BISINET · Follow
8 min read · Nov 29, 2023
--
Python is an interpreted language, meaning that Python requires an interpreter during execution to translate the code base into machine instructions. This leads to advantages like increased flexibility, smaller program size, and code becoming platform-independent as the interpreter manages the execution in the relevant platform.
One major point of contention is that this exposes the source code of a program created by Python. Yes, we have the option of creating an executable file with packages like cx-Freeze or PyInstaller. Even when the source code is not directly bundled there are tools to decompile .pyc (compiled bytecode) files like python-uncompyle6. And creating an executable is not applicable in every situation. How can we protect our code from getting exposed?
Obfuscating Python code is the simplest way to keep the codebase protected.
Look at the following code block. Here we are simply sending a request with a username and password as headers with a simple message as the body. The https://webhook.site is to capture these requests.
import requests# Send a web request
def send_request(username, password, message, url):
headers = {"username": username, "password": password}
try:
response = requests.post(url, headers=headers, data=message)
if response.status_code == 200:
return response.content
else:
return f"Request failed with status code {response.status_code}: {response.reason}"
except Exception as error:
return f"An error occurred: {error}"
# Read the username and password
def read_credentials(filename):
try:
with open("credentials.txt", "r") as file:
data = file.readlines()
return data
except Exception as error:
return f"An error occurred: {error}"
# Main function
def main():
# Get username and password
credentials = read_credentials("credentials.txt")
# Parameters
username = credentials[0].strip()
password = credentials[1].strip()
message = '{"text": "Hello, world!"}'
url = "https://webhook.site/2fc46539-0f46-4d80-866c-0e54ca2713e5"
# Call the function
output = send_request(username, password, message, url)
# Print the output of the request
print(output)
if __name__ == "__main__":
# Call the main function
main()
Let’s look at how we can obfuscate this code.
Oxyry Python Obfuscator is a simple web-based tool that you can use to obfuscate the Python code. Simply copy and paste your code and it will generate the obfuscated code.
Obfuscated Code
import requests #line:1
def send_request (OOOO0O0O00OOOOOOO ,OOOO00000OO000000 ,O0O0O000O0OOOOO0O ,OOOOO0OO000OO0O00 ):#line:4
O00O000000OO00OO0 ={"username":OOOO0O0O00OOOOOOO ,"password":OOOO00000OO000000 }#line:5
try :#line:7
OO0OOOO0000O00OOO =requests .post (OOOOO0OO000OO0O00 ,headers =O00O000000OO00OO0 ,data =O0O0O000O0OOOOO0O )#line:8
if OO0OOOO0000O00OOO .status_code ==200 :#line:9
return OO0OOOO0000O00OOO .content #line:10
else :#line:11
return f"Request failed with status code {OO0OOOO0000O00OOO.status_code}: {OO0OOOO0000O00OOO.reason}"#line:12
except Exception as OOOO0O0OO00OO000O :#line:13
return f"An error occurred: {OOOO0O0OO00OO000O}"#line:14
def read_credentials (OOO0OO00OO0000OO0 ):#line:17
try :#line:18
with open ("credentials.txt","r")as O0OO0OOOOOO0OO0OO :#line:19
OOOO0O000000O00OO =O0OO0OOOOOO0OO0OO .readlines ()#line:20
return OOOO0O000000O00OO #line:21
except Exception as O00O00OO000000O0O :#line:22
return f"An error occurred: {O00O00OO000000O0O}"#line:23
def main ():#line:26
OO00O00OOOOO00OO0 =read_credentials ("credentials.txt")#line:28
O0OOOO00OOO0OO00O =OO00O00OOOOO00OO0 [0 ].strip ()#line:31
O0OO00OO00OO00OO0 =OO00O00OOOOO00OO0 [1 ].strip ()#line:32
OOO00OOOOO000OO0O ='{"text": "Hello, world!"}'#line:33
O0OOO0OOOOOOO0000 ="https://webhook.site/2fc46539-0f46-4d80-866c-0e54ca2713e5"#line:34
O0O0OOO00O0OOOO00 =send_request (O0OOOO00OOO0OO00O ,O0OO00OO00OO00OO0 ,OOO00OOOOO000OO0O ,O0OOO0OOOOOOO0000 )#line:37
print (O0O0OOO00O0OOOO00 )#line:40
if __name__ =="__main__":#line:42
main ()This will rename symbol names, variables, functions, classes, arguments, etc... Avoid 1:1 mapping of cleartext names to obfuscated names. Removes any comments and documentation strings.
As you can see this does not obfuscate string values and functions that access runtime namespace ( exec, dir, locals, globals ) may experience issues as they would be trying to access renamed objects. This does not make the entire code base unreadable but vastly reduces the readability of the code.
PYOBFUSCATE’s code obfuscation tool is another web-based tool that offers complete code obfuscation. This simply encrypts the entire code base using an AES 256-bit algorithm.
Obfuscated Code
import random , base64, codecs, zlib;pyobfuscate=""
obfuscate = dict(map(lambda map,dict:(map,dict),['(https://pyobfuscate.com)*(AES)'],['''Q2cBK212Fo`HS=b8xP^AhJg*ogg{Q_hzf%7930YZMT;~~IGeIaemd1C&mb3I3gxCj^t$DEW!^n>Hu3O=ul+zmeS_6KPzP_Lg$WNHKBIV=<E_FEKMM^Q->b5@%LyGX<c&aMTu3P5%f#f*`7R-;nd+J3(JBvnJ;TSYcM=qu{)FjqQvhjj&9~0I$e#g%g2ISDEYGFcEUmc3mFE}8EQjjtDO8aus90LS?Jov0fskl*^bz@PH$O3)!v8QS9FaEp^zOkKfgBtGgzzEMpvDR%G9ZihZjZ|5>$FNVNWp_^Z?wV|4g!qN)ke?f;?}kC{1fmFHkgEV#`w~Lsljxl6NWwyD!E}el#4*b+D!7Nb#j>Y{_MsaM1lrIFo!>?J0{2UnI_9Nm}?dJ3}h8=%-M#IGov_&aYkJ{DBha22Rn0NnU)U9J)4<@_8QA2eQ<~!LGiIi5J$?b+bw3J|MUdlfzSMr!n;QZ52WnPUI&HE?uH3ZuV7cTiN+vKbJcqko`}Fo_HSJ~mdW%M(xYYr`@!RM*k2V*Vo4?ws3ZX#`SsaE<`T$pECfm-`nMb?R{Gw%QzxXe9W~2*iIO$A9d4c1(c;hdnc9?6o81p$rqN4lnAvNz0!sesY@8%O@Y2!}?fHMEk=#$<CkmG=gWJ5*H;?2Iz-CCuG$pM81)Z)=okq6OGy#!@MmPG0(LQgXW?XwsN1$y#5&I5Vp)c!vaAzcnM?o%)(>+oTVT}Uu$3~B1om`s@=?<FI0FOB*-GtF2hZ$m&S;$dQLZ70}uvA6>85d}#&`fk&Z$zLAw~M4gYxg>)g6l<8BJM3ywsyVp!=MXCb%JzDxv^yH={@NOI6{mLUIDxv>000C8TJ#{tt?2$A?#H7g$C;G;VsHNCUQ4tY_e(|c^7m>_~~^`v##shkfy^mbF{p(cf3DPat-`vmtAApu&6|(ZOdKF2uv9piD}wS>^I)j?s1bZy!$-C^$rUv0rcmjTCn8w<PA5qs^9=-FIP)Dw)L`|xk}XAIO0Z>0)T2uUXCLRCh@O~fhJ}5C_xY{_=231x^7!LSAW&^2D^0<m4yuMj>h;o!Ay;QsF8!2W8D{BV&t=<-xRl7sCRwgu~XPO@x1fL(fzo&enBNuQ4tRXbFLEB*-*lJa5khNpEhG!PzQa-2a}2_j3mcK?r8X~fF7AV7HJ{5UdT#J=k}5_Mcb%^nJ?#9-2I^;11a-xbCJr`yF7XxLsu$1Sp$Jzy^@^E1f-W|9*zhzl%&h0^i!f*6y{UdH_nS-lu*Kt(wylWb`FdhbpJ7VL2<f!Y-zn}1Zr@3z2GE3W$y&@Q6*TTem`x@jffUDL563dgUu#5e0Pqm5f57!e&c-jQwF;|9TFr6xUlYIs1j;xC;jMc?aJii#AYH!qnFA;Z+;qhH+Sa8$ceCtY*UYX?Fz1{<|a^VXJU&hFxWfnE5#1gH`B%0<ITP$G3us*mFS=|jW$lMK}CY4X*%6eH~H}H1@<oI|Hr#)$u}a7-QwyNsCi5qR`w(au?Ye)*|p%WyMP?goioGpy_<dLUmRy)NrEE-Y|+18vinYh*`<b&3dxaC9p4)~ANh6>Iv$4(=2_~FfH_hX?IXAFOSPrdqOOH?xHWzdp+fo^6?UinY!FkhGHm#^z&e()8I}ZA#9#al-%p6BZ#)h7*TiAx;}|(5;ZL#~$<gZKxxK*3{srzY3(zvOOZx#a60uvs^KNaE'''.replace('\n','')]))
_=lambda OO00000OOO0000OOO,c_int=100000:(_OOOO00OO0O00O00OO:=''.join(chr(int(int(OO00000OOO0000OOO.split()[OO00O0OO00O0O0OO0])/random.randint(1,c_int)))for OO00O0OO00O0O0OO0 in range(len(OO00000OOO0000OOO.split()))));eval("".join(chr(i) for i in [101,120,101,99]))("\x73\x65\x74\x61\x74\x74\x72\x28\x5f\x5f\x62\x75\x69\x6c\x74\x69\x6e\x73\x5f\x5f\x2c\x22\x5f\x5f\x5f\x5f\x5f\x5f\x22\x2c\x70\x72\x69\x6e\x74\x29\x3b\x73\x65\x74\x61\x74\x74\x72\x28\x5f\x5f\x62\x75\x69\x6c\x74\x69\x6e\x73\x5f\x5f\x2c\x22\x5f\x5f\x5f\x5f\x5f\x22\x2c\x65\x78\x65\x63\x29\x3b\x73\x65\x74\x61\x74\x74\x72\x28\x5f\x5f\x62\x75\x69\x6c\x74\x69\x6e\x73\x5f\x5f\x2c\x22\x5f\x5f\x5f\x5f\x22\x2c\x65\x76\x61\x6c\x29");__='600840 