j4k0xb / webcrack

Deobfuscate obfuscator.io, unminify and unpack bundled javascript
https://webcrack.netlify.app
MIT License
1.07k stars 129 forks source link

Using BabelJS to convert Obfuscated JS to AST, then AST to JS #125

Closed GunGunGun closed 6 days ago

GunGunGun commented 6 days ago

steakenthusiast made a guide for using BabelJS for deobfuscating any type of obfuscation: https://steakenthusiast.github.io/

This method is pretty absolute, they make use of BabelJS to AST the code, then convert back to the readable JS code.

Not sure if this can be implemented as a feature of webcrack.

j4k0xb commented 6 days ago

that's already how it works ^^

more specifically: the majority of the changes are made using the babel ast, and there's a bit of dynamic analysis (running code in a sandbox) for deobfuscating string arrays