How do you unpack javascript using jsbeautifier in python?

Question

I have this javascript code which I want to unpack and beautify, it looks similar to this:

eval(function(p,a,c,k,e,r){e=String;if('0'.replace(0,e)==0){while(c--)r[e(c)]=k[c];k=[function(e){return r[e]||e}];e=function(){return'^$'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('document.body.innerHTML="<iframe width=\'100%\' scrolling=\'no\' height=\'2500\' frameborder=\'0\' src=\'http://www.exmaple.com\'>";',[],1,''.split('|'),0,{}))

When I put this into jsbeautifier.org I get:

document.body.innerHTML = "<iframe width='100%' scrolling='no' height='2500' frameborder='0' src='http://www.example.com'>";

But when I try and use the python library (using jsbeautifier.beautify) it doesn't seem to unpack properly:

print al(function (p, a, c, k, e, r) {
    e = String;
    if ('0'.replace(0, e) == 0) {
        while (c--) r[e(c)] = k[c];
        k = [
            function (e) {
                return r[e] || e
            }
        ];
        e = function () {
            return '^$'
        };
        c = 1
    };
    while (c--) if (k[c]) p = p.replace(new RegExp('\\b' + e(c) + '\\b', 'g'), k[c]);
    return p
}('document.body.innerHTML="<iframe width=\'100%\' scrolling=\'no\' height=\'2500\' frameborder=\'0\' src=\'http://www.example.com\'>";', [], 1, ''.split('|'), 0, {}));

What am I doing wrong?

EDIT: Python code is:

import jsbeautifier
#script needs to have '\n' at the beginning otherwise jsbeautifier throws an error
script = """\neval(function(p,a,c,k,e,r){e=String;if('0'.replace(0,e)==0){while(c--)r[e(c)]=k[c];k=[function(e){return r[e]||e}];e=function(){return'^$'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('document.body.innerHTML="<iframe width=\'100%\' scrolling=\'no\' height=\'2500\' frameborder=\'0\' src=\'http://www.example.com\'>";',[],1,''.split('|'),0,{}))"""
jsbeautifier.beautify(script)

Ah ok, that's annoying. I'll have to file my issues with them. — ChrisD
– ChrisD, Commented May 17, 2013 at 19:03
To unpack it in javascript is: eval("String" + packed_string.substr(4)) — w35l3y
– w35l3y, Commented Sep 16, 2013 at 2:29

Michael Dorner · Accepted Answer · 2015-01-16 20:26:33Z

3

You should import this module:

import jsbeautifier.unpackers.packer as packer
unpack = packer.unpack(some_packed_code)

I have tested this in Windows 32bit, jsbeautifier 1.54.

edited Jan 16, 2015 at 20:26

Michael Dorner

20.7k16 gold badges96 silver badges132 bronze badges

answered Jan 16, 2015 at 20:08

woodword

414 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

cpb2 · Accepted Answer · 2014-01-16 16:42:41Z

0

jsbeautifier is broken. Use node-js (or phantomJS) instead. Working example code below:

import subprocess
import StringIO

data = r"""eval(function(p,a,c,k,e,r){e=String;if('0'.replace(0,e)==0){while(c--)r[e(c)]=k[c];k=[function(e){return r[e]||e}];e=function(){return'^$'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('document.body.innerHTML="<iframe width=\'100%\' scrolling=\'no\' height=\'2500\' frameborder=\'0\' src=\'http://www.exmaple.com\'>";',[],1,''.split('|'),0,{}))"""

data = 'console.log' + data[4:]
p = subprocess.Popen(['node'], stdin=subprocess.PIPE, stdout=subprocess.PIPE)
stdout, stderr = p.communicate(data)
print stdout

answered Jan 16, 2014 at 16:42

cpb2

8261 gold badge12 silver badges17 bronze badges

Comments

Gal · Accepted Answer · 2015-06-04 08:51:48Z

0

I think that the /n in the beginning of the string avoid the unpacker to detect the Js as packed. try to do jsbeautifier.beautify(script.strip())

answered Jun 4, 2015 at 8:51

Gal

7293 gold badges8 silver badges9 bronze badges

1 Comment

SuperBiasedMan Over a year ago

Your answer is unclear, could you elaborate on your suggestion and how it solves the problem?

Collectives™ on Stack Overflow

How do you unpack javascript using jsbeautifier in python?

3 Answers 3

Comments

Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related