j4k0xb

undetected-frida. Non-authoritatively making Frida less (not un-!)detectable by applying some symptomatic patches. Melded with CrackerCat/strongR-frida-android, hzzheyang/strongR-frida-android and Ylarod/Florida. Now with Magisk/KSU modules.

v8_killer. A powerful and highly customizable universal V8 virtual machine injector.

certmitm. A tool for testing for certificate validation vulnerabilities of TLS connections made by a client device or an application.

peggy. Peggy: Parser generator for JavaScript

android-otp-extractor. Extracts OTP tokens from rooted Android devices

View8. View8 - Decompiles serialized V8 objects back into high-level readable code.

debugtron. Debug in-production Electron based app

cps. GitHub copilot cli suggest

wakaru. 🔪📦 Javascript decompiler for modern frontend

ImHex. 🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

humanify. Deobfuscate Javascript code using ChatGPT

isolated-vm. Secure & isolated JS environments for nodejs

js-confuser. JS-Confuser is a JavaScript obfuscation tool to make your programs *impossible* to read.

Supplementary-AST-Based-Deobfuscation-Materials. Supplementary deobfuscator source code from my Javascript reverse-engineering blog, ReverseJS.

Cetus. Browser extension for hacking WebAssembly games a la Cheat Engine

Sourcemap-Unpack. Unpack source maps

vitest. Next generation testing framework powered by Vite.

jscythe. Abuse the node.js inspector mechanism in order to force any node.js/electron/v8 based process to execute arbitrary javascript code.

codemod. codemod rewrites JavaScript and TypeScript using babel plugins.

webpack-unpack. Unpack bundles created by webpack

git-dumper. A tool to dump a git repository from a website

one_gadget. The best tool for finding one gadget RCE in libc.so.6

CyberChef. The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

ti_recover. Appcelerator Titanium APK source code recovery tool

v8-randomness-predictor. Using z3 to predict `Math.random` in v8

restringer. A Javascript Deobfuscator

unraw. 🔄 Reverse of JavaScript's `String.raw` API.

return-youtube-dislike. Chrome extension to return youtube dislikes

react-native-bundle-extractor. A utility for extracting the React Native JavaScript bundle from an Android APK or a package installed on a connected device.

bytecode-viewer. A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

Recaf. The modern Java bytecode editor

Apktool. A tool for reverse engineering Android apk files

SponsorBlock. Skip YouTube video sponsors (browser extension)

Magisk. The Magic Mask for Android

playwright. Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

jadx. Dex to Java decompiler

abracadabra. JS & TS automated refactorings for the VS Code editor ✨ It's magic ✨

microdiff. A fast, zero dependency object and array comparison library. Significantly faster than most other deep comparison libraries and has full TypeScript support.

lebab. Turn your ES5 code into readable ES6. Lebab does the opposite of what Babel does.

mitmproxy. An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

frida. Clone this repo to build Frida

core. 🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

esbuild. An extremely fast bundler for the web

naive-ui. A Vue 3 Component Library. Fairly Complete. Theme Customizable. Uses TypeScript. Fast.

shuji. Reverse engineering JavaScript and CSS sources from sourcemaps