Websites.

Chrome DevTools for coding agents

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Clone any website with one command using AI coding agents

Socket-based TS/JavaScript API for WhatsApp Web

The WebAssembly Binary Toolkit

Reverse engineering WhatsApp Web.

The first AI agent that builds permissionless integrations through reverse engineering platforms' internal APIs.

Extract any website’s design system into tokens in seconds: logo, colors, typography, borders & more. One command.

✨ Reverse-engineered Python API for Google Gemini web app

Deobfuscate obfuscator.io, unminify and unpack bundled javascript

Simple extensive tar-like archive format with indexing

Decompiler Explorer! Compare tools on the forefront of static analysis, now in your web browser!

A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.

CLI and Rust libraries for low-level manipulation of WebAssembly modules

General purpose JavaScript deobfuscator

🔪📦 Javascript decompiler for modern frontend

Framework to interpret and transpile JVM bytecode to JavaScript, OpenCL or WebAssembly.

Collaborative decompilation and reverse engineering website

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

WebAssembly to C decompiler

Spec compliant WebAssembly compiler, decompiler, and generator

A Chrome extension for web analytics

A deobfuscator for JavaScript codes generated by Obfuscator.io

A javascript bytecode decoder for mozilla spider-monkey version 34. May decompile jsc file compile by cocos-2dx

A modern Java reverse engineering tool for the web.

🚀 AI-powered JavaScript decompiler and deobfuscator. Uses AI and ASTs for code analysis and deobfuscation, turning unreadable build artifacts into understandable code.

Supplementary deobfuscator source code from my Javascript reverse-engineering blog, ReverseJS.

Top-level repository for LFI: Practical, Efficient, and Secure Software-based Sandboxing

Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion techniques against modern EDR systems. It shifts away from traditional signature-based obfuscation towards behavioral camouflage.

Powershell/Javascript deobfuscator based on tree-sitter

a webassembly wasm decompiler and Static Analysis Framework based on llvm IR. (Work In Progress)

Headless Akamai & Kasada solver that runs without a browser, and the reversing toolkit it was built with

The most powerful and lightweight API that allows you to develop your original Haxball(www.haxball.com) host, client, and standalone applications both on node.js and browser environments and also includes every possible hack and functionality that you can imagine.

Deobfuscator for javascript samples obfuscated by obfuscator.io.

Paper Mario (Nintendo 64) music editor

Clean-room reader for Autodesk Revit files (.rvt/.rfa/.rte/.rft) without Revit: metadata and schema of 2016-2026 files, typed elements with measured geometry from 2024 and 2025 projects, exported as IFC4, glTF and plan SVG. Rust, Python, WebAssembly. Apache-2.0.

A tool for deobfuscating JavaScript code protected by JSDefender to make it easier to analyse

Research on WebAssembly

AI agent browser for web reverse engineering

Zero-dependency Web Bluetooth driver + reverse-engineered protocol docs to print Niimbot label printers straight from the browser — no app. Validated on B1, B1 Pro, B2 Pro, M2-H, D11_H, D110 and N1.

Chrome extension to capture and reverse engineer API calls on any website — fetch + XHR interceptor with tab-scoped recording and JSON export

CyberSec Resources: FRAMEWORKS & STANDARDS; Pentesting Audits & Hacking; PURPLE TEAMING, AD, API, web, clouds, CTF, OSINT, Pentest tools, Network Security, Privilege escalation, Exploiting, Reversing, Secure Code, Bug Bounty, ...

Open-source AI browser agent for web reverse engineering. Turn websites into browser-free API clients and crawlers with CDP, network tracing, and JavaScript analysis.

Reverse-engineered Kasada p.js VM that generates x-kpsdk-ct outside the browser.

Automation of the javascript deobfuscation process

"Reversing WebAssembly Module 101" Workshop (NorthSec 2019, hack.lu 2019)

A universal toolkit for deobfuscating JavaScript

AI-native web scraping and JavaScript reverse-engineering platform powered by DSH, Patchright/CDP, and an independent semantic runtime, recovering parameter-generation logic from browser evidence and delivering verifiable Solvers.

Local browser viewer for .meshy files.

Chrome extension (MV3) that scans live Elementor pages and reconstructs full section/widget structure into an import-ready JSON template — no DB access needed.

Reversing Ewasm (Ethereum WebAssembly) contract 101 - Workshop

Self-host your own API to use ChatGPT for free. Lovelace also provides you with an intuitive multilanguage web application, as well as detailed documentation for using the software. Interact with Ada and implement it in your applications!

Emulator for the M-VAVE FM-1 pocket synth: runs its firmwares unchanged in the browser and natively

Enterprise Anti-Bot Analysis — Deep technical analysis of Akamai Bot Manager v2 detection mechanisms

A static deobfuscator for JavaScript Malware

DeBash is an online tool that deobfuscates Bash scripts using JavaScript.

"That" virtualization-based (VM) JavaScript (JS) Obfuscator

Selected practical web-scraping examples from various websites, with detailed blog explanations, concept summaries, difficulty comparisons, and links. Covers asynchronous scraping, automated crawling, the Scrapy framework, and other key topics.

datadome captcha dd.t = fe vm solver for authorised security testing and research

hCaptcha hsj/hsw master-key extraction — byte-accurate per build

An open-source project for opening, annotating, and saving DocuWorks (.xdw / .xbd) files anywhere, with a Rust engine, a single-file browser editor, and format specifications. Not affiliated with Fujifilm.

Complete reverse engineering of PerimeterX (HUMAN Security) anti-bot SDK · pure-algo _px3/_px2 generator (no browser, no Selenium) · iFood + Grubhub + Bundle 10/10 verified · WASM PoW solved · 68 production gotchas · AI Skill included.

Frida script to intercept with NodeJS API and Electron Application

Electron Reverse Engineering Skill — ASAR manipulation, source code deobfuscation, runtime injection, integrity bypass, and practical customization

Deobfuscator for javascript-obfuscator 5.x output (string arrays, control-flow flattening, self-defending, RC4/base64)

Analysis of Google Keep WebAssembly module -

A web application for deobfuscating and deminifying javascript source files.

General purpose JavaScript deobfuscator using deob-transformations

Web-based de-obfuscator

Linux RGB controller for the Redragon Fizz K617 — daemon + CLI + Electron GUI with 3D keyboard, 60+ presets including Minecraft day/night, interactive Pong played from the physical keyboard, animated thumbnails, and global tonality control.

In-browser JavaScript deobfuscation workbench format, deobfuscate (Webcrack / Synchrony / Wakaru), and binding-aware rename.

Web interface to libdar

jd — JavaScript deobfuscator (obfuscator.io + unminify). Go port of webcrack and synchrony.

JavaScript deobfuscator

A custom function-key and microphone bridge for the RK R87 Pro AI keyboard, built with Electron and a reverse-engineered protocol for Windows/macOS, without requiring the official software.

Static deobfuscator for LambdaTest's JavaScript obfuscator. Just for fun :3

Open-source Web Bluetooth explorer for smart tape measures: decode BLE GATT packets, capture measurements, and document device protocols.

REA Web Inspector — Reverse-engineer any website with an in-browser AI Copilot. Inspect tech stacks, audit leaked secrets, and generate 1-click rebuild prompts for Cursor, Claude, v0 & Windsurf. 100% client-side BYOK.

Drive the cloud machine behind a Grok Bot (xAI computer-use agent) from Python: there is no API, so attach over the Chrome DevTools Protocol to the Electron app's noVNC webview, screenshot the desktop, send input, run shell commands.

Open-source library and tools for controlling Lovesac StealthTech Sound + Charge systems via Bluetooth Low Energy

Reverse engineering toolkit for WebAssembly. Parser, IR, pseudo-C decompiler, call graph, struct recovery, forward/backward taint.

YARA playground to write and run rules in the browser using WebAssembly

An advanced TypeScript deobf CLI tool for https://github.com/vientorepublic/obscura-js

JavaScript deobfuscator which can revert Array Ref obfuscation format.

Python-converted reverse-engineering on the emails protection function of Metrojobb website.

Unpacked Telegram web app for research.

Claude Code skill: scope-safe AST deobfuscation of minified/obfuscated JavaScript (webpack/TS bundles) — a from-scratch take on humanify

Assemblyline v4 service: JavaScript deobfuscation, unminification, and bundle unpacking via webcrack — extracts embedded WebAssembly and tags URLs/domains/IPs.

PSYFR: Natorion Cipher, Ophis Web and Ophis v12 with a redone GUI

📧 Chrome extension for extracting business emails from live websites. Deep DOM scanning, Cloudflare deobfuscation, mailto cleanup, reversed-string detection, and background contact-page discovery. Built for lead generation and sales workflows.

Safe Rust toolkit for inspecting, unpacking, verifying, and building TI-Nspire TNS documents

Open-source software for opening, editing, and saving Ichitaro (.jtd) documents anywhere. Includes a Rust engine, a single-file browser word processor, and format specifications. Not affiliated with JustSystems.

Reverse-engineering toolkit for Tencent clients: QQ TEA crypto, WeChat .dat decryptor, Electron asar reader, and static clue scanner. Stdlib-only Python.

Hands-on playbook for REA: minimal Electron target, Evidence extractor with file:line refs, MCP probe, and a verified Decompile -> Understand -> Recreate loop. No reverse-engineering engine required.

Connect directly to the Samsung Galaxy Ring over BLE — no phone, no Samsung app. Bond, handshake, read health history, intercept the double-pinch gesture. Electron GUI + headless pinch daemon for macro apps.

Super crawler agent: a self-evolving AI crawling system. Four native engines (Go/Python/Java/Rust); JavaScript reversing (AST deobfuscation, hook injection, signature tracing, WASM parsing); a six-stage evolution loop (planning, critique, execution, self-repair, evolution, reflection); adaptive anti-detection, fingerprint rotation and behavior simulation; genetic-algorithm strategy optimization; knowledge graphs and swarm coordination; LLM selector self-repair and code synthesis; cross-domain strategy transfer; Docker/K8s deployment.

OS X 10.9 notification banners for Compose Multiplatform, reconstructed from NotificationCenter.app 222.6

Nullpoint — an unofficial desktop/web client for Sony headphones (Web Serial RFCOMM control). Not affiliated with Sony.

WebClone Studio: a workstation for high-performance web architecture extraction, lossless offline mirroring, and web reverse engineering.

Quick and dirty deobfuscator for JavaScript code processed with Javascript-obfuscator

Free Blogger XML themes with credit locks removed. Editable footer credits, no redirect scripts. Ready-to-upload responsive Blogspot templates.

Resolves watchfooty.st and sportsembed HLS from watch or embed URLs via Watch Footy match lookup, protobuf /api/get with stream-lock.wasm client factor and proof signing, and x-live encrypted M3U8 decrypt. Referer-aware HLS relay, hls.js browser player, and direct M3U8 export for VLC and MPV.

Injecting DOOM natively into the Codex IDE runtime using Chrome DevTools Protocol & WebSockets.

1-to-1 reverse-engineering and architectural case study of the iJewel3D WebGL engine by Cybersecurity Researcher DDW-X. 9 deep-dive chapters covering dispersion shaders, WASM geometry decoding, and flat-buffer BVH.

GitHub Action that statically deobfuscates JavaScript, uploads findings to code scanning as SARIF, and gates the build on obfuscation or capability risk. Never executes the analysed code.

VS Code extension for Defuscator: statically deobfuscate JavaScript in the editor. Unpacks obfuscator.io string arrays, P.A.C.K.E.R., JSFuck and source maps. Never executes the analysed code.

A reproducible benchmark for JavaScript deobfuscators, scored against output from the real obfuscators and verified by execution.

⚡ Resilient Full-Stack E-Commerce Price Monitoring Engine & Analytics Dashboard (Node.js, Wasm JIT, SHA-256 PoW Solver, Supabase Postgres RPC, React 18, Recharts) • Built for INE Assignment

Offline browser scanner that checks Minecraft mods for token-stealer malware — reads the code without running it and tells you what it does.

A local-first notebook with OneNote's features — opens your .one notebooks, built on a clean-room study of OneNote's file format and canvas. macOS · Windows · Linux · web.

Playable Dino CPS-1 C++ reverse engineering port for WebAssembly (ROM not included)

Habbo Classic (HTML5 / Electron) client internals, complete technical documentation, and unpacked .hab asset bundles.

A source-linked catalog of decompilations, recompilations, API translations, reimplementations, emulators, and community software ports.

Lumen - ambient LED lighting controller. Reverse-engineered a closed USB device protocol, built own app: Rust daemon + Electron UI, DXGI screen capture, WASAPI audio FFT, HID.

Cardiff Web UI.

Thick-client bug bounty learning resources — now maintained on GitBook. Windows, Electron and API thick-client pentesting guides.

Open-source web asset scanner and JavaScript bundle analyzer. Inspect HTML/CSS/JS, explore bundles with Webcrack, and use MCP locally.

Stealth Chrome DevTools Protocol instrumentation for reverse-engineering hostile client-side JavaScript — anti-bot, captcha, fingerprinting and payment SDKs. Invisible hooks, captured ground truth, and an oracle that verifies your reimplementation. 80 MCP tools for agents.

Run tasks on multiple Cursor Grok Bots in parallel — your laptop's RAM stays flat because the work happens in the cloud. No official API: drives the Electron UI with a 3-level fallback.

Open-source JavaScript reverse engineering toolkit for deobfuscation, AST analysis, string extraction, and web behavior discovery.

foundryvtt (https://foundryvtt) < 0.8.0 deobfuscator. other javascript-obfuscator (https://www.npmjs.com/package/javascript-obfuscator) projects prolly work as well

Offline interface recovery for Solana sBPF programs: Anchor instructions, accounts and events, each backed by byte-offset evidence. Rust, CLI and WebAssembly.

A real flight model for Google Earth. Replaces Earth toy physics by writing the camera in its WebAssembly heap: aerodynamics, stall, 5 aircraft, glass cockpit, autopilot, KML route recording.

Turn Electron / CEF / WebView2 desktop apps into CLIs by attaching over the Chrome DevTools Protocol (CDP) — playbook, verified per-app contracts, and forensic tools.

JavaScript obfuscation and deobfuscation experiment.

Web Reverse Engineering Tool — Clone · Decompile · Analyze