10052792 2475510 107811 3460338 725070 743968 2892000 2595808 1123520 4498098 4658724 9505818 3510345 255392 146490 5557929 9774387 9643374 676195 8169140 8968656 7951905 2729216 6994785 2809039 2272480 238206 8998248 10083880 1132512 1887269 9978295 4040976 199290 720029 6381240 390456 4855272 5536608 8270336 5334956 137240 1950112 813888 1000864 14176 4719645 7434130 4414928 6253299 9947928 1058600 1230358 2126544 2411955 8232000 3136064 3545955 10065990 11478610 1845676 5793228 1659528 8606412 2662784 9252354 3826789 8515228 10136529 9876386 4503170 4636636 3050030 2304864 8648920 3476588 1063810 6624464 4304298 1150491 8042410 11245620 2352544 7278969 5070780 3834960 143016 6244008 3168128 11537244 1865133 1213344 1977057 519120 3126900 1538392 2683994 3910416 125890 1943840 169376 2568608 2306112 1493210 846355 4957785 3989836 8217104 10113987 6212658 6166328 5037850 7088140 89080 2665299 9719915 11920920 8955970 163995 576706 283176 3952332 6138720 8659980 10319940 3459800 1280676 161860 51870 2435250 6931656 3196522 1527030 341905 7265895 9809455 5280688 6588183 1684008 10751112 3620735 3711935 2101440 809948 7445910 7656305 6875824 7874685 7469960 4394725 5493528 3843530 1205130 2690707 1967374 2228611 1179175 1150372 171600 701454 4804904 669900 5363840 4755408 11124985 3124634 2961893 2837437 10306240 6771644 3092793 3541328 182988 7504380 2047000 2964060 3378704 8487488 7190998 3697158 1008513 9005208 7376139 3927743 9552368 2742597 5133926 6206652 2311680 3009798 833028 10506608 3530296 4332300 1356850 2624527 2751793 2669733 2394070 3060196 9653172 845520 3047668 1129650 1732414 1747310 6141852 3553786 8646840 10742180 287180 1469024 8047488 11999933 3563346 859220 420224 1719072 288032 236160 8018628 6755070 3157506 9098557 82624 8832714 3347765 2617768 861504 1658215 5273592 2594072 661024 902160 6018871 5059712 9333546 5543478 10761204 2640896 8903453 1575480 7633185 2561625 10578968 1218540 2351744 2321307 6116045 1633408 7015763 5559960 703580 194336 3119584 275968 733760 8284032 10978086 2905647 3348153 823648 7268835 6811105 2865536 6322155 8007685 196784 7085907 1614012 2185672 1955680 2770597 3622466 1278320 2700033 3743630 6963888 713088 5437432 1507305 2370048 8338983 4488036 4277988 9789636 9784072 5294239 4570980 2052020 2932737 873420 692064 2712832 1440256 493184 2269836 5935947 2087019 3347070 9042473 2466925 1163640 715299 5119400 61600 6803360 3070472 3586505 7106652 2033070 3448770 1332254 3203700 10746064 3431176 5216964 6666840 4895988 1158993 1447466 1891930 7078112 6234472 5222771 3231394 5588080 4378418 11000396 10886880 8793728 1153926 5624706 10051328 4147000 877546 3422952 2137083 9117108 160089 559164 5589552 1199496 4719258 5596015 6874390 2490348 1775612 1560720 4793584 715768 4420870 1858864 1768731 6089081 782892 9675759 443322 3954581 1434120 5588080 7513732 9453620 9258872 2909040 2799450 94254 10129700 9949920 11461032 497182 218660 779670 2491648 2679584 494368 352064 4780650 