python-obfuscation-framework 1.9.4__tar.gz → 1.10.0__tar.gz

{python_obfuscation_framework-1.9.4/python_obfuscation_framework.egg-info → python_obfuscation_framework-1.10.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-obfuscation-framework
-Version: 1.9.4
+Version: 1.10.0
 Summary: Python Obfuscation Framework
 Author-email: deoktr <35725720+deoktr@users.noreply.github.com>
 Maintainer-email: deoktr <35725720+deoktr@users.noreply.github.com>
@@ -320,53 +320,44 @@ echo "print('Hello, world')" | pof -f obfuscator -k UUIDObfuscator | python
 
 ### Obfuscator
 
-`VariablesObfuscator` the most basic obfuscator will rename variables.
+`NamesObfuscator` obfuscator is renaming variables, classes, and functions.
 
 Source in `examples/source.py`.
 
 ```python
 import os
 
-def get_linux_release_info():
+def BJM4FaQJf1():
     """Get Linux release info from /etc/os-release."""
-    uggNx = '/etc/os-release'
-    if not os.path.exists(uggNx):
+    h77 = '/etc/os-release'
+    if not os.path.exists(h77):
         print('OS release file not found. This might not be a Linux system.')
         return None
-    LY3mN = {}
+    jkFr = {}
     try:
-        with open(uggNx, 'r') as kj0:
-            for Stv9o in kj0:
-                if not Stv9o or '=' not in Stv9o:
+        with open(h77, 'r') as LfQ:
+            for GIVt40c7RR in LfQ:
+                if not GIVt40c7RR or '=' not in GIVt40c7RR:
                     continue
-                l0j, QE5kCKYwMe = Stv9o.strip().split('=', 1)
-                QE5kCKYwMe = QE5kCKYwMe.strip('"\'\n')
-                LY3mN[l0j] = QE5kCKYwMe
+                KPO5j, RQvTXmL = GIVt40c7RR.strip().split('=', 1)
+                RQvTXmL = RQvTXmL.strip('"\'\n')
+                jkFr[KPO5j] = RQvTXmL
         print('\nLinux Release Information:')
-        print(f"Distribution: {LY3mN.get('NAME', 'Unknown')}")
-        print(f"Version: {LY3mN.get('VERSION', 'Unknown')}")
-        print(f"Version ID: {LY3mN.get('VERSION_ID', 'Unknown')}")
-        print(f"Pretty Name: {LY3mN.get('PRETTY_NAME', 'Unknown')}")
-        return LY3mN
-    except Exception as e:
-        print(f'Error reading release file: {e}')
+        print(f"Distribution: {jkFr.get('NAME', 'Unknown')}")
+        print(f"Version: {jkFr.get('VERSION', 'Unknown')}")
+        print(f"Version ID: {jkFr.get('VERSION_ID', 'Unknown')}")
+        print(f"Pretty Name: {jkFr.get('PRETTY_NAME', 'Unknown')}")
+        return jkFr
+    except Exception as LzYLqi_:
+        print(f'Error reading release file: {LzYLqi_}')
         return None
 if __name__ == '__main__':
     if os.name == 'posix' and os.path.exists('/etc/os-release'):
-        E_R72 = get_linux_release_info()
+        yv4HAqmn = BJM4FaQJf1()
     else:
         print('This script is designed for Linux systems.')
 ```
 
-`DefinitionsObfuscator` obfuscate function names.
-
-> [!WARNING]
-> `NamesObfuscator` obfuscator is renaming variables, classes, functions, and
-> imports. Right now this obfuscator can fail under very specific circumstances,
-> see `pof/obfuscator/names.py`. There is an alternative implementation at
-> `NamesRopeObfuscator` that uses `rope`, it's a work in progress and currently
-> does not obfuscate variables declared inside functions.
-
 Other very basic obfuscation functions are done by specific obfuscators like:
 
 - Removing comments with `CommentsObfuscator`.
@@ -873,6 +864,21 @@ def greet(name):
 > [!NOTE]
 > Functions containing `yield`, `async`, or `try/except` are skipped and left unchanged.
 
+#### DeadCodeObfuscator
+
+Insert dead (unreachable/unused) code blocks into the source.
+
+Source: `print('Hello, world')`
+
+```python
+while False:
+    Etb4inx6B1=[21,7,46,2]
+    agw_QLOu=283-42
+    FwQ2='msg'
+
+print('Hello, world')
+```
+
 ### Stager
 
 #### DownloadStager
@@ -1366,7 +1372,6 @@ Other Python obfuscation projects:
 
 ## TODO
 
-- Add dead code, opaque predicates.
 - Fix `NamesObfuscator`.
 - Add option to prepend a shebang, and add ability to customize it.
 

