minusone
Powershell/Javascript deobfuscator based on tree-sitter
File Explorer
Download Latest Version (.zip)- cargo_test.yml
- js_build.yml
- js_publish.yml
- py_build.yml
- py_publish.yml
- rs_publish.yml
- fncall.rs
- function.rs
- mod.rs
- buffer.rs
- mod.rs
- mod.rs
- object.rs
- objectify.rs
- array_tests.rs
- b64_tests.rs
- bool_tests.rs
- buffer_tests.rs
- comparator_tests.rs
- converter_tests.rs
- encode_decode_tests.rs
- fncall_tests.rs
- forward_tests.rs
- function_tests.rs
- integer_tests.rs
- jsfuck_tests.rs
- linter_tests.rs
- loop_tests.rs
- maths_tests.rs
- mod.rs
- object_tests.rs
- objectify_tests.rs
- post_process_tests.rs
- printer_tests.rs
- regex_tests.rs
- specials_tests.rs
- string_tests.rs
- var_tests.rs
- array.rs
- b64.rs
- backend.rs
- bool.rs
- comparator.rs
- converter.rs
- encode_decode.rs
- forward.rs
- globals.rs
- integer.rs
- iterator.rs
- jsfuck.rs
- linter.rs
- loop.rs
- math.rs
- mod.rs
- post_process.rs
- printer.rs
- regex.rs
- specials.rs
- step.rs
- strategy.rs
- string.rs
- subprogram.rs
- switch.rs
- ternary.rs
- trace.rs
- typeof.rs
- utils.rs
- var.rs
- unix.txt
- win.txt
- access_tests.rs
- array_tests.rs
- bool_tests.rs
- cast_tests.rs
- cmdlets_tests.rs
- comparison_tests.rs
- compression_tests.rs
- crypto_tests.rs
- encoding_tests.rs
- foreach_tests.rs
- integer_tests.rs
- join_tests.rs
- linter_tests.rs
- loops_tests.rs
- method_tests.rs
- mod.rs
- printer_tests.rs
- string_tests.rs
- switch_tests.rs
- var_tests.rs
- bytes.rs
- conversion.rs
- mod.rs
- string.rs
- access.rs
- array.rs
- backend.rs
- bool.rs
- cast.rs
- cmdlets.rs
- comparison.rs
- compression.rs
- crypto.rs
- encoding.rs
- foreach.rs
- forward.rs
- hash.rs
- integer.rs
- join.rs
- linter.rs
- loops.rs
- method.rs
- mod.rs
- static.rs
- step.rs
- strategy.rs
- string.rs
- switch.rs
- tool.rs
- trace.rs
- typing.rs
- var.rs
- debug.rs
- engine.rs
- error.rs
- init.rs
- lib.rs
- printer.rs
- rule.rs
- scope.rs
- step.rs
- trace.rs
- tree.rs
- Cargo.toml
- steps_template.html
- cli.rs
- main.rs
- trace_view.rs
- utils.rs
- Cargo.toml
- README.md
- lib.rs
- .gitignore
- index.html
- justfile
- ditto.wit
- .gitignore
- Cargo.toml
- justfile
- package-lock.json
- package.json
- README.md
- CI.yml
- lib.rs
- .gitignore
- Cargo.toml
- justfile
- pyproject.toml
- README.md
- test.py
- uv.lock
- README.md
- jsfuck_easy.obf.js
- jsfuck_easy.src.js
- jsfuck_level9.obf.js
- jsfuck_level9.src.js
- jsfuck_octal.obf.js
- jsfuck_octal.src.js
- jsfuck_payload.obf.js
- jsfuck_payload.src.js
- .envrc
- .gitignore
- Cargo.toml
- devenv.lock
- devenv.nix
- devenv.yaml
- javascript.yara
- justfile
- LICENSE
- README.md
# Installation Guide
git clone https://github.com/airbus-cert/minusone
Downloads the entire project code from GitHub to your computer.
cd minusone
Moves into the project folder you just downloaded.
2. Node.js
Easy Recommendedcd crates/minusonejs
This project's files live in a subfolder, so move into it first.
npm install
Downloads and installs the libraries listed in package.json.
npm start
Starts the development/run server.
3. Python
Easypip install .
Installs the package published on PyPI directly โ no need to clone the source.
python <์คํํ ํ์ผ๋ช
>.py # README์์ ์ ํํ ์คํ ํ์ผ๋ช
์ ํ์ธํ์ธ์
Runs the Python script (or module).
4. Rust
Medium- Git Needed to download the project code from GitHub.
- Rust (rustup) Installing via rustup also installs cargo.
cargo run -- --path test.ps1 # Run default ruleset
Builds and then immediately runs the program.
cargo run -- --path test.ps1 --debug # Run debug mode to print the inferred tree
Builds and then immediately runs the program.
cargo run -- --list # List available rule
Builds and then immediately runs the program.
cargo run -- --path test.ps1 -r forward,addint # Only use Forward and AddInt
Builds and then immediately runs the program.
cargo run -- --path test.ps1 -R foreach # Do not use foreach rule
Builds and then immediately runs the program.
Pulled directly from this repo's README.
