Nader-abdi

Reverse Engineering Webpack Apps

Some notes and techniques for reverse engineering Webpack (and a little bit about React/Vue/Angular) apps.

Table of Contents

• Webpack (and similar bundlers) Chunk Format
  • AST Structure
• Basic minified example

Nader-abdi

#!/bin/bash

# Define usage function
usage() {
  echo "Usage: scanner.sh [-u] [-e excluded_dir] [-i included_ext] [-d] <directory_path>"
  echo ""
  echo "Options:"
  echo "  -u                Do not convert file names to lowercase"
  echo "  -e excluded_dir   Exclude directory from scan"
  echo "  -i included_ext   Include only specified file extensions in scan"

Nader-abdi

#!/usr/bin/env bash

##install Xray perfromance setting
curl -O https://gist.githubusercontent.com/Nader-abdi/029532410f537ee499dc7fc3835bfccb/raw/80399d10539d95e30b0e6eed54528d99221124ef/Xray-performance-up.sh && chmod +x Xray-performance-up.sh && ./Xray-performance-up.sh


##install docker

curl -fsSL https://get.docker.com -o get-docker.sh
sh get-docker.sh

Nader-abdi

#!/usr/bin/env bash

wget --no-check-certificate https://github.com/teddysun/across/raw/master/bbr.sh && chmod +x bbr.sh && ./bbr.sh


## Add sysctl config
echo 'fs.file-max = 51200
net.core.rmem_max = 67108864
net.core.wmem_max = 67108864
net.core.netdev_max_backlog = 250000

Nader-abdi

#!/usr/bin/env bash

iptables -A OUTPUT -p tcp -s 0/0 -d 10.0.0.0/8 -j DROP

iptables -A OUTPUT -p tcp -s 0/0 -d 172.16.0.0/12 -j DROP

iptables -A OUTPUT -p tcp -s 0/0 -d 192.168.0.0/16 -j DROP

iptables -A OUTPUT -p tcp -s 0/0 -d 100.64.0.0/10 -j DROP

Nader-abdi

// Instagram started setting cross-origin-resource-policy: same-origin when it sees bad referer headers.
// this change leads to ERR_BLOCKED_BY_RESPONSE error and broken images if instagram image is embedded to external website.
// to mitigate this, simple image proxy can be used.
// Steps to install this worker:
// 1. Create CNAME cdn.<yourdomain.com> in your CloudFlare panel
// 2. Create new worker and put the code below into the worker code
// 3. Setup worker route so the worker launches on your cdn. subdomain.
// 4. Modify your image urls from 
// https://scontent-arn2-1.cdninstagram.com/v/t51.2885-15/sh0xxx.jpg 
// to:

Nader-abdi

# Copied from https://trac.ffmpeg.org/wiki/CompilationGuide/Centos

yum install -y autoconf automake bzip2 cmake freetype-devel gcc gcc-c++ git libtool make mercurial pkgconfig zlib-devel

mkdir ~/ffmpeg_sources

# NASM
cd ~/ffmpeg_sources
curl -O -L https://www.nasm.us/pub/nasm/releasebuilds/2.15.05/nasm-2.15.05.tar.bz2
tar xjvf nasm-2.15.05.tar.bz2