{python_obfuscation_framework-1.9.4 → python_obfuscation_framework-1.10.0}/README.md

@@ -275,53 +275,44 @@ echo "print('Hello, world')" | pof -f obfuscator -k UUIDObfuscator | python
 
 ### Obfuscator
 
-`VariablesObfuscator` the most basic obfuscator will rename variables.
+`NamesObfuscator` obfuscator is renaming variables, classes, and functions.
 
 Source in `examples/source.py`.
 
 ```python
 import os
 
-def get_linux_release_info():
+def BJM4FaQJf1():
     """Get Linux release info from /etc/os-release."""
-    uggNx = '/etc/os-release'
-    if not os.path.exists(uggNx):
+    h77 = '/etc/os-release'
+    if not os.path.exists(h77):
         print('OS release file not found. This might not be a Linux system.')
         return None
-    LY3mN = {}
+    jkFr = {}
     try:
-        with open(uggNx, 'r') as kj0:
-            for Stv9o in kj0:
-                if not Stv9o or '=' not in Stv9o:
+        with open(h77, 'r') as LfQ:
+            for GIVt40c7RR in LfQ:
+                if not GIVt40c7RR or '=' not in GIVt40c7RR:
                     continue
-                l0j, QE5kCKYwMe = Stv9o.strip().split('=', 1)
-                QE5kCKYwMe = QE5kCKYwMe.strip('"\'\n')
-                LY3mN[l0j] = QE5kCKYwMe
+                KPO5j, RQvTXmL = GIVt40c7RR.strip().split('=', 1)
+                RQvTXmL = RQvTXmL.strip('"\'\n')
+                jkFr[KPO5j] = RQvTXmL
         print('\nLinux Release Information:')
-        print(f"Distribution: {LY3mN.get('NAME', 'Unknown')}")
-        print(f"Version: {LY3mN.get('VERSION', 'Unknown')}")
-        print(f"Version ID: {LY3mN.get('VERSION_ID', 'Unknown')}")
-        print(f"Pretty Name: {LY3mN.get('PRETTY_NAME', 'Unknown')}")
-        return LY3mN
-    except Exception as e:
-        print(f'Error reading release file: {e}')
+        print(f"Distribution: {jkFr.get('NAME', 'Unknown')}")
+        print(f"Version: {jkFr.get('VERSION', 'Unknown')}")
+        print(f"Version ID: {jkFr.get('VERSION_ID', 'Unknown')}")
+        print(f"Pretty Name: {jkFr.get('PRETTY_NAME', 'Unknown')}")
+        return jkFr
+    except Exception as LzYLqi_:
+        print(f'Error reading release file: {LzYLqi_}')
         return None
 if __name__ == '__main__':
     if os.name == 'posix' and os.path.exists('/etc/os-release'):
-        E_R72 = get_linux_release_info()
+        yv4HAqmn = BJM4FaQJf1()
     else:
         print('This script is designed for Linux systems.')
 ```
 
-`DefinitionsObfuscator` obfuscate function names.
-
-> [!WARNING]
-> `NamesObfuscator` obfuscator is renaming variables, classes, functions, and
-> imports. Right now this obfuscator can fail under very specific circumstances,
-> see `pof/obfuscator/names.py`. There is an alternative implementation at
-> `NamesRopeObfuscator` that uses `rope`, it's a work in progress and currently
-> does not obfuscate variables declared inside functions.
-
 Other very basic obfuscation functions are done by specific obfuscators like:
 
 - Removing comments with `CommentsObfuscator`.
@@ -828,6 +819,21 @@ def greet(name):
 > [!NOTE]
 > Functions containing `yield`, `async`, or `try/except` are skipped and left unchanged.
 
+#### DeadCodeObfuscator
+
+Insert dead (unreachable/unused) code blocks into the source.
+
+Source: `print('Hello, world')`
+
+```python
+while False:
+    Etb4inx6B1=[21,7,46,2]
+    agw_QLOu=283-42
+    FwQ2='msg'
+
+print('Hello, world')
+```
+
 ### Stager
 
 #### DownloadStager
@@ -1321,7 +1327,6 @@ Other Python obfuscation projects:
 
 ## TODO
 
-- Add dead code, opaque predicates.
 - Fix `NamesObfuscator`.
 - Add option to prepend a shebang, and add ability to customize it.
 

