Collected research

Wobfuscator: Obfuscating JavaScript Malware via Opportunistic Translation to WebAssembly

Alan Romano, Daniel Lehmann, Michael Pradel and Weihang Wang · doi.org

Wobfuscator rewrites parts of malicious JavaScript - string literals, array initialisers, function names, calls and control flow - into equivalent WebAssembly modules loaded at runtime. Behaviour is preserved but the JavaScript syntax features static classifiers depend on disappear, cutting the recall of Cujo, Zozzle, JaSt and JStap to near zero.

Record

Researcher

Alan Romano, Daniel Lehmann, Michael Pradel and Weihang Wang

Published by

doi.org

Topic

Server

In the archive

• Collected in the 2022 research round

Related sources

• Wobfuscator: Obfuscating JavaScript Malware via Opportunistic Translation to WebAssembly

Tags

• filter-bypass
• webassembly
• javascript
• static-analysis
• detection
• tooling
• owasp-a05-2021
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of Alan Romano, Daniel Lehmann, Michael Pradel and Weihang Wang, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 17 August 2026.