Questions tagged [javascript]
JavaScript or JS is an interpreted computer programming language. It was originally implemented as part of web browsers.
0
votes
0answers
24 views
Detecting what causes edited Javascript file to crash entire browser tab
I'm currently trying to debug a Javascript game that's been made with Haxe 3.4.7.
When I'm trying to override the .js file locally, my entire browser seems to crash, or simply not load. I'm thinking ...
1
vote
0answers
13 views
How to programmatically add HTML DOM breakpoints in chromium?
I've seen from this post about Chromium DevTools that there exists the possibility to add DOM breakpoints. Given that I've a full range of elements to monitor I was trying to find a way to ...
0
votes
0answers
23 views
replace variable references with its values at once in javascript file
I'm trying to de-obfuscate a Javascript file:
Javascript Obfuscated File
I have already de-obfuscated the code but it's still hard to read.
As you can see in the code below there is a huge list of ...
1
vote
1answer
85 views
De-obfuscating code ran through JScrambler 3x via Eval() functions
I am relatively new to JS and de-obfuscation in general and I am having difficulties reversing some complicated JS. I know the code itself is obsfucated via jscrambler 3-4x and therefore is ran ...
1
vote
0answers
41 views
deobfuscating/decompiling extremely complicated javascript [closed]
I am working with some extremely complicated JavaScript. It is around 70,000 lines long and sections of the code look like this
U2xx.l11="0x78920d50";m2xx.r9G="11";b2xx.v3y="0x744ebc37";P2xx.K5h="...
0
votes
0answers
32 views
Determining correct javascript file deobfuscation
I am trying to reverse engineer a game which sends it's data through an Obfuscate and DeObfuscate function to protect itself. The code base is 50k+ lines long (pretty printed), and eval techniques ...
0
votes
0answers
21 views
javascript hook comparisons
Look at this very basic javascript code:
if (s=='abcd')
{
if (s2='cdef')
{
...
}
}
I want to hook all tests: I want to get this:
(s,'==','abcd')
(s2,'==','cdef')
Is there a way ...
1
vote
1answer
36 views
WebSocket debugging in Javascript app gives “401 Unauthorized” [closed]
I'm attempting to reverse engineer a private API used by an Android app that makes use of WebSockets. These requests are made from JavaScript inside a WebView.
I use Charles to intercept both HTTP ...
0
votes
1answer
56 views
How to copy video address from tweet?
Twitter has an option to right-click on a video and "copy video address" but this button seems to be broken as it doesn't copy anything to the clipboard, even after I disable Ghostery/adblock. I ...
0
votes
1answer
126 views
Is v8's --print-bytecode safe?
I just saw this post, and I was wondering if it's safe to get v8 bytecode in that fashion with --print-bytecode.
1
vote
1answer
279 views
Analyzing and deobfuscating complex JS code [duplicate]
I am looking to reverse engineer a very ugly piece of JS found here.
As far as I can tell, this script generates and sets some cookies on my browser that identify it on the site. Deobfuscating it ...
1
vote
1answer
185 views
How do you un-obfuscate JS code that is evaluating your browser environment?
Given this:
<script>var
_0x4c36=['w6rChcKeWsKXw7TCocOlNF8Kw7bCuMKdKsOWTMKjF2A=','V3PClhXDu8OCCMO5WwbCp8KhD8KVw7LDo8KOwr7CiA==','w6saBzVaIwbDk8OqHMKGwpvDgzzCixMTMMOL','...
1
vote
2answers
67 views
How can a Javascript file drop .exe written in Visual Basic without network communication?
I am analyzing a malicious JS file, which is obfuscated in a way that I could not de-obfuscate. When I executed it in a virtual machine and spectated process changes, I noticed that a new executable ...
4
votes
3answers
169 views
Obfuscated code analysis - can unused variables be ignored?
I am analyzing a malicious javascript. The code is encoded and obfuscated in a way that I did not manage to even partially deobfuscate yet and it is filled with long strings. In order to simplify the ...
1
vote
1answer
1k views
Is deobfuscation of my javascript code hard or easy?
I am trying to protect my app code from theft. Since most of it is written in javascript I had to use many obfuscation techniques to make it incomprehensible.
I have written a very small piece of ...
-3
votes
1answer
3k views
How do I decode this JavaScript code? [duplicate]
Each file starts with the same function:
(function(_0x128f83, _0x1ae5b9) {
var _0x1b5471 = function(_0x339be5) {
while (--_0x339be5) {
_0x128f83['push'](_0x128f83['shift']());
...
-1
votes
1answer
843 views
How decrypt hexadecimal javascript code? [closed]
Someone here already had success to deobfuscate 100% a "hexadecimal" Javascript code?
E.g.:
var _0x22bc92 = function() {
var _0x26938d = !![];
return function(_0x100751, _0x54d399) {
...
1
vote
0answers
41 views
Movies Anywhere ID?
I'm looking to automate requesting movies from different retailers on Movies Anywhere. The URL for the request is: https://retailer.moviesanywhere.com/api/purchase/initiate?retailer={retailer}&id={...
1
vote
1answer
249 views
Map an obfuscated javascript file to the original
Among other approaches, there are ways to "prettify" obfuscated javascript. But most of such approaches are geared towards someone trying to understand code that's not their own (e.g. from a website, ...
1
vote
0answers
60 views
What is the link between g-recaptcha-response one time token and deciphered audio text?
They are multiple reports of recaptcha v2 bypass. Most of the time, the explanation is neural networks services provided by Google or ɪʙᴍ.
But there is something I am failing to understand : for most ...
-2
votes
1answer
476 views
would be possible to deobfuscate javascript code? [closed]
the code is:
https://pastebin.com/wTkB81v4
would be possible to deobfuscate the code to get the original code?
1
vote
1answer
245 views
deobfuscating javascript injected into Wordpress
Found a WP site (not mine) with lovely obfuscated code injected into the footer so I've been trying to de-obfuscate it.
I ran it through unpacker, then converted hex to ASCII, then un-minified to ...
0
votes
2answers
413 views
IDA Pro Alternative for JavaScript?
I am looking for a good "disassembler" for JavaScript, like IDA Pro but for JS. I am looking at a chrome extension, but the JavaScript is heavily obfuscated. After deobfuscating, I am left with ...
2
votes
0answers
1k views
Tool for JavaScript deobfuscation
I'd like to reverse engineer a JavaScript program by manually renaming minimified variable, parameter and function names. However, updating my reverse-engineered code to a newer version would be very ...
3
votes
0answers
84 views
Adobe Reader JIT Pages
I use Adobe Reader XI for a little research project.
I know that Adobe use SpiderMonkey as its JS engine.
When opening a .pdf file that contains JS, the JS code is compiled in runtime in parts (JIT)...
1
vote
2answers
193 views
reverse javascript crackme encryption method algorithm
This crackme contains a text input element on the screen and a button to validate
The value you enter is set into _inputValue, afterwards you click on a button, the function executes, in the last ...
2
votes
2answers
135 views
How to call an item of a Javascript array?
Say I have the following Javascript array:
var _0xe984=[ '\x61\x70\x70\x6c\x79',
'\x72\x65\x74\x75\x72\x6e\x20\x28\x66\x75\x6e\x63\x74\x69\x6f\x6e\x20\x28\x29\x20',
'\x7b\x7d\x2e\x63\x6f\x6e\x73\...
2
votes
2answers
277 views
How work this obfuscation, and how deobfuscate?
Ø Ø¡Ø¢Ø£Ø¤Ø¥Ø¦Ø§=~[];Ø Ø¡Ø¢Ø£Ø¤Ø¥Ø¦Ø§={___:++Ø Ø¡Ø¢Ø£Ø¤Ø¥Ø¦Ø§,$$$$:(![]+"")[Ø Ø¡Ø¢Ø£Ø¤Ø¥Ø¦Ø§],__$:++Ø Ø¡Ø¢Ø£Ø¤Ø¥Ø¦Ø§,$_$_:(![]+"")[Ø Ø¡Ø¢Ø£Ø¤Ø¥Ø¦Ø§],_$_:++Ø Ø¡Ø¢Ø£Ø¤Ø¥Ø¦Ø§,$_$$:({}+"")[Ø Ø¡Ø¢Ø£Ø¤Ø¥Ø¦Ø§...
1
vote
1answer
140 views
Likely malicous Javascript-interested in how it works
Got this interesting bit of code compressed in an email named "Install-MSOffice365-WebView-Plugin-Update-0.165.11a.exe.js" that is undoubtedly malicous, but was curious what it does and am not much of ...
3
votes
3answers
22k views
How to get Video URL from embedded Link in Twitter
I'm trying to get the Video URL of ( https://twitter.com/i/videos/823649890379120640?embed_source=facebook )
I tried going over the source code but it give the same URL link
<meta property="og:...
2
votes
1answer
559 views
Possible to get the full url behind javascript button?
I am programming a little tool for patching. I found the microsoft update catalog, where all updates are stored, and I managed to look for some of them.