{python_obfuscation_framework-1.9.4 → python_obfuscation_framework-1.10.0}/pof/cli_v2.py

@@ -92,9 +92,6 @@ def add_obfuscation(tokens, args):
     if args.obf_constants:
         logger.debug("obfuscating constants")
         tokens = ConstantsObfuscator().obfuscate_tokens(tokens)
-    if args.obf_definitions:
-        logger.debug("obfuscating definitions")
-        tokens = DefinitionsObfuscator().obfuscate_tokens(tokens)
     if args.obf_a85:
         logger.debug("obfuscating a85")
         tokens = ASCII85Obfuscator().obfuscate_tokens(tokens)
@@ -146,9 +143,6 @@ def add_obfuscation(tokens, args):
     if args.obf_names:
         logger.debug("obfuscating names")
         tokens = NamesObfuscator().obfuscate_tokens(tokens)
-    if args.obf_names_rope:
-        logger.debug("obfuscating names_rope")
-        tokens = NamesRopeObfuscator().obfuscate_tokens(tokens)
     if args.obf_numbers:
         logger.debug("obfuscating numbers")
         tokens = NumberObfuscator().obfuscate_tokens(tokens)

{python_obfuscation_framework-1.9.4 → python_obfuscation_framework-1.10.0}/pof/main.py

@@ -45,7 +45,6 @@ from pof.obfuscator import (
     BuiltinsObfuscator,
     CommentsObfuscator,
     ConstantsObfuscator,
-    DefinitionsObfuscator,
     DocstringObfuscator,
     ExceptionObfuscator,
     GlobalsObfuscator,
@@ -56,7 +55,6 @@ from pof.obfuscator import (
     NumberObfuscator,
     PrintObfuscator,
     StringsObfuscator,
-    VariablesObfuscator,
     XORObfuscator,
 )
 from pof.stager import ImageStager, RC4Stager
@@ -123,8 +121,6 @@ class Obfuscator(BaseObfuscator):
                 generator=ex_generator,
             ).obfuscate_tokens(tokens)
 
-        tokens = DefinitionsObfuscator().obfuscate_tokens(tokens)
-
         # configure generator
         # generator = alphabet_generator()
         gen_dict = {
@@ -145,42 +141,7 @@ class Obfuscator(BaseObfuscator):
             obf_builtins_rate=0.3,
         ).obfuscate_tokens(tokens)
 
-        # FIXME (deoktr): breaks !
-        # for detailed explanation just consider the following:
-        #   ```
-        #   import module
-        #   class Bar:
-        #       def __init__(self):
-        #           self.foo = getattr(config, "FOO", True)
-        #           module.imported.function(self.foo)
-        #   ```
-        # in this case the first instance of `foo` will successfully be
-        # obfuscated (as it should) but then with the getattr it's marked has
-        # "imported" because it's the result of a builtin function, but notice
-        # that it's not a "simple" variable but rather it's a class attribute
-        # and has a 'self' behind it, so if the variable is marked has imported
-        # and a `.` is placed behind it, it won't be changed, this is the case
-        # in the function call, which is itself imported, and thus set the
-        # imported attribute for itself and all the parameters given to it
-        # this is because we don't keep track of the level of the imported
-        #
-        # FIXME (deoktr): breaks !
-        # Another problem is related to result of function, this is, ofc very
-        # hard to deal with, but if a function returns an object, such has for
-        # example an object of an imported class, which attribute are not
-        # obfuscatable, then it breaks.
-        #   ```
-        #   import foo
-        #   def a():
-        #       return foo.bar()
-        #   x = a()
-        #   x.baz()
-        #   ```
-        # In this context, `baz` would be obfuscated, but it shouldn't because
-        # the function is part of the `foo` imported module
-        # tokens = NamesObfuscator(generator=generator).obfuscate_tokens(tokens)
-        # TODO (deoktr): use alternative variable obfuscator using the AST
-        # tokens = VariablesObfuscator().obfuscate_tokens(tokens)
+        tokens = NamesObfuscator(generator=generator).obfuscate_tokens(tokens)
 
