[Selling] [SRC] Python Application Protector — Anti-Debug, Runtime Encryption & Source Hardenin

[KernixAC]

Source code for a Python application hardening tool. Takes your Python project and produces a protected distributable with anti-debugging, runtime encryption, and metadata stripping. No external packager required.

This is built for developers distributing Python-based tools who do not want their source extracted from PyInstaller builds or their strings dumped from memory.

What's Included?

Anti-Debug
The runtime checks for attached debuggers and analysis tools before executing protected code. If a known debugger is detected, the process terminates immediately.

• Detects running debuggers including x64dbg, WinDbg, and python debuggers (pdb, PyCharm remote)
• Scans for debug registers and hardware breakpoints in current thread context
• Checks for suspicious parent processes commonly used in sandbox analysis
• Terminates before any sensitive code executes

Memory Protection
Prevents external processes from reading the Python interpreter's memory space while your code is running.

• Modifies process memory permissions on sensitive regions
• Blocks standard memory dump APIs from accessing the Python heap
• Monitors for external OpenProcess handles targeting the current PID

Code Encryption
Your .py files are encrypted on disk and only decrypted into memory at runtime. At rest, the source is ciphertext. In memory, it lives only long enough for the interpreter to compile and execute it.

• AES-256-GCM encryption for each module file
• Unique per-build key derived from hardware fingerprint and build-time nonce
• Decrypted bytecode is passed directly to compile() without writing to filesystem
• No plaintext .py files shipped in the distribution

Expiration Enforcement
Hard-coded expiry check compiled into the runtime loader. After the configured date, the binary refuses to start regardless of system clock tampering attempts.

• Expiry date embedded in the loader at build time
• Multiple clock integrity checks to detect local time manipulation
• Graceful failure with configurable message or silent exit

Source Cleanup
Removes everything that makes reverse engineering easier and shipping cleaner.

• Strips all docstrings from functions, classes, and modules
• Removes comments and inline documentation
• Deletes __file__ and __cached__ references that leak build paths
• Minifies variable names in non-exported scopes where safe
• Reduces overall file size and noise

String Encryption
All string literals in your source are extracted and replaced with encrypted blobs. At runtime, each string is decrypted on first use and cached. String dumps from memory reveal ciphertext, not plaintext.

• Automatic extraction of all string literals from AST
• Per-string AES encryption with unique IVs
• Decryption inlined at call sites — no centralized string table that can be dumped at once
• Support for both byte strings and unicode strings

Import Obfuscation
Hides which third-party libraries your tool depends on. Standard import statements are replaced with dynamic resolution paths that do not appear in static analysis.

• Replaces top-level imports with dynamic __import__ chains
• Library names are encrypted and resolved at runtime
• sys.modules inspection is blocked where possible
• Makes it harder for analysts to fingerprint your tool by dependency list

Build Pipeline

• Single CLI command to process your entire project directory
• Outputs a standalone executable (Windows) or obfuscated package (cross-platform)
• Configurable protection levels: minimal (cleanup only) to full (all layers active)
• Build reports showing what was transformed, encrypted, or stripped

Technical Stack

Build Tool: Python 3.10+
Encryption: AES-256-GCM (cryptography library)
AST Parsing: Standard library ast module
Packaging: PyInstaller hook integration (optional)
Runtime: Embedded C extension for anti-debug and memory checks

Pricing

Lifetime License - €299
Full source code. One year of updates. No recurring fees

Deliverables

• Protector source code
• Runtime loader source (C extension + Python bootstrap)
• Build scripts and CLI reference
• Integration guide for PyInstaller and cx_Freeze
• Personal support

FAQ

Q: Does this work with PyInstaller?
A: Yes. The protector integrates as a pre-build step or as a custom PyInstaller hook. You run your normal PyInstaller command after the protector has processed your source.

Q: Can someone still decompile my Python code?
A: The .py files are encrypted on disk and only decrypted in memory at runtime. Extracting them from a PyInstaller build gives ciphertext, not source. Dynamic analysis (debugging the running process) can still recover decrypted bytecode — this tool raises the barrier significantly but does not make extraction impossible.

Q: Does this work on Linux or macOS?
A: The core source cleanup, string encryption, and import obfuscation work cross-platform. The anti-debug and memory protection runtime components are Windows-specific due to API differences. Linux/macOS builds get the non-Windows layers.

Q: Will this break my code?
A: Source cleanup can break code that depends on docstrings (e.g., Click CLI frameworks, some ORMs). The protector skips known patterns by default and allows you to whitelist specific docstrings or comments. String encryption handles most common string uses but may require whitelisting for inspect-based reflection.

Q: Can I update the expiration date after distribution?
A: No. The expiry is baked into the loader at build time. To extend a customer's license, you must rebuild and redistribute. This is intentional — it prevents clock-tamper bypasses.

Terms

• No refunds on digital source code sales.
• No resale of the source code as a standalone product. You may use it to protect your own applications; you may not sell the protector itself.
• Support is provided personally through telegram
• Updates are provided for one year from the purchase date. Bug fixes are pushed as patches. Feature requests are evaluated but not guaranteed.

Contact & Purchase

Telegram: @vxpaid
DM for payment details, source details or other services details.

Serious inquires only.

You can negotiate, if you want