But my problem is now that the actual download ...
8
votes
1answer
1k views
How do I reverse this javascript code? How is it packed?
I've a couple of questions regarding this javascript code, I found injected in one of my web pages.
What is this script doing?
Which tool is used to pack or obfuscate this script?
How can I learn the ...
2
votes
1answer
2k views
Frida manipulating arguments - Android
I've attempting to learn how to use Frida to instrument android app, just for person interest.
So far I've managed to get my environment set up with a physical android tablet and I can successfully ...
0
votes
1answer
95 views
Census world and US population clocks
I'm trying to figure out the formula used by the US Census Department's world and US population clocks here:
https://www.census.gov/popclock/?intcmp=home_pop
I'm pretty sure they're using a browser-...
1
vote
0answers
64 views
Reverse engineer StackExchange winter bash
I'm curious if it's possible to reverse engineer the hat positioning and control of the StackExchange winter bash.
They offer the "show controls" checkbox, but it's still all mouse-based; when you ...
-3
votes
1answer
3k views
How to deobfuscated javascript?
How to deobfuscate javascript file, i have a javascript code are deobfuscate .
Code: http://pastebin.com/zFH2GidN
Help me and thanks you.
0
votes
1answer
128 views
Reverse Engineer Joomla fabrik calculator
I am wondering if it is possible to reverse engineer the calculator on this url:
http://www.contrelec.co.uk/index.php/en/motor-full-load-current-estimator-kw
It appears to be a Joomla site with the ...
2
votes
0answers
157 views
Javascript equivalent of JEB
In case you already know, there is a full-feature decompiler for Java/Android called JEB (https://www.pnfsoftware.com/)
Some of the most important features include the ability to rename identifiers ...
0
votes
2answers
440 views
Reverse engineering a java applet using python/Javascript
I love doing online stock trading in my free time. Because I spend most of the day at my job I cannot do much of it. So, I'm thinking of making a software that will automatically place trades for me ...
1
vote
0answers
72 views
Where to identify and access the main object/closure in a JavaScript web app?
I want to add missing functionality to a web app's front end code JavaScript code.
I can find the code in the browser's developer tools by setting breakpoints and stepping through.
But in a large ...
2
votes
1answer
172 views
LastPass Android javascript behaviour
A few weeks ago I made a proof-of-concept app demonstrating how LastPass' method of filling out creds in Chrome was insecure. For those interested the source is at https://github.com/activems/...
0
votes
2answers
740 views
What kind of JS obfuscation is this? [closed]
I have read about de-obfuscating JS files and about multi-layered obfuscation. I have come across a file (which I have uploaded here) and it doesn't seem to be obfuscated except for lines 21 and 42. I ...
2
votes
2answers
3k views
Deobfuscating a javascript file
I am having a obfuscated JS file and I want to deobfuscate it (and not beautify it). I have seen answer to a similar question here and I tried de-obfuscating a the file using online version of ...
-3
votes
1answer
187 views
Trying to deobfuscate multi layered javascript [closed]
Can someone deobfuscate this code? I am not getting any way to deobfuscate this.
Unable to paste it over here as it over passed 30,000 word limit.
http://pastebin.com/V327Q8Hg
Thanks
-2
votes
1answer
1k views
Trying to decrypt javascript code [duplicate]
Is it possible to deobfuscate/decrypt this javascript code?
;eval(function(w,i,s,e){var lIll=0;var ll1I=0;var Il1l=0;var ll1l=[];var l1lI=[];while(true){if(lIll<5)l1lI.push(w.charAt(lIll));else if(...
11
votes
1answer
79k views
How to deobfuscate an obfuscated javascript file like this? [duplicate]
I'm having serious problems deobfuscating a JavaScript file at work. This file is inside a web app that I was left in charge to improve it. The problem is that I can do it without having access to ...
1
vote
1answer
582 views
Suspicious obfuscated javascript file
This question is related to another question made on StackOverflow.
The users asks about a unknown JavaScript file which is being loaded on his website.
I managed to unroll a bit of the JavaScript ...
2
votes
0answers
875 views
How to analyse the communication between a WebApp loaded with awesomium and the native program?
I have a Windows program that uses awesomium to display a WebApp. This WebApp communicates in some way with the client program through some native calls. I found references to window.externalHost and ...
1
vote
0answers
1k views
How to send and render an .html for chromecast using RAW http requests?
I am trying to RE the chrome cast protocol.
I saw Koushik Dutta did RE the protocol, but didn't find any post online analyze the protocol. Moreover Google changed it a little bit since then.
...
2
votes
1answer
4k views
