4 ms·
Has anyone used an LLM to deobfuscate compiled Javascript?
by echelon 7mo ago
Has anyone used an LLM to deobfuscate compiled Javascript?
- bitexploder 7mo agoYep. They are good at it.
- saagarjha 7mo agoI've used it for hobby efforts on Electron/React Native (Hermes bytecode) apps and it seems to work reasonably well
- heeen2 7mo agoyes, but it requires some nudging if you don't want to waste tokens. it will happily grep and sed through massive javascript bundles but if you tell it to first create tooling like babel scripts to format, it will be much quicker.
- echelon 7mo ago> but if you tell it to first create tooling like babel scripts to format, it will be much quicker. Can you expand on this? Is that existing tooling for deminification?
- heeen2 6mo agofor me it was custom scripts looking for data in minified bundles and refactoring for easier protocol reverse engineering, e.g. https://github.com/echtzeit-solutions/monsgeek-akko-linux/blob/master/driver_extract/refactor-bundle.js https://github.com/echtzeit-solutions/monsgeek-akko-linux/bl...
- lelanthran 7mo ago> Has anyone used an LLM to deobfuscate compiled Javascript? Seems like a waste of money; wouldn't it be better to extract the AST deterministically, write it out and only then ask an LLM to change those auto-generated symbol names with meaningful names?