New Statistical De-minifier and De-obfuscator for JavaScript
1–10 of 34 posts
Re: New Statistical De-minifier and De-obfuscator for JavaScript
#2Whoa, it even infers local variable names automatically.
Re: New Statistical De-minifier and De-obfuscator for JavaScript
#3About: http://www.srl.inf.ethz.ch/jsnice.php
Apparently this is a machine learning research project.
It seems that this would be quite useful for looking at the code of closed-source webapps. Would love to see it open-sourced or available as a service (via an API perhaps). Think auto-deminifying browser extension.
Re: New Statistical De-minifier and De-obfuscator for JavaScript
#4didn't do too well on http://js1k.com/2014-dragons/details/1903 :)
but processed jQuery relatively fast.
Re: New Statistical De-minifier and De-obfuscator for JavaScript
#5Yes, it is statistical. A browser extension would be cool!
Re: New Statistical De-minifier and De-obfuscator for JavaScript
#6Very interesting project. Would be great to get some more info on the actual algorithms being used. The about page offers relatively limited info.
Re: New Statistical De-minifier and De-obfuscator for JavaScript
#7Thank you all for the comments...keep them coming.
we will definitely soon provide more details on how the overall system works...
Re: New Statistical De-minifier and De-obfuscator for JavaScript
#8Handy tool to have. Works suprisingly good.
Re: New Statistical De-minifier and De-obfuscator for JavaScript
#9Naturalize ( http://groups.inf.ed.ac.uk/naturalize/ ) is another related machine learning based tool that suggests appropriate identifier names for Java. Details on the implementation and an evaluation may be found here http://arxiv.org/abs/1402.4182
Re: New Statistical De-minifier and De-obfuscator for JavaScript
#10I took the code presented and put it into packer - http://dean.edwards.name/packer/ , and the "nice" output was not very helpful in that it still looked obfuscated. Maybe I'm misunderstanding something.
So the input to js nice was the packed generateSeries function:
eval(function(p,a,c,k,e,r){e=function(c) {return(c35? String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/, String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c-- )if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('4 3(e){2 t=[];2 n=f+e;2 r=6+e;k(i=1;i<=6;i++){2 s=5.y(5.a()*(r- n+1)+n);t.b([i,s]);n++;r++}c t}$(d).B(4(){2 e=3(0);2 t=3(g);$.h($("#j"),[{7:"l",8:e},{7:"o",8:t}],{p:{q:{u: ["#v","#w"]}},x:{9:z},A: {9:m}})})',38,38,'||var|generateSeries|function|Math|200|label |data|ticks|random|push|return|document||100|300|plot||flotcon tainer|for|data1|10||data2|grid|backgroundColor||||colors|D1D1 D1|7A7A7A|xaxis|floor|20|yaxis|ready'.split('|'),0,{}))