Reverse Engineering Obfuscated JavaScript

A workflow for profiling obfuscated JavaScript, simplifying AST structure, recovering behavior, and converting findings into useful defensive output.

8 min read Mar 12, 2026

Editorial Notes

Signal

What the sample or topic actually changes for a defender.

Method

How the analysis is structured so another analyst can reuse it.

Output

Detections, pivots, and conclusions that move into operations.

Featured Notes

Selected research pieces.

The strongest notes rise first so the page feels curated.

Filter

A workflow for profiling obfuscated JavaScript, simplifying AST structure, recovering behavior, and converting findings into useful defensive output.

Read note

A structured workflow for moving from suspicious sample intake to evidence, behavioral conclusions, and defensive output.

Read note

These are lighter notes and planned research threads that still document the direction of the work.

Planned research stream covering IoT lab design, protocol analysis, and realistic adversary simulation.

Read note

Planned write-up on shaping Python utilities into reliable triage, enrichment, and analyst-support workflows.

Read note