2815914 294496 7500159 7957680 3969000 180320 2806720 695360 4723901 2923730 6454392 9958698 3237507 9151509 4419136 548540 636352 2456512 1158016 760864 1530048 1579104 2585568 430784 2442792 6334013 8462433 5897208 1869828 4518740 3117160 5861968 1116906 2769468 816450 2827072 1415232 1191040 2284736 8500463 5873256 4862550 8653986 474048 4160392 11480880 2319080 5977776 4726700 1302857 2626355 2011353 6087816 4281612 7839 8072324 1344846 941040 376416 1535392 25216 1638144 940672 908128 1618464 2692032 10648056 9403706 9440490 4338990 8526326 10022230 3095680 5052656 1556850 3580776 899200 322624 1953120 70272 295072 4593225 1466046 1091200 6202410 2524200 3669480 7108528 2021742 3980813 775188 2749880 879060 7325537 2466936 3110290 5079795 2893968 18560 2327936 929024 2551104 2492384 250208 2255232 2757472 1236384 1442994 8935815 6523840 4058288 758816 5608275 159264 4936678 7766440 635360 3872280 3241388 98154 46120 2160368 1370625 2638555 1671604 1677458 10174381 1842902 2885703 1477056 2982847 11056675 3048096 4126658 5386576 8473294 255852 9015797 5719266 523215 5380544 7602876 3131200 3952665 5033820 6584982 3005160 3080910 7898256 1513884 2341428 858130 2530240 1594784 2112896 2613536 9160801 10402320 9666407 2264229 3761800 3583302 3224816 6873656 7062880 2358440 1934464 2074850 443128 2641596 11325900 7407946 5716016 5132800 3202520 2705549 2412399 473240 41376 1962080 2383136 2582624 116230 8708018 5645880 6635178 8949913 7043904 9106580 3237618 801350 193792 558464 1907744 2121536 7285534 6910080 4454403 7914654 3865800 9856668 3906900 1701828 590760 464890';why,are,you,reading,this,thing,huh="\x5f\x5f\x5f\x5f","\x69\x6e\x28\x63\x68\x72\x28\x69\x29\x20\x66\x6f","\x28\x22\x22\x2e\x6a\x6f","\x72\x20\x69\x20\x69\x6e\x20\x5b\x31\x30\x31\x2c\x31\x32\x30\x2c","\x31\x30\x31\x2c\x39\x39","\x5f\x5f\x29\x29","\x5d\x29\x29\x28\x5f\x28";b='eJxzdK8wccz1A+IwYyBt6OheketYHmYKAFuyB3k=';____("".join (chr (int (OO00O0OO00O0O0OO00 /2 ))for OO00O0OO00O0O0OO00 in [202 ,240 ,202 ,198 ] if _____!=______))(f'\x5f\x5f\x5f\x5f\x28\x22\x22\x2e\x6a\x6f\x69\x6e\x28\x63\x68\x72\x28\x69\x29\x20\x66\x6f\x72\x20\x69\x20\x69\x6e\x20\x5b\x31\x30\x31\x2c\x31\x32\x30\x2c\x31\x30\x31\x2c\x39\x39\x5d\x29\x29({____(base64.b64decode(codecs.decode(zlib.decompress(base64.b64decode(b"eJw9kN1ygjAUhF8JIkzlMo6mEnIcHVIM3AGtoPIT2wSSPH2p7fTu252d2T3n3MkyK896dLvrSMIeaGxEGn0l/rpiLu3hlXm5yxDmO8tQZIDoeUQLr4oWePxk8VZfBpr9af8mXdzLTk8swRbP25bNzPvP8qwWJDRA8RX4vhLkfvuk0QRl3DOUekDC9xHZVnBcyUnXY7mtBrIOBDEKXNRl3KiBBor25l5MN7U5qSA/HsJiVpfsVIQ/Hj4dgoSYOndx+7tZLZ2m3qA4AFpUD6RDsbLXB2m0dPuPZa8GblvoGm/gthdI+8PxyYtnXqRLl9uiJi+xBbqtCmKm8/K3b7hsbmQ=")).decode(),"".join(chr(int(i/8)) for i in [912, 888, 928, 392, 408])).encode()))})')
This utilizes the PyCryptodome package to manage encryption and decryption and will introduce additional computational overhead to your application to handle this encryption and decryption. Another consideration when adapting this method is how to handle the encryption key.