         tokens = GlobalsObfuscator().obfuscate_tokens(tokens)
         tokens = BuiltinsObfuscator().obfuscate_tokens(tokens)
@@ -241,9 +202,7 @@ class Obfuscator(BaseObfuscator):
         tokens = self._get_tokens(source)
         tokens = CommentsObfuscator().obfuscate_tokens(tokens)
         generator = BasicGenerator.alphabet_generator()
-        # tokens = NamesObfuscator(generator=generator).obfuscate_tokens(tokens)
-        tokens = VariablesObfuscator(generator=generator).obfuscate_tokens(tokens)
-        tokens = DefinitionsObfuscator(generator=generator).obfuscate_tokens(tokens)
+        tokens = NamesObfuscator(generator=generator).obfuscate_tokens(tokens)
         tokens = IndentsObfuscator().obfuscate_tokens(tokens)
         tokens = NewlineObfuscator().obfuscate_tokens(tokens)
         return self._untokenize(tokens)
@@ -309,18 +268,7 @@ class Obfuscator(BaseObfuscator):
         tokens = CommentsObfuscator().obfuscate_tokens(tokens)
         tokens = ExceptionObfuscator(generator=generator).obfuscate_tokens(tokens)
         tokens = LoggingObfuscator(generator=generator).obfuscate_tokens(tokens)
-        # FIXME (deoktr): when placed BEFORE NamesObfuscator it breaks the code
-        # tokens = ConstantsObfuscator(
-        #     generator=generator,
-        #     obf_number_rate=1,
-        #     # FIXME (deoktr): breaks if obf_string_rate=1 with NamesObfuscator
-        #     obf_string_rate=0,
-        #     # FIXME (deoktr): breaks if obf_builtins_rate=1 with NamesObfuscator
-        #     obf_builtins_rate=0,
-        # ).obfuscate_tokens(tokens)
-        # tokens = NamesObfuscator(generator=generator).obfuscate_tokens(tokens)
-        tokens = VariablesObfuscator(generator=generator).obfuscate_tokens(tokens)
-        tokens = DefinitionsObfuscator(generator=generator).obfuscate_tokens(tokens)
+        tokens = NamesObfuscator(generator=generator).obfuscate_tokens(tokens)
         tokens = ConstantsObfuscator(
             generator=generator,
             obf_number_rate=1,
@@ -384,10 +332,9 @@ class Obfuscator(BaseObfuscator):
         # tokens = ConstantsObfuscator(generator=generator).obfuscate_tokens(tokens)
 
         tokens = CommentsObfuscator().obfuscate_tokens(tokens)
-        # tokens = DeepEncryptionEvasion().add_evasion(tokens)  # TODO (deoktr): fix
-        # tokens = NamesObfuscator(
-        #     generator=AdvancedGenerator.fixed_length_generator(),
-        # ).obfuscate_tokens(tokens)
+        tokens = NamesObfuscator(
+            generator=AdvancedGenerator.fixed_length_generator(),
+        ).obfuscate_tokens(tokens)
         tokens = BooleanObfuscator().obfuscate_tokens(tokens)
         tokens = IndentsObfuscator().obfuscate_tokens(tokens)
         tokens = NewlineObfuscator().obfuscate_tokens(tokens)

{python_obfuscation_framework-1.9.4 → python_obfuscation_framework-1.10.0}/pof/obfuscator/__init__.py

@@ -26,7 +26,6 @@ from .compression.lzma import LzmaObfuscator
 from .compression.zlib import ZlibObfuscator
 from .constants import ConstantsObfuscator
 from .controlflow.control_flow_flatten import ControlFlowFlattenObfuscator
-from .definitions import DefinitionsObfuscator
 from .encoding.a85 import ASCII85Obfuscator
 from .encoding.b16 import Base16Obfuscator
 from .encoding.b32 import Base32Obfuscator
@@ -45,7 +44,6 @@ from .junk.add_comments import AddCommentsObfuscator
 from .junk.add_newlines import AddNewlinesObfuscator
 from .junk.dead_code import DeadCodeObfuscator
 from .names import NamesObfuscator
-from .names_rope import NamesRopeObfuscator
 from .numbers import NumberObfuscator
 from .other.tokens import TokensObfuscator
 from .remove.comments import CommentsObfuscator
@@ -59,7 +57,6 @@ from .stegano.ipv6encoding import IPv6Obfuscator
 from .stegano.macencoding import MACObfuscator
 from .stegano.uuidencoding import UUIDObfuscator
 from .strings import StringsObfuscator
-from .variables import VariablesObfuscator
 
