Questions tagged [javascript]
JavaScript or JS is an interpreted computer programming language. It was originally implemented as part of web browsers.
76
questions
0
votes
0answers
37 views
How to decrypt this xml?
I have a blog theme with a lot of obfuscated code, does anyone know how to decode it? Here an example:
var _0x6c0f = ["w7RWwpzCigArVcKSw4c=", "WnlY", "HMODPg==", "...
0
votes
1answer
27 views
Deobfuscate JS code
I have this js obfuscated code:
var _0xcc92=['C3bSAxq=','z2v0rwXLBwvUDa==','DgHLvgLTzq==','Aw1N','CMv0DxjUic8Iia==','kYb0AgLZicSGiG==','AM5HCxC=','xIbDFq==','Aw50','zguGDMvUy2LTAq==','C3vIC3rYAw5N','...
0
votes
0answers
26 views
Methods to alert inappropriate use of JS code
Let's say we have a JS code library that is not for sale, just internal. Of course, anyone who can access the website will be able to download that and reuse it.
To avoid others to reuse that library, ...
1
vote
1answer
39 views
automatically find the object “this” refers to in js
Im quite new to javascript and sometimes I find it really hard to find what object a keyword 'this' refers to. Is there a code editor that is able to do that for me? Or any other advice that could ...
0
votes
1answer
101 views
How can I modify or decompile Hermes JS bytecode?
Since React Native 0.60.4 developers can opt-in to use the Hermes JS Engine. This generates an index.android.bundle binary that contains Hermes JS bytecode.
The Hermes documentation mentions hbcdump ...
2
votes
0answers
53 views
Where to start with reversing a custom JavaScript VM?
I have recently ran into the most heavy JavaScript obfuscation I've seen. It is using a custom VM to execute bytecodes. I have never dealt with such obfuscation, and I am wondering where I can start ...
0
votes
1answer
42 views
What browser do during initial web page request?
I am trying to understand why if I do fetch() 4 times on the active web page, after the fifth fetch server returns response that I am a "robot"
I am using google chrome
I go the following ...
1
vote
0answers
141 views
How to get video file URL from Twitter
I am looking how to find the video URL of a Twitter video so I can code a converter later (using nodejs or something), but I can't figure out how to do this. I saw this but it doesn't really clear ...
0
votes
0answers
101 views
How to locate the function being applied on password
I am thinking of taking up ethical hacking as a hobby. So, I installed Burp Suite Community Edition and set it up with Firefox. I opened Instagram and tried to login with these details (just for ...
2
votes
1answer
33 views
Load a *.dylib or *.so object into the Javascript V8 runtime?
I was reading this Frida release page and noticed it made the following reference:
Short of writing the whole agent in C, one could go ahead and build a
native library, and load it using Module....
1
vote
0answers
67 views
Intercepting packets from Electron App to keyboard in Linux
I have a USB keyboard which has an Electron app to set the macros on the keyboard. I unpacked the app.asar file, and the JS files seem to indicate that it is a ReactJS app, and is a minified ...
1
vote
0answers
56 views
Trying to replicate encryption of an android app
I was trying to replicate/copy the encryption of an android app which uses CryptoJS with sha256 encryption as having seen in the source code of the android app. fingerprinting the app, it was built ...
0
votes
1answer
161 views
Reverse Engineering Javascript - Out of Memory
I found this javascript file on one of those online movie streaming services and was interested in finding out what it does. However, after trying many deobfuscators I am still stuck. A major ...
1
vote
0answers
107 views
How to modify JS with mitmproxy?
I am trying to reverse engineer a heavily obfuscated web application, and I would like to modify the JS to add logging. So far, I've set up mitmproxy, but I can't figure out what the best way to edit ...
0
votes
0answers
286 views
Connect and extract live raw data from bluetooth devices
I recently bought a bunch of bluetooth devices which includes fitness bands, thermometers, room temp. But I've seen that most of them don't appear in the mobile's discoverable list but connects ...
-1
votes
1answer
253 views
De-obfuscate JS code [closed]
I came across a script that converts font files from one type to another (i.e. WOFF to TTF, etc).
I would like to understand it and incorporate some of the code into a personal project. The script ...
1
vote
1answer
232 views
Is it possible to completely reverse this code?
i have this code i'm trying to deobfuscate
https://pastebin.com/g5mHpWE4
I used
https://beautifier.io/ and
http://www.jsnice.org/
but the result is still not good, current code:
https://pastebin.com/...
1
vote
1answer
2k views
How can I deobfuscate this javascript code
I am trying to deobfuscate this javascript code, but I don't know how it was created. Can you please tell me what the mechanism or the function is that generate such characters in javascript?
Ć=-~-~[]...
