Summary

Firefox-Reverse addresses the challenge of reverse-engineering complex web obfuscation (JSVMP, WASM, signatures) for independent algorithm reproduction. It targets engineers and researchers, offering an AI-powered Firefox extension that automates analysis and provides non-browser-dependent code, significantly boosting efficiency.

How It Works

This project modifies Firefox, embedding an AI agent within a sidebar. Its core innovation lies in leveraging SpiderMonkey C++ engine hooks for "god's eye view" tracing of JSVMP instructions, WASM imports, and cryptographic parameters. This engine-level instrumentation is undetectable by web pages, providing a robust method to bypass anti-analysis techniques and extract algorithms for standalone Node.js/Python execution.

Quick Start & Requirements

Download pre-compiled releases for Windows, macOS (Apple Silicon), or Linux (x86_64). Setup involves unzipping/installing the application and configuring a local API key for a supported Large Language Model (LLM) provider (e.g., OpenAI, DeepSeek, Qwen). No compilation is required for standard use. macOS users may need to bypass quarantine attributes.

Highlighted Details

• Autonomous AI Agent: Orchestrates over 45 specialized tools for end-to-end reverse-engineering workflows, from network capture to algorithm implementation.
• Undetectable Engine-Level Tracing: Utilizes C++ hooks in SpiderMonkey/Gecko for non-intrusive observation of JSVMP, WASM, WebAPI usage, and code execution paths, bypassing page-level detection.
• Flexible LLM Integration: Supports numerous LLMs (DeepSeek, GLM, Kimi, MiniMax, Qwen, Claude, OpenAI) and compatible custom endpoints; API keys are stored locally.
• Dual Operational Modes: Offers fully automated execution or an AI-assisted mode for step-by-step guidance and user control.
• Persistent Knowledge: Employs SQLite for cross-session memory, storing learned facts and preventing redundant analysis.

Maintenance & Community

Active development is indicated by frequent version updates (e.g., v0.19). Community interaction primarily occurs via WeChat/QQ groups for feedback and bug reporting.

Licensing & Compatibility

Licensed under the Mozilla Public License 2.0 (MPL-2.0), consistent with upstream Firefox. This license permits commercial use but requires derivative works to be shared under MPL-2.0.

Limitations & Caveats

The tool is not a universal solution for all obfuscation techniques, particularly highly sophisticated JSVMP or WASM implementations. Usage is strictly limited to authorized targets and legal contexts; users are responsible for compliance. Initial macOS launch may require manual attribute removal. Operation relies on external LLM services, incurring API costs.