Some tips for improving your obfuscator

[ghost]

Here's a few things you could implement to improve your obfuscator a bit

• Proper dead code insertion: just putting random functions in there doesn't do much, and can be easily cleaned up

• Using Python's AST module for more advanced obfuscation for:

  • symbol renaming
  • import obfuscation
  • Mixed Boolean Arithmetic obfuscation, turn 1+1 into ~(~(1 + 1) | ~(1 + 1)) | ~(~(1 + 1) | ~(1 + 1))
  • Proper junk code insertion (like I said before), like inserting entire classes with fake decryption routines or the like
  • Function integrity checking (calculate the hash digest of myfunction.__code__.co_code and store it, then compare it at runtime)

  And if you want to get really funky, why not write a virtual machine for evaluating your transformed python code?