PyArmor is a full-featured CLI-based Python obfuscation tool. What sets this apart from other options is that this supports both file-level obfuscation as well as package-level obfuscation.
This offers two irreversible obfuscation modes in
- RFT Mode — This renames functions, methods, classes, variables, and arguments.
- BCC Mode — Converts some Python functions to C functions and complies them to machine instructions.
PyArmor also offers additional capabilities such as the ability to set an expiry to the obfuscated scripts, bind the script to a specific machine using a hardware/software signature (HDD serial number, MAC address, IP address), and even a web UI to simplify the obfuscation process.
Obfuscating a Single Python File
To use PyArmor we need to install it as a pip package.
pip install pyarmorNext, simply run the PyArmor gen command to generate the obfuscated code base.
pyarmor gen <filename>.pyNote — In the above image we are using poetry to manage our virtual environment and PyArmor is installed in this virtual environment. Hence using the poetry run command to start the pyarmor gen command.
This would generate a dist folder with the obfuscated code.
Obfuscated Code
# Pyarmor 8.4.4 (trial), 000000, non-profits, 2023-11-29T19:02:07.481333
from pyarmor_runtime_000000 import __pyarmor__
__pyarmor__(__name__, __file__, b'PY000000\x00\x03\n\x00o\r\r\n\x80\x00\x01\x00\x08\x00\x00\x00\x04\x00\x00\x00@\x00\x00\x00\xaf\x08\x00\x00\x12\t\x04\x00\x91I\x8a\xae\xf1\x1a\x11\'@k\xef&\xf7i\x82X\x00\x00\x00\x00\x00\x00\x00\x00\xd5&\x1d*B\xa2\x02\xf4\xd1\xb2f\xf0I\xc4\xa7\xaf{q\x18fY\xb92#\xacz\xf1\xea\xc1h`\xac\xa1\x8a\x81\xd0\x03L)\xf9\xa3C\xa6\xcb\xef\x86\xbfc\x161g!\xc3\x9e<`\'\xd2\x80\xb6\xb4i\xb1\x86\xde\xee\x80\xe0\xe0+\xa4\x1e\x89\x14\x00|\x0e\x82@-\xc4Q\x9dF\xda\x85\xe5d\x9e\xac\xb4\xf2\xd2\x94\xfa\xce7\xfe\xdd\xda\xfc\'\xad\xe3\xdc\xc2\x86\xb1\x1fs\x0e\x0f=\x1c&\xef\xb8X\xa0\x97\x183j\xfd\xa1\xbc\x94\xc5-\x7fK\x061\xa8\xfa\x15NZ\xc3r\xa7\xf2\xc6B\x91\xea\xed&i=p\xb7>z\xfd*\xee\x01r\xa5\xf71\x07\x08\x03ew\xe8\x14\x1f\xf25X\xea\xaf\xb2OGd\xef\x0c,m]\x97]\xf8!\x01\x8d\xe7<\xea\xd3\x1bF\xa7\xba\x92\xaa\xd6\x92k\x8e\xed(\x80\x86\x0f\xa5Q;\x99\x01\xb1\xe7_\xc1T\xa2\x04\x14\xffuLod+\x8d\r\x888\xe13\x04HV\x14Z\xf6\x17\xd5\x95\xed\xcb\x9d\xdf\xdf\xdc`pd\xa4\xfa;!oD4\x1f\xa5\x93\xef J\xa0\xca\xc72w\xb6C\xfcB\xf9S5\x16!