https://github.com/sallie-may/bio-obfuscator-deobfuscator
How to easily deobfuscate Bio Obfuscation
https://github.com/sallie-may/bio-obfuscator-deobfuscator
deobfuscation deobfuscator obfuscator python
Last synced: about 2 months ago
JSON representation
How to easily deobfuscate Bio Obfuscation
- Host: GitHub
- URL: https://github.com/sallie-may/bio-obfuscator-deobfuscator
- Owner: Sallie-May
- Created: 2024-07-27T23:04:41.000Z (9 months ago)
- Default Branch: main
- Last Pushed: 2024-08-06T18:42:22.000Z (9 months ago)
- Last Synced: 2025-01-16T22:43:03.420Z (3 months ago)
- Topics: deobfuscation, deobfuscator, obfuscator, python
- Language: Python
- Homepage:
- Size: 8.79 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: readme.MD
Awesome Lists containing this project
README
# https://github.com/biolocated/Bio-Obfuscator Code Decryptor
This Python script helps decrypt obfuscated Python scripts that use base64 encoding and AES encryption. It identifies the encrypted content, decrypts it, and outputs the disassembled bytecode.
## How to Use
1. **Setup**: Ensure you have the required Python libraries installed:
- `pycryptodome`
- `zlib`
You can install `pycryptodome` using pip:
```bash
pip install pycryptodome
```
Usage:
Place the obfuscated script in the same directory as main.py.
Run main.py using Python:
```bash
python main.py
```
When prompted, enter the name of the obfuscated file you want to decrypt (e.g., obfuscated_script.py).
Output:
- The script will analyze the provided file, decrypt the code, and disassemble the bytecode.
- The disassembled bytecode will be saved in a file named Deobfuscated.txt in the same directory.
What Does This Script Do?
Pattern Matching:
- It searches for specific patterns in the provided file to identify base64-encoded keys and encrypted code sections.
Decryption:
- The script decodes the base64-encoded key and uses it to decrypt the encrypted code using AES in GCM mode.
Disassembly:
- The decrypted code is disassembled using the dis module, and the disassembled bytecode is saved to Deobfuscated.txt for further analysis.
Notes :
This script is for educational purposes only, use it at your own risk. I am not responsible for any damage caused by the misuse of this script.