0x1avram/js-deobfuscator

Deobfuscator for javascript samples obfuscated by obfuscator.io.

js-deobfuscator's Issues

Limiter

error: [deobfuscator.js] Error when transforming the input source code to AST. This is an 'esprima' parser limitation and the code needs to be transpiled to an esprima compatible version before passing it to the deobfuscator. error = Error: Line 124: Unexpected token .. Stack = Error: Line 124: Unexpected token .```

how do i get rid of the limiter?

Problem with Variables after deobfuscating

i was trying to deobfuscate this script,
input text:
input.txt

but some variables are gone like "_0x25716d" and "_0x1087c2"
Here is output:
output.txt

info.log

warn.log

Not finish stage

Version 1.0

info: [index.js] Starting deobfuscation process. {"timestamp":"16:58:43"}
info: [deobfuscator.js] Generating AST from obfuscated source code. {"timestamp":"16:58:43"}
info: [deobfuscator.js] Deobfuscating AST. {"timestamp":"16:58:44"}
info: [deobfuscator.js] 1/12) Deobfuscating stage 'StringArray'. {"timestamp":"16:58:44"}
info: [stage_deobfuscator.js] 1/1) Transform 'StringArraySyntheticTransformer'. {"timestamp":"16:58:45"}
info: [stage_03_stringarray.js] stringArrayTemplateFunctionName = e. {"timestamp":"16:58:45"}
info: [stage_03_stringarray.js] stringArrayCallsWrapperTemplateFunctionName = f. {"timestamp":"16:58:46"}
info: [stage_03_stringarray.js] Found nodeWithStringArrayRotateFunction. {"timestamp":"16:58:46"}

Version 1.2
info: [index.js] Starting deobfuscation process. {"timestamp":"17:01:18"}
info: [deobfuscator.js] Generating AST from obfuscated source code. {"timestamp":"17:01:18"}
info: [deobfuscator.js] Deobfuscating AST. {"timestamp":"17:01:18"}
info: [deobfuscator.js] 1/12) Deobfuscating stage 'StringArray'. {"timestamp":"17:01:18"}
info: [stage_deobfuscator.js] 1/1) Transform 'StringArraySyntheticTransformer'. {"timestamp":"17:01:18"}
info: [stage_03_stringarray.js] stringArrayTemplateFunctionName = M. {"timestamp":"17:01:18"}
info: [stage_03_stringarray.js] stringArrayCallsWrapperTemplateFunctionName = K. {"timestamp":"17:01:18"}
info: [stage_03_stringarray.js] Found nodeWithStringArrayRotateFunction. {"timestamp":"17:01:19"}
info: Addding found stringarray template to execution context. {"timestamp":"17:01:19"}
info: Addding found stringarray calls wrappers templates to execution context. {"timestamp":"17:01:19"}
info: Addding found stringarray rotate template to execution context. {"timestamp":"17:01:19"}
info: Finished adding stringarray specific nodes. {"timestamp":"17:01:19"}

Is blocked here ...
But nice job :)

I can't deobfuscate this file

Hi @0x1Avram
i tried your tool and i loved it .. thank you so much
can you see this file .. i think it's not fully deobfuscate:
https://pastebin.com/W3jcffpb

babel

[BABEL] Note: The code generator has deoptimised the styling of /home/thisismualtemailcuzzzz/js-deobfuscator/obfuscated.txt as it exceeds the max of 500KB.

Ineffective mark-compacts near heap limit Allocation failed - JavaScript heap out of memory

When I deobfuscate the js file which is obfuscated by obfuscator.io, the following error occurs.

<--- JS stacktrace --->

FATAL ERROR: Ineffective mark-compacts near heap limit Allocation failed - JavaScript heap out of memory
 1: 0xb02960 node::Abort() [node]
 2: 0xa18149 node::FatalError(char const*, char const*) [node]
 3: 0xcdd22e v8::Utils::ReportOOMFailure(v8::internal::Isolate*, char const*, bool) [node]
 4: 0xcdd5a7 v8::internal::V8::FatalProcessOutOfMemory(v8::internal::Isolate*, char const*, bool) [node]
 5: 0xe94c15  [node]
 6: 0xe956f6  [node]
 7: 0xea3c1e  [node]
 8: 0xea4660 v8::internal::Heap::CollectGarbage(v8::internal::AllocationSpace, v8::internal::GarbageCollectionReason, v8::GCCallbackFlags) [node]
 9: 0xea7555 v8::internal::Heap::HandleGCRequest() [node]
10: 0xe34bf7 v8::internal::StackGuard::HandleInterrupts() [node]
11: 0x11e0fd5 v8::internal::Runtime_StackGuard(int, unsigned long*, v8::internal::Isolate*) [node]
12: 0x15d54f9  [node]
zsh: IOT instruction  node index.js -i obfuscated.txt -o output.txt -s stringarray.txt -w  -n  -r

The command I use is:

node index.js -i obfuscated.txt -o output.txt -s stringarray.txt -w stringarraywrappers.txt -n _0x1037 -r stringarrayrotate.txt

obfuscated.txt: https://pastebin.com/R0ZseBHB
stringarray.txt: https://pastebin.com/3CFk1s1v
stringarraywrappers.txt: https://pastebin.com/DcnV2QwZ
stringarrayrotate.txt: https://pastebin.com/pZ0PJ7xS

Cannot deobfuscate

Hello,
How can I contact you so we could discuss future private updates of this repository?

warn: Could not find string array and wrappers. {"timestamp":"03:11:44"}

Thank you -_-

Error when transforming the input source code to AST

error: [deobfuscator.js] Error when transforming the input source code to AST. This is an 'esprima' parser limitation and the code needs to be transpiled to an esprima compatible version before passing it to the deobfuscator. error = Error: Line 1: Unexpected token .... Stack = Error: Line 1: Unexpected token ...

https://github.com/0x1Avram/js-deobfuscator/files/13258628/obf.txt