\xf8\xbc\x14l-w\xceF\x16\xe7@L\xcd\xc7\xe5\x1a+\xe2X\x8c4*<\x1av\xd8\x96l\x07O/\x12\x1c&\xa0P\xc0\'(\xbc\xb2\xd4\xe8\x8d\x16\n2\x11\x1d\xe3\xae\xca\xe0\xf4\xb4\xa8\xfa\x14\x1e\xb1e\x81\xd5\x97\x08\xc7\xf7>A\xdb\xb3\xe9\xde\xe5\xeb3\xbc\xaa\xbc\x82\xe5\xc3\xa7\x84\xea^A\x16;\xcbO\xdb\xc8\x90s\x97\xc1y\xdb\xe5\xe5\xef*\x80,\x13{k\xc3]03\xe4\xf9\xf6\xd1\x18\xc2\xb3\x1elr\x02\xa0/D\xa3\x8e\xc8\xfb\xd8s\xb7\xec\xc9B\x03\xe2\x98\xa2\xb8\x9b\xa9(\xf2\xff\xf9H\xf5\x1a\xc4\xc8\xda\x13"\xac\xaf\xbe\x86\x9d\xe8\xd8\x1f\xe9g\x84\\\riX\xfe6\xc7\xeb\x04\x9eJk\xa9\x0c\xbd\xb0S\x08\x0c\xa6\xbbq\xf2\xcas\xcc\x91\xe8\xf2\x03\xc2:\xe7\x12\xde9\x14, \x11\xb2\xb6\xbf\xb3\r\x0f\x13\xa1?\xc0\x98[x\xcf\xb5\xdd\x15\x8e\xa0\x93.\xef\xad\x17\xa1\xbfb\xc4\xf5\xd7\xe4\x91\xe4\xeb\xef\x85\x7feA \xf4\xb0\xac^X\xe2\x8a\xfa\x83\xadd\xef:\x99\xa2\x92^\x8c\x82V\xef\xc9\x1a\x19\x11\xd5`\xb4\xc9\xd2\xc4cg\xb6\xaf\x12Kl\x9a\xc7R\xf9Q\x93\xa8\xd6WB\xba-1\xa3\xbe\xc0\x98\xbf7\x0c\x8b`\xfb`\xaf]/\xd7\'\x966M\xb5\xcd\x90W\xc50\xbf\xben\x1ch^\xe0\x17\x06\xb3\xc1\x19.\xf7]\x1b\xe7H\x90\xfe\xfc\xf5\xf4\x93\xb8F\x1d;\xde\xcb\x85\xe8\x1e\xdd\xee\xfb\xaa\xe7\x91\xc5p{A\xcf/F\x87K?\xcdn\x9cv\x1cf\x7f\xcdT\xaa\x11\'5\xda\xf6<\xbf\x98e\xd9\xd0\xe1>h\xc6[\xf5@o\x1b\xf5\x0c\x9cT\xea\xd5\xe7\xea\x92\x9e\xb4k\tK\xc5.\x0cc\xaa\x88\xcb1=(O\x05\x8eL\xd7H8=\x0e/\xe8z\xfc\xc3\xc5k\xfcz3\xa1K\xee-UOgy\xd3\x9a\xef\xd7\x1a_r\xa0\xe8\xb6f\xfd\x92\x1b\xe4\xb1\xffz\xb3\x04T\x9f\xf8\xfd\x81I\xaajM\xdf\x19\xfd\x9a\xe1\x02\x9bP\x08^\x05\x15\xc8}\xbf\xbd\x93\xa52\x95\xfe{\xceQe\xfc\x9d\x01\xb3\xad\x19\xf5c-\x90\x8a:\x1b\x0f\x8bO\x83\xca\x05\xa8\xb9I\xce\xa6M\x80\xfa^\xaa\x08\\@B_\x83\x1e2t\xd5y\xe4\x07\xc9\x05\xd9\xd5c\xf3\xc0\xf88u\x03\xe7\'\xcc?\x8e)\x9du\xa5\xd6\xec\xef>B\xfc\xcd\xacTH\xe8\xf4`\xca@\xd8\xea\xc1e\xcc~\r\xe1\xb1\x99)\xacu-5\xdb\xa71]1Dg\xa4;+>\xb4?j\xee\xc8\xa9\xb0\xadb\x1e\x9a\xbeqM\xe5\xeb^\x93\xde\xc5\xe3\x7f\x89\xc5 \x1d\x05X\x8e\x98\x1b\xc7m"T\xf1\x9fS\x8c7\x9d(<l4[C\xb1r\xe4\x8a\xb2f\xd9/\xae-\xf8I\x88\x7f\xf2f#{\xe7\x01\x10l\x19}\x1b\xec\x04\xdc\x98i\xde\xac\x97}\xbc\xeb\xb0\xddP\xd7=\x80\xc1\xec<\xf3{1\xd4\xe2E\xb3\x05}\xb4\xfa\xfd\xc4\x89\xa9*\xf8\xca\x17\xe8I\x9f\xb8\xae\xac,\x04\x8c\\S.