Tool
slicer
Browser-based Java reverse-engineering tool that loads class files and JAR/ZIP archives and disassembles or decompiles them with Vineflower (the default), CFR, Procyon or JASM, compiled to run in the browser, next to its own bytecode disassembler. It draws inheritance and interface graphs and per-method control-flow graphs, searches constant-pool entries, instructions and member declarations or usages, applies Tiny, SRG/TSRG/CSRG or ProGuard mappings, and offers generic transformers that strip or normalize bytecode attributes so decompilers cope better with obfuscation. A JavaScript scripting API can add disassemblers and manipulate the workspace; the README itself recommends Recaf for serious reverse engineering.
Requirements & limits
- Runs as the hosted web app at slicer.run and can be installed as a PWA. The repository has no releases or tags, so this entry pins the reviewed main commit (2026-09-19); local builds are a Vite and Svelte app built with pnpm, and the repository has no CI workflow. The documentation says slicer is in active development and that features may be missing.
- The documentation states that no data is sent to any server and that decompilers run locally in the browser; JDK library classes are fetched on demand from data.slicer.run, and URL parameters can load a JAR, mapping file or script from another site. Input is class files or JAR/ZIP archives from software the user may analyze; HPROF heap dumps and Android binary XML can also be viewed.
- The documentation warns that decompiled output is a best-effort approximation that may not be valid Java, especially for code from non-javac compilers or obfuscators. slicer has no obfuscator-specific deobfuscation, and its remapper does not propagate names through inheritance.
- MIT license for slicer; bundled components such as the Vineflower and Procyon decompilers are Apache-2.0. No classes were decompiled.
About this entry
- Type
- Tool
- Category
- JVM bytecode tools
- Relationship
- Foundation tool
- Targets
- App
Sources reviewed
The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.
Primary sources
- README.md GitHub · katana-project/slicer · Revision 1881aae
- package.json GitHub · katana-project/slicer · Revision 1881aae
- src/lib/disasm/worker GitHub · katana-project/slicer · Revision 1881aae
- src/lib/workspace/jdk.ts GitHub · katana-project/slicer · Revision 1881aae
- LICENSE GitHub · katana-project/slicer · Revision 1881aae
- https://docs.katana-project.org/slicer/
- https://docs.katana-project.org/slicer/reference/disasm/
- https://docs.katana-project.org/slicer/reference/deobf/
- https://docs.katana-project.org/slicer/reference/analysis/mapping/
- https://docs.katana-project.org/slicer/reference/analysis/transformers/
- https://docs.katana-project.org/slicer/reference/share/
- https://slicer.run/
More in Apps
- APK Studio · Tool
- APKiD · Tool
- dex2jar · Tool
- Aegis: trace a login-code calculation · Case study
- Notion: trace the clipboard bridge · Case study
- PicoPrint: LX-D02 printer investigation · Case study