Cybersecurity Reconnaissance Utility

JavaScript to JSON Decompiler & Search

Quickly reverse engineer minified bundles, Turbopack chunks, and client scripts into structured, searchable JSON. Inspect API endpoints, string literals, exported components, and potential secrets with zero data leaving your browser.

JS → JSON Security Decompiler & Search

AST v2.4

Format minified JS/Turbopack bundles into structured, searchable JSON with security string & endpoint discovery.

Upload .js

Input JavaScript / Minified Bundle:1,560 chars

(globalThis.TURBOPACK||(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,52683,e=>{"use strict";var t,s,r,a,n,i,l,o,d=e.i(43476),c=e.i(71645),x=e.i(22016);function m({className:e="w-5 h-5"}){return(0,d.jsxs)("svg",{className:e,viewBox:"0 0 24 24",xmlns:"http://www.w3.org/2000/svg",children:[(0,d.jsx)("path",{d:"M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z",fill:"#4285F4"}),(0,d.jsx)("path",{d:"M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z",fill:"#34A853"}),(0,d.jsx)("path",{d:"M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.06H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.94l2.85-2.22.81-.63z",fill:"#FBBC05"}),(0,d.jsx)("path",{d:"M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.06l3.66 2.84c.87-2.6 3.3-4.52 6.16-4.52z",fill:"#EA4335"})]})}var u=e.i(51757),h=e.i(56420);async function w(){let e=(0,g.createClient)(),t=window.location.origin.replace("0.0.0.0","localhost"),{data:s,error:r}=await e.auth.signInWithOAuth({provider:"google",options:{redirectTo:`${t}/auth/callback`}});if(r)throw console.error("Google sign in error:",r.message),r;return s}async function j(){let e=(0,g.createClient)(),{data:t,error:s}=await e.auth.getUser();return s||!t?.user?null:t.user}async function v(){let e=(0,g.createClient)(),{error:t}=await e.auth.signOut();t&&console.error("Sign out error:",t.message)}}]);

Bundle Architecture:Next.js Turbopack Bundle Chunk

Strings15

Endpoints1

Functions4

{
  "meta": {
    "analyzer": "SecureStack JS Reverse Engineering & AST Inspector v2.4",
    "bundleType": "Next.js Turbopack Bundle Chunk",
    "chunkId": "Anonymous / Inline Chunk",
    "originalSizeBytes": 1560,
    "linesCount": 1,
    "analyzedAt": "2026-08-18T00:00:00.000Z",
    "detectionSummary": {
      "totalFunctions": 4,
      "totalUrlsFound": 1,
      "totalEndpoints": 0,
      "totalEmails": 0,
      "potentialSecrets": 0,
      "storageKeysCount": 0,
      "stringLiteralsCount": 15
    }
  },
  "securityFindings": {
    "urls": [
      "http://www.w3.org/2000/svg"
    ],
    "endpoints": [],
    "emails": [],
    "secrets": [],
    "storageKeys": []
  },
  "functionsAndComponents": [
    {
      "name": "m",
      "isAsync": false,
      "isComponent": true,
      "params": [
        "{className:e=\"w-5 h-5\"}"
      ],
      "signature": "function m({className:e=\"w-5 h-5\"})",
      "approximateBodyPreview": "function m({className:e=\"w-5 h-5\"}){return(0,d.jsxs)(\"svg\",{className:e,viewBox:\"0 0 24 24\",xmlns:\"http://www.w3.org/200..."
    },
    {
      "name": "w",
      "isAsync": true,
      "isComponent": false,
      "params": [],
      "signature": "async function w()",
      "approximateBodyPreview": "async function w(){let e=(0,g.createClient)(),t=window.location.origin.replace(\"0.0.0.0\",\"localhost\"),{data:s,error:r}=a..."
    },
    {
      "name": "j",
      "isAsync": true,
      "isComponent": false,
      "params": [],
      "signature": "async function j()",
      "approximateBodyPreview": "async function j(){let e=(0,g.createClient)(),{data:t,error:s}=await e.auth.getUser();return s||!t?.user?null:t.user}asy..."
    },
    {
      "name": "v",
      "isAsync": true,
      "isComponent": false,
      "params": [],
      "signature": "async function v()",
      "approximateBodyPreview": "async function v(){let e=(0,g.createClient)(),{error:t}=await e.auth.signOut();t&&console.error(\"Sign out error:\",t.mess..."
    }
  ],
  "dependencies": {
    "turbopackModuleImports": [
      43476,
      71645,
      22016,
      51757,
      56420
    ],
    "totalImportedModules": 5
  },
  "stringLiterals": [
    "object",
    "use strict",
    "w-5 h-5",
    "0 0 24 24",
    "path",
    "#4285F4",
    "#34A853",
    "#FBBC05",
    "#EA4335",
    "0.0.0.0",
    "localhost",
    "google",
    "${t}/auth/callback",
    "Google sign in error:",
    "Sign out error:"
  ],
  "astStructure": {
    "type": "Program",
    "sourceType": "module",
    "detectedFrameworks": [
      "React",
      "Next.js (Turbopack)"
    ]
  }
}

Zero External Transmission: Processed 100% Client-Side in BrowserSecureStack Engine

Full AST & Manifest Output

Transforms minified code blocks into structured JSON objects containing metadata, chunk IDs, function maps, and dependencies.

Automated Secret & URL Recon

Extracts external HTTP/S endpoints, internal `/api/` paths, JWT headers, Supabase instances, and hardcoded API tokens.

Real-Time Search & Export

Instant keyword & regex filtering with live match counters, 1-click clipboard copying, and `.json` file downloads.