0xdevalias/webcrack — explained in plain English
Analysis updated 2026-07-30 · repo last pushed 2026-06-03
Reverse engineer a suspicious script found embedded in a webpage to understand what it does.
Clean up minified third-party JavaScript code so you can debug or understand its logic.
Unpack a webpack bundle back into individual source files for easier study.
Reverse obfuscator.io scrambling on a protected script to reveal the original logic.
| 0xdevalias/webcrack | 0xdevalias/sparkle | 0xkinno/astraea | |
|---|---|---|---|
| Stars | — | — | 0 |
| Language | TypeScript | TypeScript | TypeScript |
| Last pushed | 2026-06-03 | 2022-06-29 | — |
| Maintenance | Maintained | Dormant | — |
| Setup difficulty | moderate | moderate | hard |
| Complexity | 2/5 | 4/5 | 4/5 |
| Audience | developer | developer | developer |
Figures from each repo's GitHub metadata at analysis time.
Requires Node.js version 22 or 24 specifically, which may need updating your environment.
Webcrack is a tool for reverse engineering JavaScript. When developers publish websites or web apps, they often shrink and scramble their code to make it load faster and harder for others to copy. Webcrack takes that mangled, hard-to-read code and attempts to reconstruct it into something that looks like the original source code, making it readable again. The tool handles several types of code transformation. It can reverse obfuscation from a popular service called obfuscator.io, which intentionally scrambles code to protect it. It can also "unminify" code, expanding condensed formatting back into something readable. Additionally, it can unpack bundled files from tools like webpack and browserify, which combine many separate source files into one large file for deployment. The tool automatically detects what was done to the code without requiring manual configuration. Security researchers, developers debugging third-party code, and anyone trying to understand how a website or web app works under the hood would find this useful. For example, if you're investigating a suspicious script embedded in a webpage, or trying to understand how a competitor's widget functions, you'd run the code through webcrack to get a cleaner, more understandable version to study. You can use it through a command line interface, as a library in your own JavaScript projects, or try it online through a web-based playground. The project is built in TypeScript and emphasizes performance and safety, it considers variable references and scope to avoid breaking the code during transformation. It requires Node.js version 22 or 24 to run.
Webcrack reverse-engineers scrambled and minified JavaScript back into readable source code. It automatically detects and reverses obfuscation, unminifies condensed code, and unpacks bundled files from tools like webpack.
Mainly TypeScript. The stack also includes TypeScript, Node.js.
Maintained — commit in last 6 months (last push 2026-06-03).
Setup difficulty is rated moderate, with roughly 5min to a first successful run.
Mainly developer.
This repo across BitVibe Labs
double-check against the repo, no cap.