I have a bytenode JSC file - which is described as:

This tool truly compiles your JavaScript code into V8 bytecode, so that you can protect your source code. It can be used with Node.js, as well as Electron and NW.js (check examples/ directory).

It obfuscates your Electron app. How do I go about decompiling it? x64dbg/Ollydbg won't recognize the file. Is it possible?

There used to be a Ghidra plugin for this called ghidra_nodejs but it has been removed from Github (Wayback machine link).

  • PositiveTechnologies {the owner of that github repo) has an excellent article about this subject. swarm.ptsecurity.com/…
    – user22363
    May 26 at 21:41
  • @user22363 I saw that before but it doesn’t help since the Ghidra plugin doesn’t exist anymore. Thanks
    – MendelG
    May 26 at 21:48
  • You can find the plugin at Natalya Tlyapova's github [1], she co-authored that blog and work as Security Researcher at Positive Technologies. Positive Technologies is one of these Russian companies that the US sanctioned, that why their GitHub account was removed. [1]github.com/ntlyapova/ghidra_nodejs
    – user22363
    May 27 at 7:16
  • @user22363 thanks! Have you installed the plugin before? I'm having trouble with building the plugin (step 4 of the readme file). Would you be able to build the plugin and send me the Zip file? And I'll reward the bounty
    – MendelG
    May 27 at 11:02
  • No, I didn't use it before. I tried to compile it multiple times but apparently it refuse to work properly, I even compiled Ghidra from the source following Ghidra's DevGuide and eclipse still throw errors left and right.
    – user22363
    May 29 at 3:24


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.