Awesome project - looking for help?

j4k0xb / webcrack

Deobfuscate obfuscator.io, unminify and unpack bundled javascript

https://webcrack.netlify.app

MIT License

663 stars 72 forks source link

Awesome project - looking for help? #3

Open el-buku opened 1 year ago

el-buku commented 1 year ago

Hello I ve been using webcrack for some stuff the past week and it's an awesome tool, so i'd love to help maintain and grow it. Let me know if you're looking for help and we can discuss anytime.

j4k0xb commented 1 year ago

Thanks for the offer, any help is appreciated and feel free to discuss here if you have concrete plans. As it's relatively new/small, there isn't much to maintain currently except implementing new features

If you want to contribute, some ideas from easy to hard:

void 0 to undefined transform
https://eslint.org/docs/latest/rules/yoda transform
support more bundlers (browserify, webpack-jsonp) to be unpacked
variable name mangling (_0x4d0180 to a)
being able to run in a browser (need to find an alternative to vm2) + website on GitHub pages

el-buku commented 1 year ago

As far as maintenance goes I could take care of the yoga and void 0 transforms but I have a project idea I'd like to explore around unmangling variable names actually, that I think you'll find very interesting as well. Let me know if you'd like to discuss more and we could have a call

Many thanks

el-buku commented 1 year ago

I'll show you a POC for that next week so you can let me know your thoughts.

j4k0xb commented 1 year ago

closed for now because stale

0xdevalias commented 8 months ago

Curious if @el-buku ever described/released anything about their variable name unmangler; as that's something i've definitely been interested in exploring in the past myself.

el-buku commented 8 months ago

My idea was to use Langchain and leverage GPT into guessing variable names based on context and usage, but never got around to it. If this looks worthwhile I'd take a stab at it once I have some free time

j4k0xb commented 8 months ago

Check out this project, it's essentially doing what you described and gives excellent results: https://github.com/jehna/humanify But its kinda expensive to run for scripts beyond a few kb Do you think its better to use it on its own, integrate it here or generate generic names like arg_1, random words, etc for free like https://github.com/j4k0xb/webcrack/issues/21#issuecomment-1807290502