whatisgithub

What is killwxapkg?

ackites/killwxapkg — explained in plain English

Analysis updated 2026-06-26

5,805GoAudience · developerComplexity · 3/5Setup · moderate

In one sentence

A Go command-line tool that decompiles WeChat Mini Program package files back into readable source code, with extra features for enabling developer tools, scanning for leaked credentials, and repacking modified code.

Mindmap

mindmap
  root((killwxapkg))
    What it does
      Decompiles wxapkg files
      Decrypts packages
      Restores source code
    Output files
      JavaScript logic
      WXML templates
      WXSS styles
      JSON config
    Extra features
      Developer tools hook
      Sensitive data scan
      Repack to wxapkg
    Setup
      Go binary or build
      WeChat desktop for hooks
    Use cases
      Security research
      Code reading
Click or tap to explore — scroll the page freely

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

What do people build with it?

USE CASE 1

Decompile a WeChat Mini Program .wxapkg file to read and understand its JavaScript, WXML, and WXSS source code.

USE CASE 2

Scan decompiled Mini Program code for hardcoded credentials or sensitive data using the built-in export feature.

USE CASE 3

Patch the WeChat desktop client to enable developer tools and an F12 console on Mini Programs for security research.

USE CASE 4

Repack modified Mini Program source code back into a .wxapkg file for testing or analysis.

What is it built with?

Go

How does it compare?

ackites/killwxapkgguangzhengli/k8s-tutorialscortexproject/cortex
Stars5,8055,8055,801
LanguageGoGoGo
Setup difficultymoderatemoderatehard
Complexity3/53/55/5
Audiencedeveloperdeveloperops devops

Figures from each repo's GitHub metadata at analysis time.

How do you get it running?

Difficulty · moderate Time to first run · 30min

The Hook feature requires running WeChat desktop and carries a risk of account suspension, the README recommends using a secondary account.

So what is it?

KillWxapkg is a Go command-line tool for decompiling WeChat Mini Programs. WeChat Mini Programs are small applications that run inside the WeChat messaging app on mobile devices. They are distributed as compiled and encrypted package files with the .wxapkg extension. This tool takes those package files and reverses them back into readable source code. The tool handles the full decompilation process in one step: it detects whether a package is encrypted, decrypts it automatically if needed, then unpacks it. After unpacking, it can restore the original project directory structure, separating the code back into its component files: JavaScript, JSON configuration files, WXML (WeChat's HTML-like template language), and WXSS (WeChat's CSS-like style language). A code beautification option reformats the output for easier reading. Beyond decompilation, the tool includes a Hook feature that patches the WeChat desktop client to enable developer tools and an F12 console on Mini Programs that normally do not allow it. This requires running WeChat and is noted to carry a risk of account suspension, so the README recommends using a secondary account. There is also a repack option that takes a modified source directory and packages it back into a .wxapkg file, and a sensitive data export feature that scans decompiled code for hardcoded credentials and similar information. The tool is compiled from Go source code or downloaded as a prebuilt binary. The README is written in Chinese and includes a disclaimer stating the tool is intended for security research and learning only, and that users are responsible for complying with applicable law.

Copy-paste prompts

Prompt 1
Using killwxapkg, show me how to decompile a .wxapkg file and restore its original WXML, WXSS, and JavaScript files into a proper directory structure.
Prompt 2
I've decompiled a WeChat Mini Program with killwxapkg. Show me how to use the sensitive data export feature to find hardcoded API keys or credentials in the code.
Prompt 3
Using killwxapkg's repack feature, help me modify the decompiled source of a Mini Program and package it back into a .wxapkg file.
Prompt 4
Walk me through compiling killwxapkg from source on macOS and running it against an encrypted .wxapkg file to fully decompile it in one step.

Frequently asked questions

What is killwxapkg?

A Go command-line tool that decompiles WeChat Mini Program package files back into readable source code, with extra features for enabling developer tools, scanning for leaked credentials, and repacking modified code.

What language is killwxapkg written in?

Mainly Go. The stack also includes Go.

How hard is killwxapkg to set up?

Setup difficulty is rated moderate, with roughly 30min to a first successful run.

Who is killwxapkg for?

Mainly developer.

Open on GitHub → Ask about another repo

This repo across BitVibe Labs

Verify against the repo before relying on details.