解包 推荐pyinstxtractor
(base) ┌──(cure㉿LAPTOP-CMAM5D0J)-[~/re/pyinstxtractor]
└─$ python pyinstxtractor.py rand_py.exe
[+] Processing rand_py.exe
[+] Pyinstaller version: 2.1+
[+] Python version: 3.10
[+] Length of package: 6296662 bytes
[+] Found 63 files in CArchive
[+] Beginning extraction...please standby
[+] Possible entry point: pyiboot01_bootstrap.pyc
[+] Possible entry point: pyi_rth_inspect.pyc
[+] Possible entry point: rand_py.pyc
[!] Warning: This script is running in a different Python version than the one used to build the executable.
[!] Please run this script in Python 3.10 to prevent extraction errors during unmarshalling
[!] Skipping pyz extraction
[+] Successfully extracted pyinstaller archive: rand_py.exe
You can now use a python decompiler on the pyc files within the extracted directory
但是我本地反编译pyc试了很久,因为pyc文件的版本相对
xdis.dis , uncompyle6 ,decompyle3 都更高,我用了在线工具
https://rivers.chaitin.cn/tools/pyc2py
后面逆向就没啥难度了,随机数种子固定