Fadi002/de4py

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1007 stars · 94 forks observed · 2026-10-14

What it is AI-extracted, prompt v1, taxonomy v1, 2026-09-07, confidence 0.85

An open-source, AI-powered toolkit for reverse engineering Python code, combining an LLM-driven deobfuscation engine (via Ollama) with legacy deobfuscators for popular obfuscators like Jawbreaker and BlankOBF. It ships as a PySide6 GUI application with a CLI mode, a file analyzer, a process-level Pyshell code injector, and a plugin architecture.

Use cases

• deobfuscate python scripts obfuscated with popular obfuscators
• analyze and unpack PyInstaller executables for malware analysis
• recover readable code from control-flow flattened python
• inject python code into a running external process for dynamic analysis
• monitor handles, memory, and sockets of a suspicious process
• extend a reverse engineering workflow with custom analyzer plugins
• use local llms via ollama to deobfuscate heavily obfuscated code

When to choose

• you need to reverse engineer or deobfuscate obfuscated Python code or packed executables
• you are a malware analyst inspecting Python-based malware on Windows
• you want an AI-assisted deobfuscation engine running locally with Ollama
• you prefer a GUI toolkit with an extensible plugin system for Python analysis

When to avoid

• you need commercial use - the CC BY-NC 4.0 license forbids it
• you are not on Windows - full feature support is Windows-focused
• you want a lightweight headless library without downloading local LLM models for the Onyx engine
• you need stable, well-documented APIs for production integration

Facets

application · maturity active

reverse-engineering nlp llm-inference parser developer-tools gui cli security reverse-engineering programming-languages artificial-intelligence developer-tools windows python cli deobfuscator python-deobfuscation pyinstaller malware-analysis pyqt pyside6 ollama injector process-monitoring desktop

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Fadi002/de4py")