> For the complete documentation index, see [llms.txt](https://notes.programmersecurity.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.programmersecurity.com/web-pentesting-stuff/pentesting-port-80-443/javascript-deobfuscation.md).

# Javascript DeObfuscation

## DeObfuscate and UnPack to Read the Full Source Code

We can use the following link to deobfuscate the javascript code

{% embed url="<https://deobfuscate.io/>" %}

<figure><img src="/files/cU0vEDKYhmYembuSSTT0" alt=""><figcaption></figcaption></figure>

But Still I am unable to Understand the Code, because this javascript code is **Packed,** so we need to unpack the code using the following link

{% embed url="<https://matthewfl.com/unPacker.html>" %}

now i can read the code easily and find the enpoints and see how the request is being made

<figure><img src="/files/sUDdgPGW0d4Iv4OwaVx5" alt=""><figcaption></figcaption></figure>

## Javascript Code DeObfuscate by Running it

We can use **developer Console** to actually run the javascript code and we can see what it is doing, we just need to copy the code and then run it in the developer console

&#x20; Below i can see the output of the javascript code in developer console

<figure><img src="/files/v6ch3liP8wRBlpWTDG8Z" alt=""><figcaption></figcaption></figure>