unveilr
An open-source command-line decompiler for WeChat mini-program .wxapkg packages that auto-decrypts, merges subpackages, parses the latest APP_V3/APP_V4 formats and restores readable source via Babel AST.
Try it now
GPT-4oWhat is unveilr?
unveilr is a popular open-source WeChat mini-program reverse-engineering (decompilation) command-line tool, maintained from the original r3x5ur project. It reads compiled .wxapkg packages and restores the original project structure — JavaScript, WXML, WXSS and JSON. The new version automatically decrypts packages (on Windows it can extract the wxAppId from the file path), merges split subpackages, supports the latest APP_V3/APP_V4/APP_SUBPACKAGE_V2 package formats and APP_PLUGIN_V1 plugins, and uses @babel/core to parse the syntax tree for precise source extraction instead of regular expressions; a Thread.js worker pool speeds up CPU-heavy parsing. It installs via a prebuilt binary or `npm i unveilr -g`, runs on Windows/macOS/Linux, accepts single files, multiple files or whole directories, and offers flags for formatting, output path, search depth and extract-only mode. It is intended for learning, security research and analyzing mini-programs you own or are authorized to test; the project explicitly requires compliance with cybersecurity law.
Pros
- Keeps up with the newest WeChat package formats.
- Auto decrypt and subpackage merge remove manual steps.
- AST extraction restores cleaner, more readable code.
- Cross-platform with simple npm or binary install.
- Free and open source with an active community.
Cons
- Command-line only, with a learning curve for non-developers.
- AST parsing is CPU-intensive on large packages.
- Output is reconstructed code, not the exact original source.
- Must be used only on authorized programs for legal compliance.
Compare with Alternatives
| Feature | unveilr | wedecode | KillWxapkg | wxapkg |
|---|---|---|---|---|
| Rating | 0.0 | 0.0 | 0.0 | 0.0 |
| Pricing | Free | Free | Free | Free |
| Starting From | — | — | — | — |
| API | — | — | — | — |
| Free Tier | — | — | — | — |
| Mobile App | — | — | — | — |
Who is it for
Mini-program developers
Learn architecture by studying how other apps structure their code.
Security researchers
Audit a mini-program you are authorized to test for weaknesses.
Bug recovery
Restore source from a compiled package when original code was lost.
JS reverse engineers
Analyze encryption, routing and API logic for crawler research.
Educators
Teach mini-program compilation principles and internals.