Live data from Hacker News

New Statistical De-minifier and De-obfuscator for JavaScript

jsnice.org

31–34 of 34 posts

Re: New Statistical De-minifier and De-obfuscator for JavaScript

#31
post #10

I took the code presented and put it into packer - http://dean.edwards.name/packer/ , and the "nice" output was not very helpful in that it still looked obfuscated. Maybe I'm misunderstanding something. So the input to js nice was the packed generateSeries function: eval(function(p,a,c,k,e,r){e=function(c) {return(c 35? String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/, String)){while(c--)r[e(c)]=k[c]||e(…

The various jsBeautifiers special-case the eval() obfuscations, and in particular packer. I think the scope of this tool is to annotate and de-uglify js code without changing the logic, so you get a more readable version of the routine that generates the eval()'d code, that sounds right to me. EDIT: btw, can you please put the code in a code box, it messes with the layout. Mods: this is happening frequently, is it a…

Mods could also just change CSS a bit by adding:

  span.comment {
    display: block;
    width: 800px;
  }
Of course, it should be checked on more pages, but it works here... (using FF)

Re: New Statistical De-minifier and De-obfuscator for JavaScript

#33
post #10

I took the code presented and put it into packer - http://dean.edwards.name/packer/ , and the "nice" output was not very helpful in that it still looked obfuscated. Maybe I'm misunderstanding something. So the input to js nice was the packed generateSeries function: eval(function(p,a,c,k,e,r){e=function(c) {return(c 35? String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/, String)){while(c--)r[e(c)]=k[c]||e(…

The various jsBeautifiers special-case the eval() obfuscations, and in particular packer. I think the scope of this tool is to annotate and de-uglify js code without changing the logic, so you get a more readable version of the routine that generates the eval()'d code, that sounds right to me. EDIT: btw, can you please put the code in a code box, it messes with the layout. Mods: this is happening frequently, is it a…

Yes, it is a bug and on our list to fix. In the meantime, we fix it manually when we see it. It would be helpful to fire a note to hn@ycombinator.com when you notice it.

Re: New Statistical De-minifier and De-obfuscator for JavaScript

#34
post #33

Earlier quoted context omitted.

The various jsBeautifiers special-case the eval() obfuscations, and in particular packer. I think the scope of this tool is to annotate and de-uglify js code without changing the logic, so you get a more readable version of the routine that generates the eval()'d code, that sounds right to me. EDIT: btw, can you please put the code in a code box, it messes with the layout. Mods: this is happening frequently, is it a…

Yes, it is a bug and on our list to fix. In the meantime, we fix it manually when we see it. It would be helpful to fire a note to hn@ycombinator.com when you notice it.

Thanks! Will do.
Post reply on HN