Skip to content

Instantly share code, notes, and snippets.

@lorishui

lorishui/javascript-deobfuscator-cheatsheet.md

Created July 21, 2026 02:18
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save lorishui/7108e13ff27ef2495dbbac689c7aa4b5 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save lorishui/7108e13ff27ef2495dbbac689c7aa4b5 to your computer and use it in GitHub Desktop.
Download ZIP
JavaScript deobfuscator cheatsheet
Raw
javascript-deobfuscator-cheatsheet.md

JavaScript Deobfuscator Cheatsheet

Reference tool: JavaScript deobfuscator

Use this quick checklist when reviewing obfuscated JavaScript snippets.

Common patterns to decode

  • \x48\x69 style hex escapes
  • \u0061\u006c\u0065\u0072\u0074 Unicode escapes
  • Hex numbers such as 0x10 and 0xff
  • Single-line minified functions that need indentation

Safe review workflow

  1. Paste the snippet into a static deobfuscator.
  2. Decode strings and numeric literals.
  3. Beautify the code for control-flow review.
  4. Inspect suspicious URLs, eval calls, and dynamic property access manually.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment