Electron

Unpack ASAR

npm install -g asar
asar extract core.asar <dst>

On some apps like MS Teams its already unpacked "C:\Users\xct\AppData\Local\Microsoft\Teams\current\resources\app.asar.unpacked\node_modules"

Vulnerability Scanner

https://github.com/doyensec/electronegativity

References

• https://voidsec.com/instrumenting-electron-app/