Skip to main content

A generic static Python deobfuscator based on AST transformations

Project description

Noctyra

Noctyra Demo

PyPI version Python versions Downloads License

Noctyra is an AST-based framework designed for code transformation and deobfuscation. It provides a modular pipeline to analyze and simplify Python source code by resolving complex expressions and logic.

Overview

The project aims to provide a flexible environment for processing Python's Abstract Syntax Tree. By employing a sequence of pluggable transformers, Noctyra can:

  • Simplify nested logic and conditions.
  • Resolve static values and common encoding patterns.
  • Unroll dynamic execution blocks into readable code.
  • Optimize and clean up obfuscated constructs.

Getting Started

Prerequisites

Ensure you have uv installed for dependency management.

uv sync

Running the Pipeline

To process a target script, use the following command:

python main.py <input_file> [options]

Options:

  • file: Path to the input Python file (required).
  • --output: File name for the transformed code (default: out.py).
  • --iterations: Set a fixed number of transformation passes (default: 0 for auto-detect).
  • --max-iterations: Limit the passes in auto mode (default: 100).
  • --debug: Enable verbose logging for debugging transformations. (look sick)

Development

This project uses uv for dependency management and a Makefile for common tasks.

Setup

uv sync --all-extras --dev

Quality Control

Before submitting a PR or pushing changes, ensure all checks pass:

  • Run Tests: make test
  • Lint & Format: make format
  • Type Check: make typecheck

(Windows users: These commands work automatically via make.bat.)

CI/CD

Automated checks are performed on every push via GitHub Actions, including linting with Ruff, type checking with Mypy, and unit testing with Pytest.

Security Notice

Noctyra includes an internal evaluation engine with basic resource limits. However, when dealing with untrusted code, it is highly recommended to run the pipeline within an isolated environment (such as a container or sandbox) to prevent potential side effects or resource exhaustion.


Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

noctyra-0.4.0.tar.gz (492.7 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

noctyra-0.4.0-py3-none-any.whl (21.0 kB view details)

Uploaded Python 3

File details

Details for the file noctyra-0.4.0.tar.gz.

File metadata

  • Download URL: noctyra-0.4.0.tar.gz
  • Upload date:
  • Size: 492.7 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: uv/0.11.7 {"installer":{"name":"uv","version":"0.11.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for noctyra-0.4.0.tar.gz
Algorithm Hash digest
SHA256 a66944024ebacd2abbf0735a06bdfec79dd76350f8b917272497d80a12914ef5
MD5 964976e7f182ea4a1af9c1a85ce9a2ab
BLAKE2b-256 b2be2baa997406a0b9e5e550154c4580e0bcccdad2be0617bb32da3440bb2a5c

See more details on using hashes here.

File details

Details for the file noctyra-0.4.0-py3-none-any.whl.

File metadata

  • Download URL: noctyra-0.4.0-py3-none-any.whl
  • Upload date:
  • Size: 21.0 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: uv/0.11.7 {"installer":{"name":"uv","version":"0.11.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for noctyra-0.4.0-py3-none-any.whl
Algorithm Hash digest
SHA256 056e8cd0e395ad8737c40460af8794300064d02ff74e3f34faded2293ac46926
MD5 e41a34055132b5b8c095e1ef927556f5
BLAKE2b-256 f26965abfed505d5bd9654db00f44ccb46500a481a9eb5cc633c5a29acf532dc

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page