{
  "added_at": "2026-10-19",
  "additional_evidence_urls": [
    "https://github.com/ben-sb/obfuscator-io-deobfuscator/blob/42efc019d375f3cc266887ec36e929905836639c/package.json",
    "https://github.com/ben-sb/obfuscator-io-deobfuscator/blob/42efc019d375f3cc266887ec36e929905836639c/src/deobfuscator/deobfuscator.ts",
    "https://github.com/ben-sb/obfuscator-io-deobfuscator/tree/42efc019d375f3cc266887ec36e929905836639c/src/deobfuscator/helpers/strings/decoders",
    "https://github.com/ben-sb/obfuscator-io-deobfuscator/blob/42efc019d375f3cc266887ec36e929905836639c/src/deobfuscator/transformations/antiTamper/antiTamperRemover.ts",
    "https://github.com/ben-sb/obfuscator-io-deobfuscator/blob/42efc019d375f3cc266887ec36e929905836639c/LICENSE",
    "https://github.com/ben-sb/obfuscator-io-deobfuscator/pull/52",
    "https://www.npmjs.com/package/obfuscator-io-deobfuscator/v/1.0.6"
  ],
  "category": "web-analysis",
  "description_en": "Deobfuscator dedicated to JavaScript produced by Obfuscator.io (javascript-obfuscator), which its README says also handles most forks. Working statically on a Babel AST, it reveals strings hidden in rotated, Base64- or RC4-encoded string arrays, inlines proxy functions, simplifies objects, arithmetic and string concatenation, removes dead code and the obfuscator's anti-tamper wrappers, and reverses control-flow flattening. Its configuration is detected automatically, and the author also hosts an online version.",
  "description_zh": "专门处理 Obfuscator.io（javascript-obfuscator）所生成 JavaScript 的反混淆工具，README 称也能处理其大部分分支版本。它在 Babel AST 上进行静态处理，可还原隐藏在经过轮转、Base64 或 RC4 编码的字符串数组中的字符串，内联代理函数，化简对象、算术表达式和字符串拼接，删除死代码和混淆器的防篡改包装代码，并还原控制流平坦化。配置会自动检测，作者另提供在线版本。",
  "entry_url": "https://awesomerea.org/resources/obfuscator-io-deobfuscator/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/obfuscator-io-deobfuscator/",
  "evidence_url": "https://github.com/ben-sb/obfuscator-io-deobfuscator/blob/42efc019d375f3cc266887ec36e929905836639c/README.md",
  "group": "tools",
  "id": "obfuscator-io-deobfuscator",
  "json_url": "https://awesomerea.org/resources/obfuscator-io-deobfuscator/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/obfuscator-io-deobfuscator/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/obfuscator-io-deobfuscator/index.md",
  "name": "Obfuscator.io Deobfuscator",
  "name_zh": "Obfuscator.io 专用反混淆工具",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "npm release at review: obfuscator-io-deobfuscator 1.0.6, published 2025-03-27. The reviewed main commit, merged 2026-08-09, adds unreleased improvements to string-array wrapper identification and README notes on running the CLI from source; package.json still reports 1.0.6. No GitHub releases are published.",
    "Install the global obfuscator-io-deobfuscator CLI, which takes an input file and an optional output path, or build it from source with npm and TypeScript. It applies its Babel-based transformations repeatedly, for at most 50 passes; package.json declares no Node.js version range. An online version runs at obf-io.deobfuscate.io.",
    "Input must be JavaScript produced by Obfuscator.io or a compatible fork; other obfuscators are out of scope, and the author's general-purpose javascript-deobfuscator covers generic patterns. The README states that it does not run untrusted code or use a sandbox; recovered strings and control flow still need checking against the original script.",
    "The LICENSE file is Apache-2.0, while package.json and the npm metadata declare ISC."
  ],
  "requirements_zh": [
    "审阅时的 npm 版本为 obfuscator-io-deobfuscator 1.0.6，发布于 2025-03-27。所审阅的 main 分支提交合并于 2026-08-09，新增了尚未发布的字符串数组包装函数识别改进，以及从源码运行命令行工具的 README 说明；package.json 中的版本号仍为 1.0.6。仓库未发布 GitHub Release。",
    "可全局安装 obfuscator-io-deobfuscator 命令行工具，它接受一个输入文件和可选的输出路径；也可以用 npm 和 TypeScript 从源码构建。它会反复执行基于 Babel 的各项转换，最多 50 轮；package.json 未声明 Node.js 版本范围。在线版本位于 obf-io.deobfuscate.io。",
    "输入必须是 Obfuscator.io 或兼容分支版本生成的 JavaScript；其他混淆器不在其适用范围内，通用混淆模式可改用作者的通用工具 javascript-deobfuscator。README 称它不会运行不受信任的代码，也不使用沙箱；还原出的字符串和控制流仍需对照原始脚本核实。",
    "LICENSE 文件为 Apache-2.0，而 package.json 和 npm 元数据声明的是 ISC。"
  ],
  "targets": [
    "website"
  ],
  "url": "https://github.com/ben-sb/obfuscator-io-deobfuscator",
  "verification": "source-reviewed",
  "verified_at": "2026-10-19"
}