滲透測試之Webpack打包Vue源碼還原


 

1. 找到源碼的map文件,然后下載

2. 使用npm 安裝reverse-sourcemap

npm install --global reverse-sourcemap

3. 進行還原操作

╰─ reverse-sourcemap --help
reverse-sourcemap - Reverse engineering JavaScript and CSS sources from sourcemaps
Usage: reverse-sourcemap [options] <file|directory>

-h, --help Help and usage instructions
-V, --version Version number
-v, --verbose Verbose output, will print which file is currently being processed
-o, --output-dir String Output directory - default: .
-M, --match String Regular expression for matching and filtering files - default: \.map$
-r, --recursive Recursively search matching files

╰─ reverse-sourcemap --output-dir ./xxx  app.1c489f3ee0a84d6f8c46.js.map
reverse-sourcemap - Reverse engineering JavaScript and CSS sources from sourcemaps

 分析源碼,找到利用的接口

 

 

參考:

https://www.npmjs.com/package/reverse-sourcemap

https://yukaii.tw/blog/2017/02/21/restore-source-code-from-sourcemap-file/

https://yukaii.tw/blog/2017/02/21/restore-source-code-from-sourcemap-file/

https://www.npmjs.com/package/restore-source-tree

https://www.npmjs.com/package/reverse-sourcemap


免責聲明!

本站轉載的文章為個人學習借鑒使用,本站對版權不負任何法律責任。如果侵犯了您的隱私權益,請聯系本站郵箱yoyou2525@163.com刪除。



 
粵ICP備18138465號   © 2018-2025 CODEPRJ.COM