skidfuscator-java-obfuscator VS Recaf

This is a RAT some1 tried to send me, could some1 reverse engineer to what discord webhook this is being sent to? I know for a fact that this is a discord webhook and I also know what obfuscator is being used (https://github.com/skidfuscatordev/skidfuscator-java-obfuscator/ this is the github link). Even more helpful would be if some1 could teach me how to deobfuscate things cuz Im kind of a noob. The link to the whole Jar file is https://drive.google.com/file/d/1WGvYfHeEYStsPmygwnGlCmnNyVAoB533/view?usp=sharing *Keep in mind this is a Trojan* The webhook is normally entered in the json.JSONrareException class. Any help is appreciated thanks! I tried looking at the decompiled code but again it is obfuscated and idk how to deobfuscate so plz help ty. If you dont want to download and decompile the rat yourself (thats totally understandable) I have inserted where I think are the important stuff here: https://pastebin.com/hEzDAdcg and the full code here: https://pastebin.com/aENGYHwn The variable I'm trying to decrypt is webthingy. It should be a link to a discord webhook.

If you want something a little strong with just the plain ZKM methods with better tree generations I had a buddy make it while back. (Nothing is configurable right now, Only downside until further updates) https://github.com/terminalsin/skidfuscator-java-obfuscator

IF you've got the legal situation all sorted out, and know that you need to change a Java class file, and know how to program in Java, I'd suggest Recaf. With it, you can import a jar file, decompile, edit and recompile any source files in it, and export the whole thing again.

No one seems to mention Recaf wich is the best option IMO. You can choose between different decompilers (Fernflower, CFR, Jadx, Procyon and others) has bytecode editing capabilities (you don't have to fully decompile, you can edit the bytecode directly), built in peephole optimizations for flow and number obfuscations, various search options for methods, members, strings, and method virtualization via SSVM

Uhhh, no? For something like JavaFX, which I've complained about its bad native handling before, you can still make a multi-platform jar with a little bit of effort. For instance my project Recaf is distributed as a single JAR file. Just install JDK 11+ and you're good to go.

I did something like this, but its not its own control/library: https://github.com/Col-E/Recaf/blob/dev3/recaf-ui/src/main/java/me/coley/recaf/ui/pane/DiffViewPane.java

The decompiler they used to view that code is not very good, that output is garbled.

If you're going to take apart JVM bytecode, you're better off using Recafe or Quiltflower.

https://github.com/Col-E/Recaf

https://github.com/QuiltMC/quiltflower

I've recently been searching for tools that can help me find rats within jar files. So far I've found jd-gui and Recaf, do you all have any suggestions for other tools?

Example: DecompilePane.java

#1: Are you interested in learning about low latency zero allocation programming? #2: Recaf: Java bytecode reversing tool I've been working on for the past 3.5 years | 37 comments #3: My experimental IDE plugin for displaying all project files in a single view, with zoom/pan and code editing. More info in comments. | 57 comments