js-reverse-automation

Automate browser-based reverse engineering to discover entrypoints and generate integration artifacts.

335|85|Updated Mar 5, 2026
One-click install
npx skills add https://github.com/715494637/reverse-skill --skill js-reverse-automation-715494637
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: js-reverse-automation
Source: https://github.com/715494637/reverse-skill/tree/main/%E9%A1%B9%E7%9B%AE%E8%B5%84%E6%96%99/js-reverse-automation--skill-main/js-reverse-automation
Command: npx skills add https://github.com/715494637/reverse-skill --skill js-reverse-automation-715494637

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, and includes scripts (resource) and references (resource) components.

What problem does it solve?

通过 Chrome DevTools MCP 连接真实浏览器,跟踪 sign/enc/token 的生成链路,识别运行时入口函数与依赖,然后生成 JSRPC 注入代码、Flask 代理代码以及带校验输出的 Burp autoDecoder 文档。本技能仅用于授权场景的测试,不对未授权目标进行测试。

Core Features & Use Cases

  • JSRPC 注入代码自动生成:基于分析结果注册入口,支持同步与异步调用,并提供清晰的返回与错误处理。
  • Flask 代理与 Burp 文档对接:自动生成本地代理、对接 Burp autoDecoder 的文档与验证流程。
  • 阶段化工作流与合规性:覆盖 Phase 0-8,强调授权与合规使用。

Quick Start

请提供经过授权的目标 URL 与分析参数,按照输入契约进行提交,然后运行工具链以生成 analysis_result.json 及相关产出。

Frequently Asked Questions about js-reverse-automation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate browser tracing for token generation in JavaScript?

Automating browser tracing for token generation involves connecting to a real browser via Chrome DevTools to trace sign, enc, and token creation, identifying runtime entrypoints, and outputting a complete analysis_result.json with integration artifacts.

How to generate JSRPC injection code from reverse engineering results?

Generating JSRPC injection code requires phased analysis of traced entrypoints to produce scripts supporting synchronous and asynchronous calls, complete with clear return handling and error management for authorized security tests.

Can I use this to create a Flask proxy for Burp Suite autoDecoder?

Yes, you can create a Flask proxy for Burp Suite autoDecoder by running the phased analysis workflow, which automatically generates local proxy code and matching Burp documentation with verification outputs.

What is phased analysis in browser-based reverse engineering?

Phased analysis in browser-based reverse engineering is a structured workflow covering Phase 0 through 8, emphasizing authorized compliance while tracing JavaScript execution chains to discover runtime dependencies and integration entrypoints.

Does this browser automation tool work on unauthorized targets?

No, this browser automation tool strictly enforces authorized usage and does not conduct tests on unauthorized targets, ensuring all reverse engineering and JSRPC injection generation remains within compliance boundaries.

Do I need the requests library to run JS reverse automation?

Yes, you need the requests library as a dependency to run JS reverse automation, which connects to real browsers to trace JavaScript token generation and produce Flask proxies and analysis artifacts.