Hey everyone! 👋
I have a deep interest in cybersecurity and cryptography. After recently building a QKD (Quantum Key Distribution) simulator, a Password Vault, and a Steganography tool, I wanted to dive deeper into how JavaScript code is secured and obfuscated.
So, I built CyberObfuscator Ultimate — an Enterprise-level AST IDE and JavaScript Obfuscator that runs entirely in your browser without any backend server.
🚀 Try it live here:
✨ What makes it special?
Most obfuscators are CLI tools or rely on a backend API. I wanted to build a completely offline-safe sandbox where developers can experiment with AST manipulation securely.
Key Features include:
- Multi-Pass Engine: A highly structured pipeline (Parse → Analyze → Normalize → Transform → Optimize → Generate).
- Advanced Protection: Applies Scope-Aware Renaming, Dynamic Base64 String Pooling, Numeric XOR Encoding, Control Flow Flattening, and Anti-Debugging.
- Dynamic Custom Plugins: You can write and inject your own custom AST transformation plugins directly in the editor using Babel plugin syntax!
- Pro UI: Draggable Dockview layout, Command Palette (Ctrl+Shift+P), multiple themes, and a build telemetry dashboard.
🛠️ Tech Stack
I built this using Vanilla JavaScript, HTML, and CSS. Under the hood, it uses:
- Babel Standalone (AST parsing and manipulation)
- Monaco Editor (Code editing)
- Dockview Core (Panel layout)
I would love for you to try it out, break it, and share your feedback! What kind of obfuscation passes should I add next?
Let me know your thoughts in the comments! 👇

Top comments (0)