deobfuscation
How to restore obfuscated property names?
A simple regex replace will do: var _$_21e2 = [“jQuery”, “userAgent”, “test”, “onmouseup”, “onmousemove”, “pink”, “greenyellow”, “gold”]; return code.replace(/\[_\$_21e2\[(\d+)\]\]/g, function(_, i) { return “.”+_$_21e2[i]; }).replace(/_\$_21e2\[(\d+)\]/g, function(_, i) { return JSON.stringify(_$_21e2[i]); }); Given the code as a string, this will yield a code string with human-readable property names and literals.
De-obfuscate Javascript code to make it readable again [duplicate]
Here’s a new automated tool, JSNice, to try to deobfuscate/deminify it. The tool even tries to guess the variable names, which is unbelievably cool. (It mines Javascript on github for this purpose.) http://www.jsnice.org
How to get rid of eval-base64_decode like PHP virus files?
Steps to recover and disinfect your site (provided you have a known good backup). 1) Shutdown the Site You need to basically close the door to your site before you do your remedial work. This will prevent visitors getting malicious code, seeing error messages, etc. Just good practice. You should be able to do this … Read more
How do I de-obfuscate a Lua script?
There are generally two ways to obfuscate Lua source code: Obfuscate the code directly, mostly by renaming variables, introducing istraction and restructuring code to be harder to follow Encode the source code and embed it as a string in a Lua file that only decodes, loads and runs the encoded real program. In reality, a … Read more