Collection of tools for javascript obfuscation (javascript packers)
From Malware Guru
Below is a list of tools that encrypts javascript and produces scripts to decrypt them in real time and execute them using eval(). This will bypass any static / pattern-based detection mechanisms.
Contents |
Online tools
OMARC MalwareGuru
OMARC MalwareGuru currently hosts the following javascript packers for experimentational and demo purposes:
cha88.cn
cha88.cn hosts A LOT of javascript packers that one can use online.
URL: http://www.cha88.cn
yellowpipe.com
This program let you encode/decode or encrypt/decrypt your documents in various formats such as: ASCSII, Binary, Base 64, Hex, Caesar Bruteforce, MD5, SHA-1, HTML Entities.
URL: http://www.yellowpipe.com/yis/tools/encrypter/index.php
auditmypc
URL: http://www.auditmypc.com/html-encoder.asp
Dean Edward's javascript packer
This packer is really nice but it's running in Dean's kitchen. Hope it lasts.
URL: http://dean.edwards.name/packer/
Monyer
URL: http://monyer.cn/demo/monyerjs.html
JavaScript Obfuscator
Libraries or packages w/ source code
VanishingPoint
Vanishing Point is a toolkit that enables the programmer to implement plugins for different file types to be optimized. The class's main role in optimization is managing the files and calling the appropriate render(). Plugins are based upon the VP_Module interface and should adhere to the standards defined in the VP_Module documentation. Vanishing Point initially debuts with an automatic JavaScript file optimization plugin, which makes use Nicolas Martin's JavaScriptPacker class as well as other JavaScript optimization techniques.
URL: http://code.google.com/p/vanishingpoint/
Actual code: http://code.google.com/p/vanishingpoint/source/browse/trunk/lib/jsPacker/example-inline.php?r=5
Hosted online at:
Shane Ng's GPL-licensed obfuscator
Written in Java, compiles using JDK 1.4.
URL: http://daven.se/usefulstuff/javascript-obfuscator.html
Actual code: http://daven.se/pub/JSO.java
