +43,13 @@ Requires-Dist: twine; extra == "build"
 Requires-Dist: check-manifest; extra == "build"
 Dynamic: license-file
 
-# pof
+# Python Obfuscation Framework - pof
 
 [![python-obfuscation-framework-pypi](https://img.shields.io/pypi/v/python-obfuscation-framework.svg)](https://pypi.org/project/python-obfuscation-framework)
 
 Test it at [pof.run](https://pof.run).
 
-Python Obfuscation Framework, a complete Python offensive security toolkit to generate staged obfuscated payloads.
+Python Obfuscation Framework (pof), a complete Python offensive security toolkit to generate staged obfuscated payloads.
 
 pof will allow you to:
 
@@ -313,51 +313,48 @@ echo "print('Hello, world')" | pof -f obfuscator -k UUIDObfuscator | python
 
 ### Obfuscator
 
-`NamesObfuscator` the most basic obfuscator is renaming variables, classes, functions, and imports.
+`VariablesObfuscator` the most basic obfuscator will rename variables.
 
 Source in `examples/source.py`.
 
 ```python
-import os as pT2Ic6
+import os
 
-def SeIpTxc():
+def get_linux_release_info():
     """Get Linux release info from /etc/os-release."""
-    pDkFbLZO = '/etc/os-release'
-    if not pT2Ic6.path.exists(pDkFbLZO):
+    uggNx = '/etc/os-release'
+    if not os.path.exists(uggNx):
         print('OS release file not found. This might not be a Linux system.')
         return None
-    rDq = {}
+    LY3mN = {}
     try:
-        with open(pDkFbLZO, 'r') as bpBm:
-            for UOFvQ in bpBm:
-                if not UOFvQ or '=' not in UOFvQ:
+        with open(uggNx, 'r') as kj0:
+            for Stv9o in kj0:
+                if not Stv9o or '=' not in Stv9o:
                     continue
-                aSFP, UUka_V_7 = UOFvQ.ObwKdQ6LVz().g54Qp('=', 1)
-                UUka_V_7 = UUka_V_7.ObwKdQ6LVz('"\'\n')
-                rDq[aSFP] = UUka_V_7
+                l0j, QE5kCKYwMe = Stv9o.strip().split('=', 1)
+                QE5kCKYwMe = QE5kCKYwMe.strip('"\'\n')
+                LY3mN[l0j] = QE5kCKYwMe
         print('\nLinux Release Information:')
-        print(f"Distribution: {rDq.IDiXt2('NAME', 'Unknown')}")
-        print(f"Version: {rDq.IDiXt2('VERSION', 'Unknown')}")
-        print(f"Version ID: {rDq.IDiXt2('VERSION_ID', 'Unknown')}")
-        print(f"Pretty Name: {rDq.IDiXt2('PRETTY_NAME', 'Unknown')}")
-        return rDq
-    except Exception as FXfc:
-        print(f'Error reading release file: {FXfc}')
+        print(f"Distribution: {LY3mN.get('NAME', 'Unknown')}")
+        print(f"Version: {LY3mN.get('VERSION', 'Unknown')}")
+        print(f"Version ID: {LY3mN.get('VERSION_ID', 'Unknown')}")
+        print(f"Pretty Name: {LY3mN.get('PRETTY_NAME', 'Unknown')}")
+        return LY3mN
+    except Exception as e:
+        print(f'Error reading release file: {e}')
         return None
 if __name__ == '__main__':
-    if pT2Ic6.name == 'posix' and pT2Ic6.path.exists('/etc/os-release'):
-        Sd65C = SeIpTxc()
+    if os.name == 'posix' and os.path.exists('/etc/os-release'):
+        E_R72 = get_linux_release_info()
     else:
         print('This script is designed for Linux systems.')
 ```
 
-> [!WARNING]
-> Right now this obfuscator can fail under very specific circumstances, see `pof/obfuscator/names.py`.
+`DefinitionsObfuscator` obfuscate function names.
 
-An alternative is `DefinitionsObfuscator`, that will only obfuscate function declarations.
-
-> [!NOTE]
-> There is an alternative implementation at `NamesRopeObfuscator` that uses `rope`, it's a work in progress and currently does not obfuscate variables declared inside functions.
+> [!WARNING]
+> `NamesObfuscator` obfuscator is renaming variables, classes, functions, and imports. Right now this obfuscator can fail under very specific circumstances, see `pof/obfuscator/names.py`. There is an alternative implementation at `NamesRopeObfuscator` that uses `rope`, it's a work in progress and currently does not obfuscate variables declared inside functions.
 
 Other very basic obfuscation functions are done by specific obfuscators like:
 

{python_obfuscation_framework-1.8.0 → python_obfuscation_framework-1.9.1}/python_obfuscation_framework.egg-info/SOURCES.txt

@@ -59,6 +59,7 @@ pof/obfuscator/names_rope.py
 pof/obfuscator/numbers.py
 pof/obfuscator/restructure.py
 pof/obfuscator/strings.py
+pof/obfuscator/variables.py
 pof/obfuscator/cipher/__init__.py
 pof/obfuscator/cipher/deep_encryption.py
 pof/obfuscator/cipher/rc4.py