SCRIPT REVERSE ENGINEERING
Inspect JavaScript source and identify suspicious functionality without executing it.
Web3 frontend reverse engineering
EXPOSE THE SCRIPTS.
BEFORE THEY EXPOSE YOU.
Reverse-engineer Web3 websites. Uncover suspicious scripts, dangerous wallet interactions, and hidden frontend threats.
FOLLOW @RUGSCRIPTSHTTP / HTTPS onlyNO SCRIPT EXECUTIONNO WALLET CONNECTION
WALLET THREAT ANALYSIS
Investigate signing requests, token approvals, transaction construction, and wallet interaction patterns.
FRONTEND INTELLIGENCE
Discover external dependencies, referenced endpoints, and hidden frontend risks.
REA INVESTIGATIONS · PLANNED
Deeper, isolated reverse engineering is planned. REA is not connected to live scans yet.
Method / 001
Static inspection.
No execution.
RUGSCRIPTS starts with a URL you submit, retrieves the public webpage and a bounded set of linked JavaScript resources, then searches that source for wallet APIs, approval patterns, dynamic code generation, and encoded payload signals.
The scanner investigates those resources as text and returns categorized findings with technical evidence. Host validation, redirect checks, response size, script count, and time are bounded. Code is not executed, and no browser or wallet is launched.
A wallet method is a capability, not a verdict. Context matters, and heuristic risk scores are indicators for further review.
- 01You submit a Web3 website URL.
- 02RUGSCRIPTS retrieves its page and linked frontend resources.
- 03Static analysis checks scripts and wallet-related patterns.
- 04You review categorized findings and their source evidence.
REA (Reverse Engineer Anything) is not available in this deployment. Deeper REA investigations are planned as a separate, isolated capability and do not contribute to current scan results.
Follow our security research and project updates on X