Javascript Deobfuscator.

[Nilesh Kumar]

Hi Nulls memebers,

I have couple of Javascript files, obfuscated in the following fashion (sample). There may be some functions which just do the replacement but finding them and coverting it manually is a very tedious task. Is there any tools to de-obfuscate it into original form any script like this?

.value=set.getUSS();};function dX(){aN("\x64\x58\x20\x2d\x20\x53\x65\x6e\x64\x69\x6e\x67\x20\x52\x4d\x4c\x3a\x20","");var Infoset=new DDLTransport.Infoset();Infoset.initialize()("\x4e\x61\x6d\x65\x73\x70\x61\x63\x65","\x52\x65\x4d\x33\x2e\x30\x2e\x31");set.addNounToCommand(1,"\x50\x61\x63\x6b\x61\x67\x65\x20\x49\x6e\x73\x74\x61\x6c\x6c","\x58\x4f\x50",

Any help is greatly appreciated! Thanks!

--
Thanks & Regards,
Nilesh Kumar,

[w3bd...@gmail.com]

This is an online tool.
http://wepawet.iseclab.org/

Sent from BlackBerry® on Airtel

---

From: Nilesh Kumar <nilesh...@gmail.com>

Sender: null-...@googlegroups.com

Date: Tue, 15 Jan 2013 20:38:49 +0530

To: <null-...@googlegroups.com>

ReplyTo: null-...@googlegroups.com

Subject: [null] Javascript Deobfuscator.

--
Get ready to Goa!
nullcon security conference Goa Feb 27th - March 2nd 2013
http://nullcon.net
 
null - Spreading the right Information
null Mailing list charter: http://null.co.in/section/about/null_list_charter/
 
 

[Guilherme Scombatti]

Try this one:

Beautify, unpack or deobfuscate JavaScript and HTML, make JSON/JSONP readable, etc.

http://jsbeautifier.org/

[Cyber Panther]

I remember using a Firefox addon based on jsbeautifier that formats javascript on download so thatit can be used with firebug and other tools. I don't remember the name. I've been looking for it since reimaging my laptop. Has anybody come across the plugin I am talking about?

[eQuiNoX]

On Tue, Jan 15, 2013 at 8:48 PM, <w3bd...@gmail.com> wrote:

This is an online tool.
http://wepawet.iseclab.org/

Very cool -- thanks for sharing.

I've had to deobfuscate js a couple of times and I've tried using jsunpack and the js debugger that comes as part of Firebug.

-- eq

[Cyber Panther]

Found it JS Deminifier 1.0.7

https://github.com/benmmurphy/jsdeminifier_xpi

0|P