bytecode-viewer VS Recaf

I think they forgot to google translate the disadvantages of JEB Decompiler

I haven't used JEB to comment, but I've gotten a lot of mileage out of https://github.com/pxb1988/dex2jar#readme and then feed the normal Java jars it produces into https://github.com/mstrobel/procyon#readme and (of course) one shouldn't overlook picking your favorite tool for dealing with AndroidManifest.xml which often has fun things hiding in it

While digging up those links, I was reminded that some folks enjoy https://github.com/Konloch/bytecode-viewer#is-there-a-demo because it can be easier to "try out" a few of the decompilation engines, but I don't use it because it's hard to do batch things with it, versus dex2jar into procyon is automation friendly

Here's a good tool for inspecting the bytecode of applications, with built in decompiler support: https://github.com/Konloch/bytecode-viewer

If you're curious what anything (Lombok or otherwise) compiles to, JVM bytecode is much simpler than the kinds C/C++ compiles to. It's fairly readable even with the JDK disassembler javap. There are also various community disassemblers and decompilers that provide nicer output than javap. I use https://github.com/Konloch/bytecode-viewer, which is a GUI frontend for several. If one decompiler doesn't handle a class well, another usually does.

I use Bytecode Viewer, https://github.com/Konloch/bytecode-viewer with Dark Mode.

if you do use this plugin i'd recommend also using https://bytecodeviewer.com/ to check the supposed malicious lines of code.

Take a look at tools like this one to get an idea of what you can actually get: https://bytecodeviewer.com/

Also, you can always install the latest release and then put it through a Java decompiler to get the complete source code. It might have some errors since decompilers aren't perfect, but will give you a more complete source code than anything I can legally provide.

IF you've got the legal situation all sorted out, and know that you need to change a Java class file, and know how to program in Java, I'd suggest Recaf. With it, you can import a jar file, decompile, edit and recompile any source files in it, and export the whole thing again.

No one seems to mention Recaf wich is the best option IMO. You can choose between different decompilers (Fernflower, CFR, Jadx, Procyon and others) has bytecode editing capabilities (you don't have to fully decompile, you can edit the bytecode directly), built in peephole optimizations for flow and number obfuscations, various search options for methods, members, strings, and method virtualization via SSVM

Uhhh, no? For something like JavaFX, which I've complained about its bad native handling before, you can still make a multi-platform jar with a little bit of effort. For instance my project Recaf is distributed as a single JAR file. Just install JDK 11+ and you're good to go.

I did something like this, but its not its own control/library: https://github.com/Col-E/Recaf/blob/dev3/recaf-ui/src/main/java/me/coley/recaf/ui/pane/DiffViewPane.java

The decompiler they used to view that code is not very good, that output is garbled.

If you're going to take apart JVM bytecode, you're better off using Recafe or Quiltflower.

https://github.com/Col-E/Recaf

https://github.com/QuiltMC/quiltflower

I've recently been searching for tools that can help me find rats within jar files. So far I've found jd-gui and Recaf, do you all have any suggestions for other tools?

Example: DecompilePane.java

#1: Are you interested in learning about low latency zero allocation programming? #2: Recaf: Java bytecode reversing tool I've been working on for the past 3.5 years | 37 comments #3: My experimental IDE plugin for displaying all project files in a single view, with zoom/pan and code editing. More info in comments. | 57 comments