{
  "added_at": "2026-11-02",
  "additional_evidence_urls": [
    "https://github.com/LostMyCode/javascript-deobfuscator/blob/2cc31bf07d9f870ea0871aabf3af5568d165f57d/src/xDecoder.js",
    "https://github.com/LostMyCode/javascript-deobfuscator/blob/2cc31bf07d9f870ea0871aabf3af5568d165f57d/src/Analyzer.js",
    "https://github.com/LostMyCode/javascript-deobfuscator/blob/2cc31bf07d9f870ea0871aabf3af5568d165f57d/src/components/Main.vue",
    "https://github.com/LostMyCode/javascript-deobfuscator/blob/2cc31bf07d9f870ea0871aabf3af5568d165f57d/src/components/TargetFuncTip.vue",
    "https://github.com/LostMyCode/javascript-deobfuscator/blob/2cc31bf07d9f870ea0871aabf3af5568d165f57d/src/worker.js",
    "https://github.com/LostMyCode/javascript-deobfuscator/blob/2cc31bf07d9f870ea0871aabf3af5568d165f57d/package.json",
    "https://github.com/LostMyCode/javascript-deobfuscator/blob/2cc31bf07d9f870ea0871aabf3af5568d165f57d/public/index.html",
    "https://github.com/LostMyCode/javascript-deobfuscator/blob/2cc31bf07d9f870ea0871aabf3af5568d165f57d/.github/workflows/deploy.yml"
  ],
  "category": "web-analysis",
  "description_en": "Browser-based Vue app that restores the strings Obfuscator.io hides behind string-array lookups in JavaScript. The user pastes the obfuscated script and names its string array or decoder function, such as _0x439c; the tool classifies the calls as plain array indexing, a one-argument decoder or a two-argument RC4-style decoder, runs the script's own decoder to replace each call with its string literal, rewrites bracketed property access as dot notation and beautifies the result. The author hosts a demo at deo.sigr.io.",
  "description_zh": "基于浏览器的 Vue 应用，用于还原 Obfuscator.io 藏在字符串数组查找背后的 JavaScript 字符串。用户粘贴混淆脚本，并填写其中的字符串数组或解码函数名（如 _0x439c）；工具会把调用识别为直接数组下标、单参数解码函数或双参数 RC4 式解码函数，借助脚本自带的解码函数把每次调用替换为字符串字面量，再把方括号属性访问改写为点号形式并美化输出。作者在 deo.sigr.io 提供演示站点。",
  "entry_url": "https://awesomerea.org/resources/lostmycode-javascript-deobfuscator/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/lostmycode-javascript-deobfuscator/",
  "evidence_url": "https://github.com/LostMyCode/javascript-deobfuscator/blob/2cc31bf07d9f870ea0871aabf3af5568d165f57d/README.md",
  "group": "tools",
  "id": "lostmycode-javascript-deobfuscator",
  "json_url": "https://awesomerea.org/resources/lostmycode-javascript-deobfuscator/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/lostmycode-javascript-deobfuscator/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/lostmycode-javascript-deobfuscator/index.md",
  "name": "javascript-deobfuscator (LostMyCode)",
  "name_zh": "javascript-deobfuscator Obfuscator.io 字符串还原网页工具（LostMyCode）",
  "record_type": "resource",
  "relationship": "foundation",
  "requirement_facets": [
    "prerequisites",
    "scope",
    "limits",
    "testing",
    "license"
  ],
  "requirements": [
    "Supply the obfuscated script and identify the target function name yourself; a built-in tip shows call shapes such as _0x439c[103], _0x439c('0x4') and _0x439c('0x2','f]Xg'). The README covers only the Vue CLI 4 project commands (npm install, serve, build and lint), and a GitHub Actions workflow builds the site with Node.js 16 and deploys it to GitHub Pages.",
    "Unversioned: package.json reports 0.1.0 and marks the package private, there are no GitHub releases or npm package, and the reviewed master commit of 2024-05-31 is the latest push.",
    "Only these string-array patterns are handled, with a fourth pattern marked experimental, and unrecognized input returns an error. The code has no passes for control-flow flattening, proxy functions, dead code or Obfuscator.io's other transformations, so those remain in the output. Decoding evaluates the pasted script with eval inside a browser web worker, so the input's own code runs; it is not a static AST transformation. The page template also loads js-beautify from cdnjs and a Google Analytics tag.",
    "The repository has no tests, and the README's only result is an example screenshot.",
    "The repository has no license file and GitHub detects no license, so it grants no stated reuse terms."
  ],
  "requirements_zh": [
    "需自行提供混淆脚本并找出目标函数名；内置提示列出 _0x439c[103]、_0x439c('0x4') 和 _0x439c('0x2','f]Xg') 等调用形式。README 只列出 Vue CLI 4 项目命令（npm install、serve、build 和 lint），GitHub Actions 工作流用 Node.js 16 构建网站并部署到 GitHub Pages。",
    "没有版本发布：package.json 标为 0.1.0 并设为私有包，仓库没有 GitHub Release，也未发布 npm 包；所审阅的 master 分支提交日期为 2024-05-31，即最近一次推送。",
    "工具只处理这些字符串数组模式，另有第四种模式标为实验性，无法识别的输入会报错。代码中没有处理控制流平坦化、代理函数、死代码或 Obfuscator.io 其他变换的步骤，这些内容会保留在输出中。解码时会在浏览器 Web Worker 中用 eval 执行粘贴的脚本，因此输入代码本身会运行；这不是静态的 AST 变换。页面模板还会从 cdnjs 加载 js-beautify，并包含 Google Analytics 统计代码。",
    "仓库没有测试，README 唯一的结果展示是一张示例截图。",
    "仓库没有许可证文件，GitHub 也未检测到许可证，因此未声明任何复用条款。"
  ],
  "targets": [
    "website"
  ],
  "url": "https://github.com/LostMyCode/javascript-deobfuscator",
  "verification": "source-reviewed",
  "verified_at": "2026-10-20"
}