2
votes
0answers
112 views
How to hook eval function in node.js
As the eval() function of JavaScript is an evil, I want to hook or monkey-patch eval() function of JavaScript in node.js. I want to intercept all arguments passed in eval() function. Please guide me ...
0
votes
1answer
70 views
What's wrong with my mitm to support rr commands with gdbserver on IDA?
First of here is the gdb remote protocol doc.
The idea of the below script is the following - you enter an actual command (one that will be send as a direct packet see packets) in the gdb window then ...
1
vote
0answers
51 views
Need help reversing .m4t TTML subtitles format
I am currently trying to create subtitles for some proprietary Sony software. Unfortunatly, it only recognizes Sony's own .m4t subtitles format. After some research I found that this subtitles is also ...
0
votes
1answer
930 views
decrypt config.bin file from Huawei B5328 router i have source files
Hello i need somehelp in decrypting the file config.bin generated by the page backup_setting.html from huawei B5328 router , i have access to all files in the router even the www files hosted on the ...
1
vote
0answers
19 views
How to programmatically add HTML DOM breakpoints in chromium?
I've seen from this post about Chromium DevTools that there exists the possibility to add DOM breakpoints. Given that I've a full range of elements to monitor I was trying to find a way to ...
3
votes
1answer
607 views
De-obfuscating code ran through JScrambler 3x via Eval() functions
I am relatively new to JS and de-obfuscation in general and I am having difficulties reversing some complicated JS. I know the code itself is obsfucated via jscrambler 3-4x and therefore is ran ...
1
vote
0answers
110 views
deobfuscating/decompiling extremely complicated javascript [closed]
I am working with some extremely complicated JavaScript. It is around 70,000 lines long and sections of the code look like this
U2xx.l11="0x78920d50";m2xx.r9G="11";b2xx.v3y="0x744ebc37";P2xx.K5h="...
0
votes
0answers
37 views
javascript hook comparisons
Look at this very basic javascript code:
if (s=='abcd')
{
if (s2='cdef')
{
...
}
}
I want to hook all tests: I want to get this:
(s,'==','abcd')
(s2,'==','cdef')
Is there a way ...
1
vote
1answer
200 views
WebSocket debugging in Javascript app gives “401 Unauthorized” [closed]
I'm attempting to reverse engineer a private API used by an Android app that makes use of WebSockets. These requests are made from JavaScript inside a WebView.
I use Charles to intercept both HTTP ...
0
votes
1answer
802 views
How to copy video address from tweet?
Twitter has an option to right-click on a video and "copy video address" but this button seems to be broken as it doesn't copy anything to the clipboard, even after I disable Ghostery/adblock. I ...
0
votes
1answer
505 views
Is v8's --print-bytecode safe?
I just saw this post, and I was wondering if it's safe to get v8 bytecode in that fashion with --print-bytecode.
1
vote
1answer
1k views
Analyzing and deobfuscating complex JS code [duplicate]
I am looking to reverse engineer a very ugly piece of JS found here.
As far as I can tell, this script generates and sets some cookies on my browser that identify it on the site. Deobfuscating it ...
1
vote
1answer
759 views
How do you un-obfuscate JS code that is evaluating your browser environment?
Given this:
<script>var
_0x4c36=['w6rChcKeWsKXw7TCocOlNF8Kw7bCuMKdKsOWTMKjF2A=','V3PClhXDu8OCCMO5WwbCp8KhD8KVw7LDo8KOwr7CiA==','w6saBzVaIwbDk8OqHMKGwpvDgzzCixMTMMOL','...
1
vote
2answers
113 views
How can a Javascript file drop .exe written in Visual Basic without network communication?
I am analyzing a malicious JS file, which is obfuscated in a way that I could not de-obfuscate. When I executed it in a virtual machine and spectated process changes, I noticed that a new executable ...
4
votes
3answers
261 views
Obfuscated code analysis - can unused variables be ignored?
I am analyzing a malicious javascript. The code is encoded and obfuscated in a way that I did not manage to even partially deobfuscate yet and it is filled with long strings. In order to simplify the ...
1
vote
1answer
3k views
Is deobfuscation of my javascript code hard or easy?
I am trying to protect my app code from theft. Since most of it is written in javascript I had to use many obfuscation techniques to make it incomprehensible.
I have written a very small piece of ...
-2
votes
1answer
11k views
How do I decode this JavaScript code? [duplicate]
Each file starts with the same function:
(function(_0x128f83, _0x1ae5b9) {
var _0x1b5471 = function(_0x339be5) {
while (--_0x339be5) {
_0x128f83['push'](_0x128f83['shift']());
...
0
votes
1answer
2k views
How decrypt hexadecimal javascript code? [closed]
Someone here already had success to deobfuscate 100% a "hexadecimal" Javascript code?
E.g.:
var _0x22bc92 = function() {
var _0x26938d = !![];
return function(_0x100751, _0x54d399) {
...
1
vote
0answers
58 views
Movies Anywhere ID?
I'm looking to automate requesting movies from different retailers on Movies Anywhere. The URL for the request is: https://retailer.moviesanywhere.com/api/purchase/initiate?retailer={retailer}&id={...
1
vote
1answer
559 views
Map an obfuscated javascript file to the original
Among other approaches, there are ways to "prettify" obfuscated javascript. But most of such approaches are geared towards someone trying to understand code that's not their own (e.g. from a website, ...
1
vote
0answers
105 views
What is the link between g-recaptcha-response one time token and deciphered audio text?
They are multiple reports of recaptcha v2 bypass. Most of the time, the explanation is neural networks services provided by Google or ÉŖŹį“.
But there is something I am failing to understandĀ : for most ...
-1
votes
1answer
711 views
would be possible to deobfuscate javascript code? [closed]
the code is:
https://pastebin.com/wTkB81v4
would be possible to deobfuscate the code to get the original code?
2
votes
1answer
299 views
deobfuscating javascript injected into Wordpress
Found a WP site (not mine) with lovely obfuscated code injected into the footer so I've been trying to de-obfuscate it.
I ran it through unpacker, then converted hex to ASCII, then un-minified to ...
0
votes
2answers
683 views
IDA Pro Alternative for JavaScript?
I am looking for a good "disassembler" for JavaScript, like IDA Pro but for JS. I am looking at a chrome extension, but the JavaScript is heavily obfuscated. After deobfuscating, I am left with ...
4
votes
0answers
2k views
Tool for JavaScript deobfuscation
I'd like to reverse engineer a JavaScript program by manually renaming minimified variable, parameter and function names. However, updating my reverse-engineered code to a newer version would be very ...
3
votes
0answers
134 views
Adobe Reader JIT Pages
I use Adobe Reader XI for a little research project.
I know that Adobe use SpiderMonkey as its JS engine.
When opening a .pdf file that contains JS, the JS code is compiled in runtime in parts (JIT)...
1
vote
2answers
300 views
reverse javascript crackme encryption method algorithm
This crackme contains a text input element on the screen and a button to validate
The value you enter is set into _inputValue, afterwards you click on a button, the function executes, in the last ...
2
votes
2answers
152 views
How to call an item of a Javascript array?
Say I have the following Javascript array:
var _0xe984=[ '\x61\x70\x70\x6c\x79',
'\x72\x65\x74\x75\x72\x6e\x20\x28\x66\x75\x6e\x63\x74\x69\x6f\x6e\x20\x28\x29\x20',
'\x7b\x7d\x2e\x63\x6f\x6e\x73\...
2
votes
2answers
454 views
How work this obfuscation, and how deobfuscate?
Ć ĆĀ”ĆĀ¢ĆĀ£ĆĀ¤ĆĀ„ĆĀ¦ĆĀ§=~[];Ć ĆĀ”ĆĀ¢ĆĀ£ĆĀ¤ĆĀ„ĆĀ¦ĆĀ§={___:++Ć ĆĀ”ĆĀ¢ĆĀ£ĆĀ¤ĆĀ„ĆĀ¦ĆĀ§,$$$$:(![]+"")[Ć ĆĀ”ĆĀ¢ĆĀ£ĆĀ¤ĆĀ„ĆĀ¦ĆĀ§],__$:++Ć ĆĀ”ĆĀ¢ĆĀ£ĆĀ¤ĆĀ„ĆĀ¦ĆĀ§,$_$_:(![]+"")[Ć ĆĀ”ĆĀ¢ĆĀ£ĆĀ¤ĆĀ„ĆĀ¦ĆĀ§],_$_:++Ć ĆĀ”ĆĀ¢ĆĀ£ĆĀ¤ĆĀ„ĆĀ¦ĆĀ§,$_$$:({}+"")[Ć ĆĀ”ĆĀ¢ĆĀ£ĆĀ¤ĆĀ„ĆĀ¦ĆĀ§...
1
vote
1answer
156 views
Likely malicous Javascript-interested in how it works
Got this interesting bit of code compressed in an email named "Install-MSOffice365-WebView-Plugin-Update-0.165.11a.exe.js" that is undoubtedly malicous, but was curious what it does and am not much of ...
4
votes
3answers
48k views
How to get Video URL from embedded Link in Twitter
I'm trying to get the Video URL of ( https://twitter.com/i/videos/823649890379120640?embed_source=facebook )
I tried going over the source code but it give the same URL link
<meta property="og:...
3
votes
1answer
1k views
Possible to get the full url behind javascript button?
I am programming a little tool for patching. I found the microsoft update catalog, where all updates are stored, and I managed to look for some of them.
But my problem is now that the actual download ...
