Skip to content

Latest commit

 

History

33 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 
 
 
 
 
 
 

Repository files navigation

If you find this GitHub repo useful, please consider giving it a star! ⭐

     


⚡ ObfuXtreme — Advanced Python Obfuscation Engine

ObfuXtreme is an advanced Python obfuscation engine focused on structural obfuscation, AST-level transformations, and runtime payload protection.

It is designed for security research, defensive analysis, and reverse-engineering studies — not for malicious use.

✔ Produces heavily obfuscated Python code
✔ Breaks static analysis and signature-based detection
✔ Uses safe AST transformations (no bytecode patching)
✔ Runtime loader with encrypted payload execution


⚠️ Disclaimer & Ethics

Use responsibly and ethically.

ObfuXtreme is a Proof-of-Concept (PoC) project intended strictly for:

  • education
  • research
  • defensive cybersecurity testing

❌ You must NOT use this tool for:

  • malware obfuscation
  • bypassing security products
  • evading detection for malicious purposes
  • any illegal or unethical activity

The authors take no responsibility for misuse.
By using this project, you accept full responsibility for how it is used.


✨ ObfuXtreme v4 — Key Features

Feature Status Notes
AES-256-CBC Encryption ✅ Encrypts payload, strings, and bytes
Per-String Random IV ✅ Prevents frequency & pattern analysis
XOR-Split Key Storage ✅ AES key and IV split into multiple XOR parts
AST-Level Obfuscation ✅ Safe transformations using Python ast
Local Variable Renaming ✅ Arguments, globals, nonlocals preserved
Safe Control-Flow Flattening ✅ Only applied to simple, linear functions
Encrypted Runtime Loader ✅ Payload decrypted & executed at runtime
Auto-Rebuild per Python Version ✅ Build version enforced at runtime
Cross-Platform ✅ Windows, Linux, macOS
Clean Failure Handling ✅ Clear errors instead of crashes
VT-Friendly (Research) ⚠️ Structural obfuscation only

🔁 Auto-Rebuild (Important)

ObfuXtreme automatically locks the output to the Python version used during obfuscation.

Example:

Build with Python 3.12 → output runs only on Python 3.12

This is intentional and prevents:

  • marshal incompatibility
  • silent crashes
  • undefined behavior

If you change Python versions, rebuild the script.


📦 Dependencies

Required

  • Python 3.10+
  • pycryptodome

Install dependency:

pip install pycryptodome

The obfuscated output also requires pycryptodome unless packaged with PyInstaller.


🚀 Installation

git clone https://github.com/spyboy-productions/ObfuXtreme.git
cd ObfuXtreme
pip install -r requirements.txt

🧪 Usage

Obfuscate a script

python ObfuXtreme.py your_script.py

or

python ObfuXtreme.py your_script.py obfuscated.py

Output

obfuscated.py

Run obfuscated file

python obfuscated.py

🧪 VirusTotal Demonstration (Educational)

Without ObfuXtreme

With ObfuXtreme

These results demonstrate structural obfuscation effectiveness for research and analysis only.


📦 Creating a Standalone .exe (No Python Required)

If you want to distribute without requiring Python or pycryptodome:

pip install pyinstaller
pyinstaller --onefile --noconsole obfuscated.py

This bundles:

  • Python runtime
  • Crypto dependencies
  • Obfuscated payload

Common misunderstanding (important)

“ObfuXtreme already obfuscates the code, so why does the OS matter?”

Because obfuscation and packaging are two different steps:

ObfuXtreme outputs Python code
The obfuscated .py file is cross-platform
It still requires Python + pycryptodome
PyInstaller produces native binaries
Native binaries are OS-specific
Obfuscation ≠ packaging

Diagram

  • ✔ ObfuXtreme can be run on any OS
  • ✔ The obfuscated .py file is portable
  • ✔ PyInstaller must run on macOS to produce macOS binaries
  • ✔ This is standard behavior for all Python packagers (PyInstaller, Nuitka, etc.)

🛠️ Roadmap

  • Optional metamorphic transformations
  • Junk code intensity levels
  • Machine-bound execution
  • Password-protected loader
  • Optional marshal-free mode
  • CI multi-Python build support

If this project helps you, please give it a ⭐ — it directly supports further development.

About

ObfuXtreme is an advanced Python obfuscation tool for security research, reverse engineering education, and analysis of how obfuscation impacts static and signature-based detection.

Topics

Resources

Stars

231 stars

Watchers

5 watching

Forks

Releases

Packages

Contributors

Languages