jsxer
jsxer copied to clipboard
AngeloD2022
Inline decompilation of Embedded compiled scripts.
eval("@JSXBIN@[email protected]@MyBbyBn0ABJAnAARFFdBFdCFdDFdEFdFf0DzABByB");
to
eval(
/*
* Decompiled inline with Jsxbin Decompiler
* Compiled: "@JSXBIN@[email protected]@MyBbyBn0ABJAnAARFFdBFdCFdDFdEFdFf0DzABByB"
*/
"[1, 2, 3, 4, 5];"
);
This would involve somehow detecting the function name and ensuring that the argument is a jsxbin-formatted string literal.
The question is where to implement this logic. Should it be written in the AST node for function calls?
The question is where to implement this logic. Should it be written in the AST node for function calls?
Maybe implement in string literal decoder if need to inline decompile every possible embedded scripts. Else in function call with a check to the id or if the arg len is one and if it is string and it matches the jsxbin signature in-case of indirect call to eval.