 __all__ = [
     "ASCII85Obfuscator",
@@ -81,7 +78,6 @@ __all__ = [
     "ControlFlowFlattenObfuscator",
     "DeadCodeObfuscator",
     "DeepEncryptionObfuscator",
-    "DefinitionsObfuscator",
     "DocstringObfuscator",
     "ExceptionObfuscator",
     "ExtractVariablesObfuscator",
@@ -95,7 +91,6 @@ __all__ = [
     "LzmaObfuscator",
     "MACObfuscator",
     "NamesObfuscator",
-    "NamesRopeObfuscator",
     "NewlineObfuscator",
     "NumberObfuscator",
     "PrintObfuscator",
@@ -105,7 +100,6 @@ __all__ = [
     "StringsObfuscator",
     "TokensObfuscator",
     "UUIDObfuscator",
-    "VariablesObfuscator",
     "WhitespaceObfuscator",
     "XORObfuscator",
     "ZlibObfuscator",

{python_obfuscation_framework-1.9.4 → python_obfuscation_framework-1.10.0}/pof/obfuscator/junk/dead_code.py

@@ -147,17 +147,37 @@ class DeadCodeObfuscator:
         tokens.append((DEDENT, ""))
         return tokens
 
-    def _generate_dead_if_tokens(self, indent_level: int):
+    @staticmethod
+    def _get_false_cond():
         false_conds = [
             [(NAME, "False")],
             [(NUMBER, "0")],
             [(STRING, '""')],
             [(NAME, "None")],
+            [
+                (NUMBER, str(random.randint(1, 50))),
+                (OP, ">"),
+                (NUMBER, str(random.randint(51, 100))),
+            ],
+            [
+                (NUMBER, str(random.randint(1, 50))),
+                (OP, "=="),
+                (NUMBER, str(random.randint(51, 100))),
+            ],
+            [(NAME, "not"), (NAME, "True")],
+            [(NAME, "True"), (NAME, "and"), (NAME, "False")],
+            [(NUMBER, "0"), (OP, "*"), (NUMBER, str(random.randint(1, 999)))],
+            [(NAME, "len"), (OP, "("), (STRING, '""'), (OP, ")")],
+            [(NAME, "bool"), (OP, "("), (NUMBER, "0"), (OP, ")")],
+            [(OP, "("), (OP, ")"), (NAME, "and"), (NAME, "True")],
         ]
+        return random.choice(false_conds)
+
+    def _generate_dead_if_tokens(self, indent_level: int):
         inner_indent = "    " * (indent_level + 1)
 
         tokens = [(NAME, "if")]
-        tokens.extend(random.choice(false_conds))
+        tokens.extend(self._get_false_cond())
         tokens.extend(
             [
                 (OP, ":"),
@@ -171,7 +191,7 @@ class DeadCodeObfuscator:
         num_elif = random.randint(0, max(0, self.max_branches - 1))
         for _ in range(num_elif):
             tokens.append((NAME, "elif"))
-            tokens.extend(random.choice(false_conds))
+            tokens.extend(self._get_false_cond())
             tokens.extend(
                 [
                     (OP, ":"),
@@ -191,6 +211,10 @@ class DeadCodeObfuscator:
         empty_choices = [
             [(OP, "["), (OP, "]")],
             [(NAME, "range"), (OP, "("), (NUMBER, "0"), (OP, ")")],
+            [(OP, "("), (OP, ")")],
+            [(OP, "{"), (OP, "}")],
+            [(STRING, '""')],
+            [(NAME, "set"), (OP, "("), (OP, ")")],
         ]
 
         tokens = [
@@ -212,13 +236,15 @@ class DeadCodeObfuscator:
 
     def _generate_dead_while_tokens(self, indent_level: int):
         inner_indent = "    " * (indent_level + 1)
-        tokens = [
-            (NAME, "while"),
-            (NAME, "False"),
-            (OP, ":"),
-            (NEWLINE, "\n"),
-            (INDENT, inner_indent),
-        ]
+        tokens = [(NAME, "while")]
+        tokens.extend(self._get_false_cond())
+        tokens.extend(
+            [
+                (OP, ":"),
+                (NEWLINE, "\n"),
+                (INDENT, inner_indent),
+            ],
+        )
         tokens.extend(self._body_tokens())
         tokens.append((DEDENT, ""))
         return tokens
@@ -301,7 +327,7 @@ class DeadCodeObfuscator:
 
             if toknum == OP and tokval == "@":
                 in_decorator = True
-            if in_decorator and toknum == NEWLINE:
+            if in_decorator and toknum == NAME and tokval in ("def", "class"):
                 in_decorator = False
 
             result.append((toknum, tokval))