---
title: "Discussion on \"Parsing Without Executing: JavaScript Deobfuscation with Acorn\" | Hashnode"
description: "Discussion on \"Parsing Without Executing: JavaScript Deobfuscation with Acorn\". Rebuilding an AES key from sixteen obfuscated fragments with Acorn, proven by authenticated decryption without running the extension."
url: "https://hashnode.com/posts/parsing-without-executing-javascript-deobfuscation-with-acorn/6ae853c154c30b1c838a4b10"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Parsing Without Executing: JavaScript Deobfuscation with Acorn](https://unk-deaddrop.hashnode.dev/parsing-without-executing-javascript-deobfuscation-with-acorn?utm_source=hashnode&utm_medium=feed)

Rebuilding an AES key from sixteen obfuscated fragments with Acorn, proven by authenticated decryption without running the extension.

Nov 2 · 6 min read · unk-deaddrop.hashnode.dev  
Read the article

-   [#javascript](https://hashnode.com/tag/javascript)
-   [#security](https://hashnode.com/tag/security)
-   [#malware](https://hashnode.com/tag/malware)
-   [#reverse-engineering](https://hashnode.com/tag/reverse-engineering)
-   [#ast](https://hashnode.com/tag/ast)

## Written by

[Ilja Krasnjanski](https://hashnode.com/@iljakrasnjanski)

@iljakrasnjanski · Berlin

  
[View profile](https://hashnode.com/@iljakrasnjanski)

Independent security researcher and systems engineer based in Berlin. Author of UNK\_DeadDrop and unk-scanner. I write about static AST analysis, software supply-chain security, and low-level runtime internals. Currently open to full-time roles in security research, static analysis tooling, or systems engineering.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.