{
  "added_at": "2026-10-27",
  "additional_evidence_urls": [
    "https://github.com/katana-project/slicer/blob/1881aae26eed58d12885a21305554aae2cb4ccc5/package.json",
    "https://github.com/katana-project/slicer/tree/1881aae26eed58d12885a21305554aae2cb4ccc5/src/lib/disasm/worker",
    "https://github.com/katana-project/slicer/blob/1881aae26eed58d12885a21305554aae2cb4ccc5/src/lib/workspace/jdk.ts",
    "https://github.com/katana-project/slicer/blob/1881aae26eed58d12885a21305554aae2cb4ccc5/LICENSE",
    "https://docs.katana-project.org/slicer/",
    "https://docs.katana-project.org/slicer/reference/disasm/",
    "https://docs.katana-project.org/slicer/reference/deobf/",
    "https://docs.katana-project.org/slicer/reference/analysis/mapping/",
    "https://docs.katana-project.org/slicer/reference/analysis/transformers/",
    "https://docs.katana-project.org/slicer/reference/share/",
    "https://slicer.run/"
  ],
  "category": "jvm",
  "description_en": "Browser-based Java reverse-engineering tool that loads class files and JAR/ZIP archives and disassembles or decompiles them with Vineflower (the default), CFR, Procyon or JASM, compiled to run in the browser, next to its own bytecode disassembler. It draws inheritance and interface graphs and per-method control-flow graphs, searches constant-pool entries, instructions and member declarations or usages, applies Tiny, SRG/TSRG/CSRG or ProGuard mappings, and offers generic transformers that strip or normalize bytecode attributes so decompilers cope better with obfuscation. A JavaScript scripting API can add disassemblers and manipulate the workspace; the README itself recommends Recaf for serious reverse engineering.",
  "description_zh": "基于浏览器的 Java 逆向工程工具：可加载 class 文件和 JAR/ZIP 归档，使用编译为可在浏览器中运行的 Vineflower（默认）、CFR、Procyon 或 JASM 进行反汇编或反编译，另有自带的字节码反汇编器。它能绘制继承与接口实现关系图以及单个方法的控制流图，搜索常量池条目、指令以及成员声明或使用位置，可应用 Tiny、SRG/TSRG/CSRG 或 ProGuard 映射，还提供剥离或规范化字节码属性的通用转换器，帮助反编译器更好地应对混淆。JavaScript 脚本 API 可添加反汇编器并操作工作区；README 自己也建议，若要进行严肃的逆向工程，应使用 Recaf。",
  "entry_url": "https://awesomerea.org/resources/slicer/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/slicer/",
  "evidence_url": "https://github.com/katana-project/slicer/blob/1881aae26eed58d12885a21305554aae2cb4ccc5/README.md",
  "group": "tools",
  "id": "slicer",
  "json_url": "https://awesomerea.org/resources/slicer/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/slicer/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/slicer/index.md",
  "name": "slicer",
  "name_zh": "slicer 浏览器端 Java 逆向工具",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Runs as the hosted web app at slicer.run and can be installed as a PWA. The repository has no releases or tags, so this entry pins the reviewed main commit (2026-09-19); local builds are a Vite and Svelte app built with pnpm, and the repository has no CI workflow. The documentation says slicer is in active development and that features may be missing.",
    "The documentation states that no data is sent to any server and that decompilers run locally in the browser; JDK library classes are fetched on demand from data.slicer.run, and URL parameters can load a JAR, mapping file or script from another site. Input is class files or JAR/ZIP archives from software the user may analyze; HPROF heap dumps and Android binary XML can also be viewed.",
    "The documentation warns that decompiled output is a best-effort approximation that may not be valid Java, especially for code from non-javac compilers or obfuscators. slicer has no obfuscator-specific deobfuscation, and its remapper does not propagate names through inheritance.",
    "MIT license for slicer; bundled components such as the Vineflower and Procyon decompilers are Apache-2.0."
  ],
  "requirements_zh": [
    "以 slicer.run 上托管的网页应用形式运行，也可安装为 PWA。仓库没有发布版本或标签，因此本条目固定到所审阅的 main 分支提交（2026-09-19）；本地构建是用 pnpm 构建的 Vite 与 Svelte 应用，仓库没有配置 CI 工作流。文档称 slicer 仍在积极开发中，部分功能可能缺失。",
    "文档称不会向任何服务器发送数据，反编译器均在浏览器本地运行；JDK 库类会按需从 data.slicer.run 获取，URL 参数还可从其他网站加载 JAR、映射文件或脚本。输入为用户有权分析的软件中的 class 文件或 JAR/ZIP 归档；也可查看 HPROF 堆转储和 Android 二进制 XML。",
    "文档提醒，反编译输出只是尽力而为的近似结果，未必是合法的 Java 代码，对非 javac 编译器或混淆器生成的代码尤其如此。slicer 没有针对特定混淆器的反混淆功能，其重映射器也不会沿继承关系传播名称。",
    "slicer 本身采用 MIT 许可；其中包含的 Vineflower 和 Procyon 反编译器等组件采用 Apache-2.0 许可。"
  ],
  "targets": [
    "app"
  ],
  "url": "https://github.com/katana-project/slicer",
  "verification": "source-reviewed",
  "verified_at": "2026-10-19"
}