PerimeterX/restringer

Add JS加密 Specific Deobfuscation Techniques

Opened this issue · 1 comments

The obfuscator can be found at http://jsjiami.com/

When running the deobfuscator on this script (https://esign.yyyue.xyz/statics/js/sign.js?v=123) there seem to be ton of "window not defined" errors, wondering if theres a way to fix that?

Hi @Lunascaped, thanks for reaching out :)
I think there's a need to add a specific processor for JS加密, since the obfuscation is not too complicated. There's also seem to be a couple of code fragments matching those of obfuscator.io.
I believe that's feasible and will get to it as soon as I have some time (or if anyone else wants to tackle it - I'll be happy to provide input).

The window not defined errors are not really the issue IMO, as they're common when trying to evaluate something that reference the window object outside of a browser. It usually isn't a blocker for deobfuscation.