2

My friend made this tool: hbctool, a Hermes bytecode disassembler/assembler. This will help you disassemble the file into a more readable format (similar to hbcdump), so you can modify and re-assemble it.


1

Here are some cool materials that can assist in your analysis and learning about analysis techniques for obfuscated Javascript, notice that the best way is still to debug the obfuscated code through your own browser debugger (as different from virtualized codes, the logic does not change). Akamai JS Obfuscation JS Reverse from InfoSec Livestream Reversing ...


1

I found a solution. Gist with Node.js code.


1

The approach you are looking for is to to parse both files into Abstract Syntax Trees and then compare the two trees for similarity. A simple solution would be to write a lexer/tokenizer/transducer which replaces the names with just "NAMEGOESHERE" and then use diff. If you post the two files, I can give it a try.


1

There's a great resource on W3Schools. In summary: It (this) has different values depending on where it is used: In a method, this refers to the owner object. Alone, this refers to the global object. In a function, this refers to the global object. In a function, in strict mode, this is undefined. In an event, this refers to the element that received ...


Only top voted, non community-wiki answers of a minimum length are eligible