\xdcD\x19\xd1\xbd\xaeGu%o\x07\xc8\x17\x84\x1csg\xca`\xdf\x0f\x03fhA\xa7\xd8c\x9dq\xf5Y9\xbe\x9fH\\r\xe8\x04\x06p\x0cB\x87\xc9\x15\xc8G\x19\xb2A[ \x87\x1c\x13pk\xd4\x9b\xaf\x1cAF\x97\xc7\xc9\xfc0\xd6B8\xd5\xbei\x19x\xd3\xd4\xaf_\xb4*\x1cWe3\x13\xe5C\x91\xff\x91\xef\x99{a*\x08s<dj#\n\x0b\xd0\x1c\xa1\xf6q\x0c\xba\xefy\xad\xee\xb1\r\xd5\x8f\x8c\xfc\xbf\x0bvz\xf7\xd7\x1a\xad\xb3\xf2\x7f\xa0\xbf^&\x12\x1e\x14\t\x7f\\#\t\xcf\xda\xdc\x1e\'\xaf\x02\xd7\xd63\x1cn\x1eH\x82\xa82\xbc\x0b\x0cC\xd6\x80>\x03\x0fp8v\x95+\xe3\x89\xab\x0b\xf4"\xf7\x11\xa74\x0ef\x93\x1d\x94B\x12=$#B\xd5+X\xf9\xd3\x13\x98\xfba\xc1\xc5?\xda\xc7\x83X\xe3`\xc2\xe6\x92=\xbaC\xd0O^\xf0\xe6[g\x9c\x8f\x03]\x18\xb5\xd2\xcc\x97\x04\xef\xd9h\x9c\xa7\xce\xfc\xaf\x11\x0e\xf8\xb6Ok\xcf\x84[J^\xa3\x00\xc6Q\xb3\x1cS\xefaf\x92\xa5v\xb1&\x94\xf1]\xd7\x8c\x88\x82a\xebA\x1d\xc69/\xd9m\xbd\x7fD\'\xb5\x04F\x98\x1b\x18o\xfc\xa3\xc1\x02\xaf\xa0z\x7f\xe8\xca~b<K\xa0\xc9\x80SM5L\xc4\xad\xf2`\xd4\x11\x8fW\x91\xb4\x8a\xb4\xd8t?\x025o]\x8aq\xbf\x01hy\xe8k\xee\x13$\xcf\xa9\xe3r"4\xce\xbf\x92%\x95\xb1\xee\x95\xf1\xf8\x18\xe8\x97\x06\xaa:pP\x92\xd6\xd2\x8a#\xdd_\x94\xddZ\x8e\r-f\x80\xd3\xab\x05\x95\x90\xa7\xf8\x99`\xdd\x87\x9d\xbe\x8f\xa3\xc6\x00\x96\x84[6!G\x93\x06I\x0b\xb7\xe5\xc2i\xacj\xe2~D\xc3.l:j\x086\x0cR\xe6\x82\xd1\xd3Gz\x88\xceg\xf1/\xf96#\xab\xc0\x0c\x96R\x8aaU\xd3!\x85gZop\xb1\xf5\xe2\xfa\x101H\xc6\xec\xa3\xeb\xf4\x88\xabw0\xee{\xaf\xa6\xfc\x9fk\x94S\xd6\xa0\x0e9/\xbe\xdd\xdd\x93Qq\x13\r`\xa4\x9aO=_c\xa1\x86\xb9%\xe4 =Vq\x9blg\xc3\xcb]\xaex!\xe21\xbf\xd3\xac\xa5\xa8?\':\xe5\xd5\x9f\xf2\tX\x80ly\x92\xe4k\xab\xa7q\xd7/\xe7~`\xf6\xf2\x9d\x1a\xacP:\x8e\x8b\x8b\xb0\xf0\x11xF5\x01\xaf`\x8f\x965\n\x98j\x82\x95D\xd8\xcf\x91S7\xb4\x10\xad\xdd\xc0#\xa8>N\xbb\xe8\x962\xdbz\xacsL\xd86Ng\xb9\xcd\xaeG\xf4|\x1f\xb0t\xdd\xfd\xd4\x1e\x19r?K\x06\xa2\x0ezU\x1d\x15\xd0\xdd\xc70\x9d\x98\xb4\x97w\x87 YtK\xb3I4\xd9h\xcd|D\xc1\xb9\x92\xd9\xf7b\xef\x1a@\xe7\x99\xa9\xe4\x89bv\xfa\xd9N\xef\x0f\x06\x9fQH\x08\x8e\x00\xbd\x8c\x9cT!\xbc}\x80\xb3@\x96Xzz|Q\'\xb6\x80\xa2\xc0\x84P\x8cz\x9f3\xdc\xacgO4\xf3\xd3\xd4\x16*J\x81\t[\x83\xddR\x1b\x16\x0c\xd7\xf5\xaft\x18P\xa1\xc3\xbb\xc7\x81\x120\xc8\x1cu!WV\xb3\xe4>\x13\xb4a{lK4c8\xf7\xb8\xdfC\xbeR\x01\xfe\xb6\xe6s\xd9\xb3\x8fW|b\xee7 \t"\x13HB\xff\x0c\x99\x9e\xbb\xf3Z\xca\xe6\xf1\xda\x86~\x0e\xe5M7\xc4\xdd\xb4\x96R!