Javascript+deobfuscator+and+unpacker+portable | Instant Download |
While deobfuscators handle logic, unpackers handle encoding layers.
P42 is a sophisticated JavaScript deobfuscator that uses abstract syntax tree (AST) manipulation. You don't need Python installed; use the portable Python runtime (python-embedded.zip) extracted into the same folder.
JSDeob-Port’s portable sandbox is ≈3× faster than headless browser-based tools due to no DOM rendering overhead. javascript+deobfuscator+and+unpacker+portable
For nested eval or Function constructors, static analysis is insufficient. A lightweight JS sandbox is implemented using either:
The sandbox intercepts:
class PortableSandbox {
constructor(code, timeoutMs = 1000)
this.code = code;
this.timeout = timeoutMs;
run() {
const captured = [];
const safeGlobal = new Proxy({}, {
get(target, prop) {
if (prop === 'eval') return (c) => captured.push(c);
if (prop === 'Function') return (...args) => captured.push(args.pop());
return () => {};
}
});
// Execute with restricted globals
const fn = new Function('window', 'self', 'global', this.code);
try fn(safeGlobal, safeGlobal, safeGlobal); catch(e) {}
return captured;
}
}
After unpacking, the AST is normalized:
We collected 1,500 obfuscated JavaScript samples from: The sandbox intercepts:
Ground truth was obtained via manual deobfuscation or original source (when available).
Comentarios recientes