===============================================================================================
2025-03-19:
https://blog.deobfuscate.io/
Investigating a HTML Obfuscator
20 Feb 2025
I received an email recently suggesting I take a look at a HTML obfuscator. The tool is called Online HTML Obfuscator by PhpKobo, and claims to gheavily obfuscate HTML codeh. I was a little skeptical of this claim, and decided to investigate to see how it was protecting the HTML....

===============================================================================================
https://blog.deobfuscate.io/investigating-html-obfuscator

===============================================================================================
https://blog.deobfuscate.io/about
Software engineer with 6+ years of experience in fast-paced environments, specializing in building scalable and performant systems. Proven track record of delivering customer-focused solutions, such as founding and leading two successful startups, including Ocule which was acquired in December 2023. Designed and implemented novel security solutions actively deployed on web platforms serving billions of users.

I currently work on client-side security, focusing on areas such as obfuscation, deobfuscation and bot mitigation. Previously I both developed and reversed engineered a variety of JavaScript obfuscators, including both traditional and virtualisation based obfuscation techniques. At Ocule, I designed and implemented the polymorphic client-side security defenses aimed at defending against automated fraud and abuse.

I have experience in binary reverse engineering and have written popular articles such as Using Symbolic Execution to Devirtualise a Virtualised Binary and Reversing VMCrack. Additionally I created vvm, a reversing challenge featuring VM obfuscation, which is currently live on HackTheBox.

My open source tools, including popular online deobfuscators such as deobfuscate.io and obfuscator.io deobfuscator can be found on my GitHub.

Get in touch via email: bensb1@protonmail.com

===============================================================================================
// Example obfuscated code
const _0x38a2db = ['\x54\x6f\x74a\x6c', '\x6c\x6f\x67', '\x3a\x20'];
const _0x9b58d9 = function(_0x39ddb7) {
	return _0x38a2db[_0x39ddb7 + (-0x6d5 + 0x58 + 0x11 * 0x62)];
}, _0x498b9b = function(_0x48d808, _0x14da1e) {
    return _0x9b58d9(_0x48d808);
}, _0x34c7bc = function(_0x16af1d, _0x27a29e) {
    return _0x498b9b(_0x16af1d);
}, _0x23a1 = _0x34c7bc;
let total = 0x2 * 0x109e + -0xc * -0x16a + -0x3234;
for (let i = 0x1196 + 0x97b * 0x3 + -0x2e07; i < -0x95 * -0x38 + -0x1a75 + -0x619; i++) {
	total += i;
}
console[_0x34c7bc(-(0x1e7c + -0x1 * -0x1367 + 0x2ef * -0x11))](_0x498b9b(-(0x1020 + 0x253 + 0x7 * -0x2a2)) + _0x23a1(-(0x12c5 + -0x1887 + -0x1 * -0x5c5)) + total);
-----------------------------------------------------------------------------------------------
let total = 0;
for (let i = 0; i < 10; i++) {
  total += i;
}
console.log("Total: " + total);
===============================================================================================