[Tutorial] ⭐ How to Unpack Python Executables | 2021 ⭐

[932]

Python Unpacking

Since many people requested me to show a brief explaination on how I extract Python Executables Sourcecode,
I figured why not make it available for everybody.
Python itself, can be easy to Unpack, but tricky to deobfuscate
that's why I will only be featuring the general unpacking process,
but no actual deobfusacting processes.
I learned this shit through Roberth himself, sadly, he's been banned quite a while ago,
so I thought why not post my variation on it.

----------------

Show ContentSpoiler:

Step One:

Download the PythonUnpackerModded by Roberth



Step Two:
Open the desired executable in the PythonUnpackerModded Application and click "Unpack"


Step Three:
After that's done, you will now have a *name_unpacked* folder.
In there, you will need to find the main-file
It looks like this:


Select this file, and copy it to your main folder, where we will be working on the file.
Your Folder should look something like this now:



Step Four:
Rename the main-file to "anyname.pyc",
so your file looks like this:



Now the next steps, will get a bit trickier.
This is actually easier than It looks though.


Step Five:
Open the unpacked folder again, and open the base_library file. This file is a .rar
In that .rar you need to open the "encodings" Folder.

Step Six:
Now you will need to copy the __init__.pyc & aliases.pyc
into your main-folder



Step Seven:
Now you will need to download HxD ( Freeware Hex and Disk Editor )

 

Step Eight:
After that, drag the main-file into HxD, after that, the __init__.pyc and then aliases.pyc file.



Step Nine:

Now you need to follow my steps exactly.
First, copy the __init__.pyc 's first line of hexadecimals.
Then, copy the aliases.pyc 's first line of hexadecimals.

Now look at them both, you will go from left to right when looking at them.
The first few pairs (A2, C9 etc.) will look the same, if not, you did something wrong
The first pair that is not identical to the other one, will be where you start your selection.
Select that pair, and select the rest on the right as well.
Now, replace them all with 00.
After that, copy that line of hexadecimals, and open the main-file tab in HxD

 { Note. Magic Numbers (first 4 hex characters) will vary depending on the Python version used. }

Then, for the last step, paste your newly created line into the first row.

[ If you need help on this one, watch the gif I made below: ]



Step Ten:
Install Uncompyle6 - pip install Uncompyle6

Step Eleven:
Open the CMD in your main-folder by using this simple trick:



Step Twelve:
Type: uncompyle6 - o unpacked Tutorial.pyc | Replace "Tutorial" with your main-file name!

Open the "unpacked" Folder
Here you will have your Unpacked file with the entire Sourcecode!

If you encounter any type of errors, when doing Step Twelve that means that your Software is either compiled using later
versions of PyInstaller, since some may bug out the process.
Or your didn't install something properly

If you need any Support: maB_#0666

Thanks for Everyhing!

[515]

Note. Magic Numbers (first 4 hex characters) will vary depending on the Python version used.

Always confirm via PM before dealing with me.

[932]

This is a bump

Thanks for Everyhing!

[10]

its not possible to unpack the python exe

[657]

nice tutorial mate 

[932]

This is a bump

Thanks for Everyhing!

[51]

thanks dawg appreciate this

[932]

This is a bump

Thanks for Everyhing!