deobfuscator VS jd-gui

Using this for the first time and it actually worked really well (after i got through the excruciatingly difficult setup)

This deobfuscator might work for you, and claims to support allatori obfuscation.

I used recaf for the plugin.yml, I used deobfuscator to remove the obfuscation, then I used threadtear for decompilation. I use threadtear pretty much always, but it's allatori deobfuscation is somewhat lacking which is why I used a separate program. Also it does not show resources in the jar, which is why I had to use recaf.

Deobfuscator for java: https://github.com/java-deobfuscator/deobfuscator

You need something like this: https://github.com/java-decompiler/jd-gui

Try opening it with jd-gui first

Googling shows me a bit of issues related to JD-GUI having some issues with decompiling Enums. One such issue. I would recommend using a more reliable product if this is something that you have to do. IntelliJ has a built in decompiler which is FernFlower. So you could try that route and see if you get the same issue.

With an open source, client sided Java app you can always use a decompiler on the jar file and verify exactly how your file is handled. And that way you can verify (if you know java) that the session ids are never extracted or sent to anyone.

i’d say this is a good program for decompiling java stuff

The desktop file mentioned seems to be this: https://github.com/java-decompiler/jd-gui/blob/master/src/linux/resources/jd-gui.desktop

Decompiler for jars called Java Decompiler, has a lil gui (cmd line version available): https://github.com/java-decompiler/jd-gui

If you need to inspect the source code, try this https://github.com/java-decompiler/jd-gui