Last active
July 12, 2024 17:21
-
-
Save drole/8f695bd1616ee492f7aa06be9a35c82c to your computer and use it in GitHub Desktop.
Gootloader Decode Recipe
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // CyberChef Recipe to deobfuscate Gootloader encoded string | |
| // Use: https://github.com/drole/CyberChef | |
| Unescape_string() | |
| Gootloader_Decode() | |
| JavaScript_Beautify('\\t','Auto',true,true) | |
| Regular_expression('User defined','\\(\'(.*?)\'\\)',true,true,false,false,false,false,'List capture groups') | |
| Unescape_string() | |
| Gootloader_Decode() | |
| JavaScript_Beautify('\\t','Auto',true,true) |
Author
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
You may also want to parse the actual Gootloader code from JS