hello_js_reverse_skill  by WhiteNightShadow

AI-powered JavaScript reverse engineering for web analysis

Created 2 months ago
448 stars

Top 66.4% on SourcePulse

GitHubView on GitHub
Project Summary

This project provides an AI-powered skill for advanced JavaScript reverse engineering and anti-bot bypass, targeting web security researchers and developers. It streamlines the complex process of analyzing obfuscated code, restoring encryption algorithms, and simulating network requests, ultimately enabling automated interaction with protected web services.

How It Works

The core approach employs a unified workflow centered around the camoufox-reverse anti-detection browser. This C++ engine handles network capture, source code localization, debugging, and crucial anti-detection verification. Following initial analysis, the skill leverages Node.js (using crypto, crypto-js) or Python (using hashlib, pycryptodome) for precise algorithm restoration and automated request simulation, offering a robust solution for tackling sophisticated anti-bot mechanisms.

Quick Start & Requirements

  • Installation:
    • Recommended: Directly via AI coding tool dialog (e.g., Cursor, Claude Code) by entering: "帮我安装下这个skill:hello_js_reverse_skill".
    • Manual: Clone the repository into your AI tool's skills directory (e.g., ~/.cursor/skills/hello_js_reverse_skill).
  • Prerequisites: Node.js and Python environments are required. Specific versions are not detailed but are managed by provided scripts.
  • Links: Project repository: https://github.com/WhiteNightShadow/hello_js_reverse_skill. Detailed documentation is available within the SKILL.md and references/ directory.

Highlighted Details

  • Dual-Language Algorithm Restoration: Implements common cryptographic algorithms (MD5, SHA, AES, DES, RSA, HMAC, Base64) in both Node.js and Python.
  • Advanced Obfuscation & VM Analysis: Provides strategies for OB obfuscation, control flow flattening, eval packing, and JSVMP analysis via Hooking, instrumentation, and logging.
  • Camoufox Anti-Detection: Utilizes a C++ engine for advanced browser fingerprint spoofing to bypass protections like Cloudflare, RS, and JY.
  • Unified MCP Workflow: Integrates with the camoufox-reverse MCP server, offering 32 core tools for tasks including source-level instrumentation, network interception, and environment comparison.
  • Cookie Attribution: Differentiates between Set-Cookie and document.cookie to pinpoint cookie origins.
  • WASM & Protocol Handling: Supports reverse engineering of WebAssembly modules and countermeasures against TLS fingerprinting and HTTP/2 enforcement.

Maintenance & Community

The project shows recent activity with version updates in April 2026, indicating active maintenance. However, specific details regarding core contributors, sponsorships, or dedicated community channels (like Discord/Slack) are not provided in the README.

Licensing & Compatibility

The license type and any associated compatibility notes for commercial use or closed-source linking are not specified in the provided documentation.

Limitations & Caveats

The extensive capabilities suggest a significant learning curve for users unfamiliar with advanced JavaScript reverse engineering techniques. The project's functionality is tightly coupled with the camoufox-reverse MCP ecosystem, implying a dependency on its availability and integration. Specific unsupported platforms or known bugs are not detailed.

Health Check
Last Commit

1 month ago

Responsiveness

Inactive

Pull Requests (30d)
0
Issues (30d)
0
Star History
210 stars in the last 30 days

Explore Similar Projects

Feedback? Help us improve.