ʻpyREticʼ – In memory reverse engineering for obfuscated Python bytecode
ʻpyREticʼ – In memory reverse engineering for obfuscated Python bytecode
ʻpyREticʼ – In memory reverse engineering for obfuscated Python bytecode
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Revision History:<br />
1.0 - 30 June 2010 <strong>–</strong> <strong>In</strong>itial version <strong>for</strong> BlackHat Vegas 2010 & Defcon 18<br />
References:<br />
i http://www.python.org<br />
ii http://docs.python.org/library/dis.html#<strong>bytecode</strong>s<br />
iii http://unpyc.source<strong>for</strong>ge.net & http://code.google.com/p/unpyc/<br />
iv http://users.cs.cf.ac.uk/J.P.Giddy/python/decompiler/decompiler.html<br />
v http://source<strong>for</strong>ge.net/projects/decompyle/<br />
vi http://www.crazy-‐compilers.com/decompyle/<br />
vii http://depython.net/<br />
viii http://docs.python.org/library/dis.html<br />
ix http://docs.python.org/library/pdb.html<br />
x http://www.py2exe.org/<br />
xi http://svn.pythonmac.org/py2app/py2app/trunk/doc/index.html<br />
xii http://cx-‐freeze.source<strong>for</strong>ge.net/<br />
xiii http://docs.python.org/library/marshal.html (Paragraph 1)<br />
xiv http://nedbatchelder.com/blog/200804/the_structure_of_pyc_files.html<br />
xv http://svn.python.org/view/python/trunk/<strong>Python</strong>/import.c?view=markup<br />
xvi http://bitboost.com/#<strong>Python</strong>_obfuscator &<br />
http://pawsense.com/python..obfuscator/ (online demo)<br />
xvii http://code.python.org/hg/trunk/file/a9ad497d1e29/Lib/opcode.py<br />
xviii http://docs.python.org/library/inspect.html<br />
xix http://www.immunityinc.com/resources-‐freesoftware.shtml<br />
xx http://www.jython.org/<br />
xxi http://ironpython.net/
Change language