willnode / deobfuscator

Online Javascript Deobfuscator Tool
https://willnode.github.io/deobfuscator/
133 stars 18 forks source link

[feature request] eval specific function returns #1

Closed ahxxm closed 3 years ago

ahxxm commented 5 years ago

for example the script has a string obfuscate function for access, defined like this:

var _0x131 = function(index, key){return obfs();}

then access becomes:

this[_0x131('0x2', '3W*K')](_0x131('0x3', '8uoO'))

there will be tons of _0x131 call, but currently I need to:

ahxxm commented 5 years ago

one workaround for select is to use built-in Ctrl-f: next match, eval, next match .. but sill not scalable..
image

willnode commented 5 years ago

I think i get your idea. A "function subtitution". It behaves similar to array subtitution but does eval to a function.

One challenging problem to this idea is when that function requires a variable or a function that's outside their scope, e.g. Window -- but I think it's far less common anyway so let's see if I can make it happen.

ahxxm commented 5 years ago

I wrote an AHK script to do repetitive mouse clicks..

In my case the function is not self-contained, it does require a variable and this variable requires additional initialization step. I had to eval it before use eval button..

willnode commented 3 years ago

This is now can be done using eval push and pop (new feature). Thanks for the suggestion.