Skip to content

ObfuXtreme is an advanced Python obfuscation tool for security research, reverse engineering education, and analysis of how obfuscation impacts static and signature-based detection.

License

Notifications You must be signed in to change notification settings

spyboy-productions/ObfuXtreme

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

33 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

If you find this GitHub repo useful, please consider giving it a star! ⭐

     


⚡ ObfuXtreme — Advanced Python Obfuscation Engine

ObfuXtreme is an advanced Python obfuscation engine focused on structural obfuscation, AST-level transformations, and runtime payload protection.

It is designed for security research, defensive analysis, and reverse-engineering studies — not for malicious use.

✔ Produces heavily obfuscated Python code
✔ Breaks static analysis and signature-based detection
✔ Uses safe AST transformations (no bytecode patching)
✔ Runtime loader with encrypted payload execution


⚠️ Disclaimer & Ethics

Use responsibly and ethically.

ObfuXtreme is a Proof-of-Concept (PoC) project intended strictly for:

  • education
  • research
  • defensive cybersecurity testing

❌ You must NOT use this tool for:

  • malware obfuscation
  • bypassing security products
  • evading detection for malicious purposes
  • any illegal or unethical activity

The authors take no responsibility for misuse.
By using this project, you accept full responsibility for how it is used.


✨ ObfuXtreme v4 — Key Features

Feature Status Notes
AES-256-CBC Encryption Encrypts payload, strings, and bytes
Per-String Random IV Prevents frequency & pattern analysis
XOR-Split Key Storage AES key and IV split into multiple XOR parts
AST-Level Obfuscation Safe transformations using Python ast
Local Variable Renaming Arguments, globals, nonlocals preserved
Safe Control-Flow Flattening Only applied to simple, linear functions
Encrypted Runtime Loader Payload decrypted & executed at runtime
Auto-Rebuild per Python Version Build version enforced at runtime
Cross-Platform Windows, Linux, macOS
Clean Failure Handling Clear errors instead of crashes
VT-Friendly (Research) ⚠️ Structural obfuscation only

🔁 Auto-Rebuild (Important)

ObfuXtreme automatically locks the output to the Python version used during obfuscation.

Example:

Build with Python 3.12 → output runs only on Python 3.12

This is intentional and prevents:

  • marshal incompatibility
  • silent crashes
  • undefined behavior

If you change Python versions, rebuild the script.


📦 Dependencies

Required

  • Python 3.10+
  • pycryptodome

Install dependency:

pip install pycryptodome

The obfuscated output also requires pycryptodome unless packaged with PyInstaller.


🚀 Installation

git clone https://github.com/spyboy-productions/ObfuXtreme.git
cd ObfuXtreme
pip install -r requirements.txt

🧪 Usage

Obfuscate a script

python ObfuXtreme.py your_script.py

or

python ObfuXtreme.py your_script.py obfuscated.py

Output

obfuscated.py

Run obfuscated file

python obfuscated.py

🧪 VirusTotal Demonstration (Educational)

Without ObfuXtreme

With ObfuXtreme

These results demonstrate structural obfuscation effectiveness for research and analysis only.


📦 Creating a Standalone .exe (No Python Required)

If you want to distribute without requiring Python or pycryptodome:

pip install pyinstaller
pyinstaller --onefile --noconsole obfuscated.py

This bundles:

  • Python runtime
  • Crypto dependencies
  • Obfuscated payload

Common misunderstanding (important)

“ObfuXtreme already obfuscates the code, so why does the OS matter?”

Because obfuscation and packaging are two different steps:

ObfuXtreme outputs Python code
The obfuscated .py file is cross-platform
It still requires Python + pycryptodome
PyInstaller produces native binaries
Native binaries are OS-specific
Obfuscation ≠ packaging

Diagram

  • ✔ ObfuXtreme can be run on any OS
  • ✔ The obfuscated .py file is portable
  • PyInstaller must run on macOS to produce macOS binaries
  • ✔ This is standard behavior for all Python packagers (PyInstaller, Nuitka, etc.)

🛠️ Roadmap

  • Optional metamorphic transformations
  • Junk code intensity levels
  • Machine-bound execution
  • Password-protected loader
  • Optional marshal-free mode
  • CI multi-Python build support

If this project helps you, please give it a ⭐ — it directly supports further development.

About

ObfuXtreme is an advanced Python obfuscation tool for security research, reverse engineering education, and analysis of how obfuscation impacts static and signature-based detection.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages