某v5加密混淆AST字符串解密

仅支持加密字符串解密,环境问题请自行百度解决~

视频教程

https://www.bilibili.com/video/BV1nS4y1t7HW/
https://www.bilibili.com/video/BV1E64y147Q6

AST字符串解密代码

const fs=require('fs')
const esprima=require('esprima')
const estraverse=require('estraverse')
const escodegen=require('escodegen')
const iconv=require('iconv-lite')

var content=fs.readFileSync('./en.js',{encoding:'binary'});
var buf=new Buffer.from(content,'binary')
var code=iconv.decode(buf,'utf-8')

var ast=esprima.parse(code)

//大数组+解密function(直接从混淆JS里复制就行了)
//var _0x5c85=function(...){...} //解密函数
//大数组+解密function结束

ast=estraverse.replace(ast,{
    enter:function(node,parent){
        if(node.type=='CallExpression' &&
            node.callee.name=='_0x5c85' && //解密function name= _0x5c85
            node.arguments.length==2){
            var val=_0x5c85(node.arguments[0].value,node.arguments[1].value); //执行解密函数_0x5c85
            return{
                type:esprima.Syntax.Literal,
                value:val,
                raw:val
            }
        }
    }
})
code=escodegen.generate(ast)
console.log('完成.')
fs.writeFile("./de.js",code,(err)=>{})