Closed ceres-c closed 3 years ago
I guess my understanding is not enough, perhaps @jsoverson can help you. https://github.com/jsoverson/javascript-deobfuscation-AMA
Thanks anyhow, I've opened a new issue over there. If you'd like to close this issue you're welcome to :)
Hello, I'm reverse engineering some scripts from AliExpress and they are using an obfuscator unknown to me. It is supported by de4js since some js are successfully deobfuscated, some only partyially and some others not at all. I'm very sorry to open such an uninformative issue plainly asking for help, but I'm not really into JS and obfuscation, so all of this is new to me. Would you people mind having a look?
Javascript which can be fully deobfuscated
Javascript which can be partially deobfuscated (only the first function)
Javascript which can't be deobfuscated
From an external point of view, these files look pretty much the same regarding the techniques applied (string chunking and rotation, control flow flattening via giant switch cases...), but the deobfuscator does not like some of them. Thanks for your project anyhow, great job there