Discover and explore top open-source AI tools and projects—updated daily.
Fausto-404Automating frontend JavaScript reverse engineering
Top 88.7% on SourcePulse
Summary
This project automates JavaScript reverse engineering for signature and encryption parameters by integrating chrome-devtools-mcp, JSRPC, Flask, and autoDecoder with AI capabilities. It targets engineers needing rapid JS reverse engineering implementation or reusable code, significantly boosting efficiency by automating function discovery and code generation for tools like Burp Suite.
How It Works
It leverages chrome-devtools-mcp to trace JS encryption/signature calls in a real browser and automatically identifies key parameter generation entry points. An AI agent generates JSRPC injection/registration code and Python Flask proxy code. The system outputs Burp autoDecoder integration instructions and includes 11 anti-debugging capabilities from AntiDebug_Breaker.
Quick Start & Requirements
Installation involves placing skills into a compatible platform (e.g., Codex) and configuring chrome-devtools-mcp via npx. Prerequisites include chrome-devtools-mcp, JSRPC, Flask, Burp autoDecoder, AntiDebug_Breaker, and an AI platform with an OpenAI agent. A browser with remote debugging and Burp Suite are necessary. Links: JSRPC (https://github.com/jxhczhl/JsRpc), autoDecoder (https://github.com/f0ng/autoDecoder), chrome-devtools-mcp (https://github.com/ChromeDevTools/chrome-devtools-mcp/), AntiDebug (https://github.com/0xsdeo/AntiDebug_Breaker).
Highlighted Details
JSRPC, Python Flask proxy, and Burp autoDecoder configuration scripts.Maintenance & Community
Recent updates in February-March 2026 indicate active development, including a refactoring into a modular architecture for improved stability. The project structure is well-defined with dedicated directories for artifacts and rules. No specific community channels or contributor details are provided in the README.
Licensing & Compatibility
The provided README does not specify a software license, requiring further investigation for terms of use, distribution, and commercial compatibility.
Limitations & Caveats
A workaround exists for AI agent URL access issues: set Target URL to 127.0.0.1 in agent configuration. Effectiveness depends on AI interpretation accuracy and requires integration with specific external tools/platforms. No explicit OS or hardware requirements beyond a functional browser are detailed.
1 day ago
Inactive