gitwtfhub

wtf is webcrack?

0xdevalias/webcrack — explained in plain English

Analysis updated 2026-07-30 · repo last pushed 2026-06-03

TypeScriptAudience · developerComplexity · 2/5MaintainedSetup · moderate

TL;DR

Webcrack reverse-engineers scrambled and minified JavaScript back into readable source code. It automatically detects and reverses obfuscation, unminifies condensed code, and unpacks bundled files from tools like webpack.

Mindmap

mindmap
  root((repo))
    What it does
      Reverses obfuscation
      Unminifies code
      Unpacks bundled files
    How to use it
      Command line tool
      Library in JS projects
      Online web playground
    Use cases
      Study suspicious scripts
      Debug third-party code
      Understand website internals
    Tech stack
      TypeScript
      Node.js 22 or 24
    Audience
      Security researchers
      Developers

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

Why would anyone build with this?

REASON 1

Reverse engineer a suspicious script found embedded in a webpage to understand what it does.

REASON 2

Clean up minified third-party JavaScript code so you can debug or understand its logic.

REASON 3

Unpack a webpack bundle back into individual source files for easier study.

REASON 4

Reverse obfuscator.io scrambling on a protected script to reveal the original logic.

What's in the stack?

TypeScriptNode.js

How it stacks up

0xdevalias/webcrack0xdevalias/sparkle0xkinno/astraea
Stars0
LanguageTypeScriptTypeScriptTypeScript
Last pushed2026-06-032022-06-29
MaintenanceMaintainedDormant
Setup difficultymoderatemoderatehard
Complexity2/54/54/5
Audiencedeveloperdeveloperdeveloper

Figures from each repo's GitHub metadata at analysis time.

How do you spin it up?

Difficulty · moderate Time to first run · 5min

Requires Node.js version 22 or 24 specifically, which may need updating your environment.

Wtf does this do

Webcrack is a tool for reverse engineering JavaScript. When developers publish websites or web apps, they often shrink and scramble their code to make it load faster and harder for others to copy. Webcrack takes that mangled, hard-to-read code and attempts to reconstruct it into something that looks like the original source code, making it readable again. The tool handles several types of code transformation. It can reverse obfuscation from a popular service called obfuscator.io, which intentionally scrambles code to protect it. It can also "unminify" code, expanding condensed formatting back into something readable. Additionally, it can unpack bundled files from tools like webpack and browserify, which combine many separate source files into one large file for deployment. The tool automatically detects what was done to the code without requiring manual configuration. Security researchers, developers debugging third-party code, and anyone trying to understand how a website or web app works under the hood would find this useful. For example, if you're investigating a suspicious script embedded in a webpage, or trying to understand how a competitor's widget functions, you'd run the code through webcrack to get a cleaner, more understandable version to study. You can use it through a command line interface, as a library in your own JavaScript projects, or try it online through a web-based playground. The project is built in TypeScript and emphasizes performance and safety, it considers variable references and scope to avoid breaking the code during transformation. It requires Node.js version 22 or 24 to run.

Yoink these prompts

Prompt 1
I have a minified and obfuscated JavaScript file from a website. How do I use webcrack to reverse the obfuscation and unminify it so I can read the original source code?
Prompt 2
How can I integrate webcrack as a library in my Node.js project to automatically detect and reverse webpack bundling on a JavaScript file?
Prompt 3
I found a suspicious script on a webpage that appears to be scrambled with obfuscator.io. How do I run it through webcrack's CLI to get a readable version to analyze?
Prompt 4
How do I use the webcrack online playground to quickly deobfuscate and unminify a snippet of JavaScript code without installing anything locally?

Frequently asked questions

wtf is webcrack?

Webcrack reverse-engineers scrambled and minified JavaScript back into readable source code. It automatically detects and reverses obfuscation, unminifies condensed code, and unpacks bundled files from tools like webpack.

What language is webcrack written in?

Mainly TypeScript. The stack also includes TypeScript, Node.js.

Is webcrack actively maintained?

Maintained — commit in last 6 months (last push 2026-06-03).

How hard is webcrack to set up?

Setup difficulty is rated moderate, with roughly 5min to a first successful run.

Who is webcrack for?

Mainly developer.

View the repo → Decode another repo

This repo across BitVibe Labs

Don't trust strangers blindly. Verify against the repo.