j4k0xb / krunkscript-pwn Public

Notifications You must be signed in to change notification settings
Fork 4
Star 6

Extract/deobfuscate/hook/inject maps with KrunkScript enabled

krunkscript-deobfuscator.netlify.app

GPL-3.0 license

6 stars 4 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 23 Commits
src		src
tests		tests
.gitignore		.gitignore
LICENSE		LICENSE
README.md		README.md
favicon.png		favicon.png
index.html		index.html
netlify.toml		netlify.toml
package-lock.json		package-lock.json
package.json		package.json
script.user.js		script.user.js
tsconfig.json		tsconfig.json

Repository files navigation

KrunkScript Pwn

Userscript no longer works because JSON.parse can't be hooked.

Tip

Check out the new decompiler: https://krunkscript-decompiler.netlify.app/

Outputs almost 100% identical KrunkScript syntax
Infers types through constraint propagation and data flow analysis

Installation

Install Tampermonkey for your browser.
Add the userscript.

Features

Extract, deobfuscate and beautify compiled KrunkScript when you join a map with scripts.
Online deobfuscator: https://krunkscript-deobfuscator.netlify.app

Read/modify global variables.
Access everything from GAME.
Inject own actions.

How To Download Scripts

Join a map with scripts
Use a chromium based browser
Open the developer console (F12)
Execute queryObjects(Function.prototype) (this may take a while)
Right-click on the resulting array and select "Store as global variable"
Execute temp1.find(f=>f.name==='V_start')
Click on the function to see the whole script in the sources tab