Identify the obfuscator type and exit without deobfuscating. Fast, no engine required.
Detection only
no-devirt--no-devirt
Fast execution trace only (~2 sec). Skips bytecode lifting (stages 3–6). Use for quick inspection or large scripts.
Trace mode (~2s)
Runtime
no-hooks--no-hooks
Disable VM closure entry instrumentation. May help with scripts that detect hooks.
Disabled
no-fold--no-fold
Disable loop and helper folding in trace mode.
Disabled
timeout--timeout <sec>
Hard timeout per Luau execution pass. Default: 90s.
sec
budget--budget <sec>
Soft execution budget for script runtime. Default: 30s.
sec
Advanced
max-runs--max-runs <n>
Maximum reruns allowed when anti-tamper traps are encountered. Default: 12.
reruns
devirt-rounds--devirt-rounds
Maximum constant decryption rounds in the REPL pass. Default: 200.
rounds
debug--debug
Keep intermediate disassembly files in the output folder for inspection.
Keep intermediates
Output
lines
mode
Error
Configure and click DeobfuscateOutput will appear here
Backend Configuration
Full deobfuscation requires a server running Node.js 18+ and Python 3.10+.
Leave blank to use the current origin (works when running node server.js locally).
Example: http://localhost:3000 or https://my-vps.example.com
To start the full local server: export DEOBF_PATH=/path/to/Deobfuscator-Luraph-V15 node server.js