jscrub v0.1.0

First release of jscrub — a scrubber for Java HPROF heap dumps that replaces sensitive char[]/byte[] data (and, optionally, your proprietary class names) with reversible, length- and cardinality-preserving obfuscations, so a dump stays fully analyzable (e.g. by jheapo) while safe to share.

Download

• jscrub-0.1.0.jar — the executable jar. Needs a Java 25+ runtime; no other dependencies. One jar, three tools:

  java -jar jscrub-0.1.0.jar scrub   -C -B mydump.hprof
  java -jar jscrub-0.1.0.jar descrub mydump_scrub.hprof mydump_scrub.hprof.scrubkey
  java -jar jscrub-0.1.0.jar resolve --list mydump_scrub.hprof.scrubkey
  java -jar jscrub-0.1.0.jar --help
  

• jscrub-0.1.0-dist.{zip,tar.gz} — adds bin/ launchers so you can type jscrub/jdescrub/jresolve.
• jscrub-0.1.0-native-<os>-<arch>.tar.gz — self-contained bundles that ship their own runtime (no Java required); added by CI shortly after this release.

Highlights

• Scrub char[] (-C) and byte[] (-B); Strings are treated as char data whatever the JVM's storage.
• Obfuscate proprietary class names with -f jscrub.conf (JDK/JEE/framework names stay readable).
• Full reversibility: descrub rebuilds the original dump byte-for-byte; resolve maps findings back.

Source-available under the Business Source License 1.1 (converts to Apache-2.0 on the Change Date) — see LICENSE.md. Not legal advice.