top of page



Firebug integrates with Firefox to put a wealth of web development tools at your fingertips while you browse. You can edit, debug, and monitor CSS, HTML, and JavaScript live in any web page.


Firebug is always just a keystroke away, but it never gets in your way. You can open Firebug in a separate window, or as a bar at the bottom of your browser. Firebug also gives you fine-grained control over which websites you want to enable it for.


Firebug includes a powerful JavaScript debugger that lets you pause execution at any time and have look at the state of the world. If your code is a little sluggish, use the JavaScript profiler to measure performance and find bottlenecks fast.





sunpack-n emulates browser functionality when visiting a URL. It's purpose is to detect exploits that target browser and browser plug-in vulnerabilities. It accepts many different types of input:


  • PDF files - samples/sample-pdf.file

  • Packet Captures - samples/sample-http-exploit.pcap

  • HTML files

  • JavaScript files

  • SWF files



This little beautifier will reformat and reindent bookmarklets, ugly JavaScript, unpack scripts packed by Dean Edward’s popular packer, as well as deobfuscate scripts processed by





Beautify, unpack or deobfuscate JavaScript and HTML, make JSON/JSONP readable, etc.

All of the source code is completely free and open, available on the github under MIT licence, 
and we have a command-line version, python library and a node package as well.



JavaScript Beautifier


Web developers often use JavaScript Compressor to format their JavaScript source code in a particular style or compact them in one line and this makes source code difficult to read and understand.

JavaScript Beautifier reformats JavaScript source code to make it more readable. Code beautification involves parsing the JavaScript source code into component structures, such as assignment statements, if blocks, loops, etc., and formatting them in a proper manner. It is quick, easy and free!



Some websites use various tricks to prevent you from seeing the JavaScript code that runs there, often the code is downloaded from the server in obfuscated form or even generated on the fly. Or maybe the JavaScript codebase is simply too large to browse it easily. Yet the JavaScript engine still needs to know which code to run and that’s where JavaScript Deobfuscator gets its information from: it simply displays the scripts that the JavaScript engine compiles and executes. This makes it a useful tool even when working with web pages that don’t use obfuscation.



Web Inspector is an open source web development tool built into Safari that makes it easy to prototype, optimize, and debug your web content on iOS and OS X.


Turn to Web Inspector when your front-end logic goes awry. Web Inspector offers a debugging environment that lets you pause script execution and observe the values of your variables as they are defined.



Rhino is an open-source implementation of JavaScript written entirely in Java. It is typically embedded into Java applications to provide scripting to end users. It is embedded in J2SE 6 as the default Java scripting engine.




SpiderMonkey 24 is the JavaScript engine that shipped in Firefox 24. It continues to improve performance over previous SpiderMonkey releases, with a significantly improved garbage collector, a new JIT compilation mode, and other features.  It also contains new language and API features described in detail below.



An advanced malware-hunting tool, created by Boban Spasic, specialized for hunting web-based exploits, decode obfuscated JavaScripts, etc.

Anchor 10
Anchor 11
Anchor 12
Anchor 13
Anchor 14
Anchor 15
Anchor 16
Anchor 17

Subscribe for Updates

Congrats! You’re subscribed

bottom of page