# Clean Null Bytes from UTF-16 JavaScript
> Remove null byte padding from UTF-16 encoded JavaScript before analysis

**Tools:** [[tools/spidermonkey|spidermonkey]]
**FOR610 Lab:** 4.5

## Commands
```bash
# Check for null bytes (look for 00 in hex)
xxd <script.js> | head -2
# Remove null bytes
cat <script.js> | tr -d '\00' > clean.js
# Then deobfuscate
js -f /usr/share/remnux/objects.js -f clean.js > decoded.js
# Beautify the result
js-beautify decoded.js > final.js
```

#recipe #spidermonkey