\x0cN\xc8M\x18\xad\xca\xbc^6\xf8\xa7\xc2x\xa4\x99\x02)\x07z\xd1\xea\x0c\'\x9c=~\x90l\xbe\xb1\xb9_\t>Sx]\xbdB\x89\xc1%<!RL,\xbd\r\x83\xa3\xf0\xbd`\x99\x87\xa1\x9f\xfbc\xb0\r\x80\t\x92\x87_\xfa\xd44X\xa5\xda\x18\xab\tKb \x9c\xf4z\x93\xa3\xf0H\xd8Im\x12\x04?\x13@=\xb9?\xf7\xdb\x00q^\xff\xbd\x89\x93\xd0i\xf4z\x1f\xb3J\x9e\xa9\x980\xfcJ\xce\xad*r\xd1\x1a\x98\t\xc95!Ol\xe9\xef\xc1oM\xaa\xa3\xc4K\x17\xc5[\x98l\xef\x9c\xf9\xa2pl7C3\\Q\x89`\xe4\xaf\xde\x07E\x87$\xe0\xda?\x96"\xdeg\x1f\xd8T\xccG5\xd4\x93\xe2\xb7(\xcfB0is\xc1a\xaac\xd6\x93\xe6y\xd8g!\x89\\\x02\x1ey\xa05@\x82\xaaK\xbe\xf0.V4\x82d\x7f\xd9\xe0&f.,\xd0GA\xeb\xf0P\xf5c>\x12\x9c\xe3$\x8a5#\xce\xc2\x88\x8d\xf0?3\xe0j\x82\x8b\xcb\xf1q\xf0\x91\x9d-\x1e\xf2\xfde4\xb7\x89\x7f\xff\xf0\xaf\xe3T\xdf\xa4\x99\x08.\xc3V\x0b\xb7\xc1\\\xa7\xd4\xf6D\xbckm(\xb2\xe7\xfd\xf6\xf6\xdd`\x9a`\xbd\xa5\xc6\x0e`\xc0l\xc8I\xcf\x96f\xcdZ\xf3Y\xa8\x0b}W^qf\xf2\x00C9$\x13F\xd3A\xed\xa7`\xef\xd4\x10o\xa8\x04\x81\x05\'%<\xb3\x07\x8d\xbc\xfb\xdax@4\xe1\xd2\xe2\xe0\xb2\xee]\xed\xa6\xeb\x060\x9eY\x9a\x8d\xe1\xec\xb8\x13\xd5MA\xc3\xdf\xe5E\x92\x93\xf2\x06\xe5\xd3\xab{\xab\xdb\x13\x01\xf2u\xe3\xe5')In addition to the obfuscated code, this will generate the extra Python package pyarmor_runtime_00000, which is required to run the obfuscated code. In this instance, as we have executed the pyarmor gen command in a Windows environment this will generate a .pyd file.
When distributing this code, we need to distribute the entire dist folder not just the obfuscated script as the script depends on the pyarmor_runtime_00000 package. However, the target machine does not need to have the PyArmor installed. The basic Python interpreter can run the obfuscated code directly.
For details on how to obfuscate packages and use advanced features check the PyArmor documentation. One thing to note is some features like irreversible obfuscation methods are not available in the free version of PyArmor and will require a licensed version.
That’s it, you can check the sample code for all the above examples in the BISINET GitHub repository. The nextstep is to start your Python obfuscation journey.
