[birdyrooster]

The same way trainers, aimbots, and other hacks know which addresses are critical for exploiting game mechanics, by doing analysis of decompiled code and also searching running memory for known patterns and then patching them hot.

[three_seagrass]

Don't websites compile on every page load, giving them the opportunity to obfuscate?

That's a bit different than a video game that was compiled only once.