1

Here are some cool materials that can assist in your analysis and learning about analysis techniques for obfuscated Javascript, notice that the best way is still to debug the obfuscated code through your own browser debugger (as different from virtualized codes, the logic does not change). Akamai JS Obfuscation JS Reverse from InfoSec Livestream Reversing ...


1

I found a solution. Gist with Node.js code.


1

There's a great resource on W3Schools. In summary: It (this) has different values depending on where it is used: In a method, this refers to the owner object. Alone, this refers to the global object. In a function, this refers to the global object. In a function, in strict mode, this is undefined. In an event, this refers to the element that received ...


1

My friend made this tool: hbctool, a Hermes bytecode disassembler/assembler. This will help you disassemble the file into a more readable format (similar to hbcdump), so you can modify and re-assemble it.


1

There are two major differences between a web page loaded via web browser and via script: While loading the web page a web browser also loads linked resources like scripts, images, css files, ... This can be recognized on server side. A web browser not just downloads the web page but also executed the contained JavaScript. From within JavaScript additional ...


Only top voted, non community-wiki answers of a minimum length are eligible