AwesomeREA.org

Tool

Obfuscator.io Deobfuscator

Deobfuscator dedicated to JavaScript produced by Obfuscator.io (javascript-obfuscator), which its README says also handles most forks. Working statically on a Babel AST, it reveals strings hidden in rotated, Base64- or RC4-encoded string arrays, inlines proxy functions, simplifies objects, arithmetic and string concatenation, removes dead code and the obfuscator's anti-tamper wrappers, and reverses control-flow flattening. Its configuration is detected automatically, and the author also hosts an online version.

Requirements and limitations

  • npm release at review: obfuscator-io-deobfuscator 1.0.6, published 2025-03-27. The reviewed main commit, merged 2026-08-09, adds unreleased improvements to string-array wrapper identification and README notes on running the CLI from source; package.json still reports 1.0.6. No GitHub releases are published.
  • Install the global obfuscator-io-deobfuscator CLI, which takes an input file and an optional output path, or build it from source with npm and TypeScript. It applies its Babel-based transformations repeatedly, for at most 50 passes; package.json declares no Node.js version range. An online version runs at obf-io.deobfuscate.io; only the repository was reviewed.
  • Input must be JavaScript produced by Obfuscator.io or a compatible fork; other obfuscators are out of scope, and the author's general-purpose javascript-deobfuscator covers generic patterns. The README states that it does not run untrusted code or use a sandbox; recovered strings and control flow still need checking against the original script.
  • The LICENSE file is Apache-2.0, while package.json and the npm metadata declare ISC. No scripts were deobfuscated for this entry.

About this entry

Type
Tool
Category
Website analysis tools
Relationship
Foundation tool
Targets
Website

Sources reviewed

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Primary sources

  1. README.md GitHub · ben-sb/obfuscator-io-deobfuscator · Revision 42efc01
  2. package.json GitHub · ben-sb/obfuscator-io-deobfuscator · Revision 42efc01
  3. src/deobfuscator/deobfuscator.ts GitHub · ben-sb/obfuscator-io-deobfuscator · Revision 42efc01
  4. src/deobfuscator/helpers/strings/decoders GitHub · ben-sb/obfuscator-io-deobfuscator · Revision 42efc01
  5. src/deobfuscator/transformations/antiTamper/antiTamperRemover.ts GitHub · ben-sb/obfuscator-io-deobfuscator · Revision 42efc01
  6. LICENSE GitHub · ben-sb/obfuscator-io-deobfuscator · Revision 42efc01
  7. https://github.com/ben-sb/obfuscator-io-deobfuscator/pull/52
  8. https://www.npmjs.com/package/obfuscator-io-deobfuscator/v/1.0.6