---
id: 5121
title: "Decompiling Node.js in Ghidra"
source_domain: swarm.ptsecurity.com
source_url: "https://swarm.ptsecurity.com/decompiling-node-js-in-ghidra/"
published_at: "2021-05-20T15:18:20Z"
tags: ["reverse-engineering", "ghidra", "research", "nodejs"]
phying_url: "https://phying.com/item/5121"
lang: en
---

# Decompiling Node.js in Ghidra

## Summary

Behind ghidra_nodejs: decompiling bytenode-protected Node.js applications in Ghidra by parsing the constant pool, function arguments and exception handlers, supporting all JSC opcodes including wide/extra-wide, and resolving cross-references even in obfuscated code.

## Intelligence Metadata

- **Sources:** swarm.ptsecurity.com
- **Published:** 2021-05-20T15:18:20Z
- **Original:** https://swarm.ptsecurity.com/decompiling-node-js-in-ghidra/
- **Phying News:** https://phying.com/item/5121