lorishui

JavaScript Deobfuscation Red Flags

Reference tool: JavaScript deobfuscation red flags

When reviewing obfuscated JavaScript, prioritize these red flags after decoding and beautifying the snippet:

• Dynamic execution: eval, new Function, timer strings.
• Hidden strings: hex, Unicode, octal, and base64-like values.
• Dynamic property access: window[decodedName], document[method].
• Suspicious network calls: unknown URLs, webhook endpoints, tracking pixels.

lorishui

Readable JavaScript Output Checklist

Tool: readable JavaScript output

A deobfuscated output is easier to review when it meets these conditions:

• Encoded strings are readable.
• Hex numbers are converted.
• Braces and indentation expose control flow.
• Output can be copied or downloaded as .js.

lorishui

Static JavaScript Malware Review Notes

Reference: static JavaScript deobfuscation tool

Do not execute suspicious snippets just to understand them. A safer first pass is static text transformation:

1. Decode escapes.
2. Beautify structure.
3. Rename obvious helper variables in your notes.
4. Inspect strings, URLs, and dynamic execution points.

lorishui

Beautify Minified JS for Review

Useful tool: beautify minified JS for review

When JavaScript is compressed into one line, first reformat it before judging behavior.

Review checklist:

• Expand function bodies and conditionals.
• Decode encoded strings.

lorishui

Decode Hex and Unicode JavaScript

Tool reference: decode hex and Unicode JavaScript

Obfuscated scripts often hide readable strings using escape sequences:

"\x48\x69"          // Hi
"\u0064\u0061ta"   // data
0x8 // 8

lorishui

Obfuscated JavaScript Test Cases

Reference tool: obfuscated JavaScript test cases

var msg = "\x48\x65\x6c\x6c\x6f";
var word = "\u006a\u0073\u006f\u006e";
var n = 0x2a;
function _0x2a4b(a,b){return b["\x6c\x65\x6e\x67\x74\x68"]>=0x8;}

lorishui

JavaScript Deobfuscator Cheatsheet

Reference tool: JavaScript deobfuscator

Use this quick checklist when reviewing obfuscated JavaScript snippets.

Common patterns to decode

• \x48\x69 style hex escapes
• \u0061\u006c\u0065\u0072\u0074 Unicode escapes

lorishui

Binary Translator Test Cases

Reference tool: https://jsontotable.net/binary-translator

Use these test cases when validating a binary-to-text or text-to-binary converter.

[
  {
 "text": "Hello",

lorishui

Binary Translator Examples and UTF-8 Notes

A short reference for converting binary to text and text to binary.

Useful tool: JsonToTable Binary Translator

Common examples

Text	Binary

lorishui

Sample NBA player stats in JSON and CSV formats. Useful for table testing or API response examples.

Preview JSON as a table: NBA Players CSV Version

NBA Players Json Minifier

NBA Players Json size calculator