LostMyCode / javascript-deobfuscator

A deobfuscator for JavaScript codes generated by Obfuscator.io
https://deo.sigr.io/
180 stars 24 forks source link

Server error #15

Open tamakoshihiroki opened 3 years ago

tamakoshihiroki commented 3 years ago

I put the following code which is the simple hello world script obfuscated by obfuscator.io, and try to decode _0x3c5af2. Tring to deobfuscate caused Server error.

var _0x2d97=['Hello\x20World!','log'];(function(_0x5939d0,_0x2d97cf){var _0x3b7660=function(_0x128fb4){while(--_0x128fb4){_0x5939d0['push'](_0x5939d0['shift']());}};_0x3b7660(++_0x2d97cf);}(_0x2d97,0x1d5));var _0x3b76=function(_0x5939d0,_0x2d97cf){_0x5939d0=_0x5939d0-0x0;var _0x3b7660=_0x2d97[_0x5939d0];return _0x3b7660;};function hi(){var _0x3c5af2=_0x3b76;console_0x3c5af2('0x0');}hi();

LostMyCode commented 3 years ago

Thank you for a report. Obfuscator.io owner found this project and then he patched it probably.

Im gonna unpatch it. Sorry for the inconvenience :(

tamakoshihiroki commented 3 years ago

Sorry I couldn't understand. I thought this is a bug of https://deo.sigr.io/, but you mentioned that this is a bug of obfuscator.io?

sanex3339 commented 3 years ago

image

PS: if you select String Array Wrappers Chained Calls and String Array Wrappers Type: Function options, you see even more interesting things

LostMyCode commented 3 years ago

@tamakoshihiroki No. I meant obfuscator.io owner updated algo against this project