Defuscator.Cli
1.0.1
dotnet tool install --global Defuscator.Cli --version 1.0.1
dotnet new tool-manifest
dotnet tool install --local Defuscator.Cli --version 1.0.1
#tool dotnet:?package=Defuscator.Cli&version=1.0.1
nuke :add-package Defuscator.Cli --version 1.0.1
defuscator
Static JavaScript deobfuscation and risk triage from the command line.
The analyzed code is never executed — no eval, no sandbox, no VM. Everything is
recovered by parsing and rewriting source, which is what makes it safe to point at hostile
samples.
Install
dotnet tool install -g Defuscator.Cli
Use
defuscator suspicious.js
cat suspicious.js | defuscator --json
| Option | What it does |
|---|---|
--json |
Full analysis as JSON, for pipelines |
--sarif |
SARIF 2.1.0, for GitHub code scanning and SOC pipelines |
--sourcemap |
Recover original sources from an inline source map |
--decode-only |
Print only the decoded/beautified output |
--obfuscate |
Obfuscate the input instead (static rewrites, no eval) |
What it unpacks
Dean Edwards P.A.C.K.E.R., obfuscator.io string arrays with rotation and offset decoders,
hex/unicode/fromCharCode/atob escapes, split-string concatenation, bracket-notation member
access, proxy/wrapper functions, constant folding and dead-code removal.
Exit codes
0 low or no risk · 1 medium risk · 2 high risk (score ≥ 68) · 64 usage error.
Because the exit code tracks risk, it can gate CI directly.
More
Web app, REST API, ZIP batch and the Windows desktop build: https://defuscator.com/
| Product | Versions Compatible and additional computed target framework versions. |
|---|---|
| .NET | net8.0 is compatible. net8.0-android was computed. net8.0-browser was computed. net8.0-ios was computed. net8.0-maccatalyst was computed. net8.0-macos was computed. net8.0-tvos was computed. net8.0-windows was computed. net9.0 was computed. net9.0-android was computed. net9.0-browser was computed. net9.0-ios was computed. net9.0-maccatalyst was computed. net9.0-macos was computed. net9.0-tvos was computed. net9.0-windows was computed. net10.0 was computed. net10.0-android was computed. net10.0-browser was computed. net10.0-ios was computed. net10.0-maccatalyst was computed. net10.0-macos was computed. net10.0-tvos was computed. net10.0-windows was computed. |
This package has no dependencies.