@ai-jshook/mcp 0.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.env.example +38 -0
- package/CLAUDE.md +170 -0
- package/README.md +564 -0
- package/bun.lock +1484 -0
- package/dist/index.d.ts +3 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +57 -0
- package/dist/index.js.map +1 -0
- package/dist/modules/analyzer/AISummarizer.d.ts +41 -0
- package/dist/modules/analyzer/AISummarizer.d.ts.map +1 -0
- package/dist/modules/analyzer/AISummarizer.js +186 -0
- package/dist/modules/analyzer/AISummarizer.js.map +1 -0
- package/dist/modules/analyzer/CodeAnalyzer.d.ts +28 -0
- package/dist/modules/analyzer/CodeAnalyzer.d.ts.map +1 -0
- package/dist/modules/analyzer/CodeAnalyzer.js +1287 -0
- package/dist/modules/analyzer/CodeAnalyzer.js.map +1 -0
- package/dist/modules/analyzer/IntelligentAnalyzer.d.ts +114 -0
- package/dist/modules/analyzer/IntelligentAnalyzer.d.ts.map +1 -0
- package/dist/modules/analyzer/IntelligentAnalyzer.js +1176 -0
- package/dist/modules/analyzer/IntelligentAnalyzer.js.map +1 -0
- package/dist/modules/browser/BrowserModeManager.d.ts +31 -0
- package/dist/modules/browser/BrowserModeManager.d.ts.map +1 -0
- package/dist/modules/browser/BrowserModeManager.js +241 -0
- package/dist/modules/browser/BrowserModeManager.js.map +1 -0
- package/dist/modules/captcha/AICaptchaDetector.d.ts +32 -0
- package/dist/modules/captcha/AICaptchaDetector.d.ts.map +1 -0
- package/dist/modules/captcha/AICaptchaDetector.js +387 -0
- package/dist/modules/captcha/AICaptchaDetector.js.map +1 -0
- package/dist/modules/captcha/CaptchaDetector.d.ts +28 -0
- package/dist/modules/captcha/CaptchaDetector.d.ts.map +1 -0
- package/dist/modules/captcha/CaptchaDetector.js +513 -0
- package/dist/modules/captcha/CaptchaDetector.js.map +1 -0
- package/dist/modules/collector/CodeCache.d.ts +37 -0
- package/dist/modules/collector/CodeCache.d.ts.map +1 -0
- package/dist/modules/collector/CodeCache.js +188 -0
- package/dist/modules/collector/CodeCache.js.map +1 -0
- package/dist/modules/collector/CodeCollector.d.ts +107 -0
- package/dist/modules/collector/CodeCollector.d.ts.map +1 -0
- package/dist/modules/collector/CodeCollector.js +796 -0
- package/dist/modules/collector/CodeCollector.js.map +1 -0
- package/dist/modules/collector/CodeCompressor.d.ts +65 -0
- package/dist/modules/collector/CodeCompressor.d.ts.map +1 -0
- package/dist/modules/collector/CodeCompressor.js +245 -0
- package/dist/modules/collector/CodeCompressor.js.map +1 -0
- package/dist/modules/collector/DOMInspector.d.ts +51 -0
- package/dist/modules/collector/DOMInspector.d.ts.map +1 -0
- package/dist/modules/collector/DOMInspector.js +437 -0
- package/dist/modules/collector/DOMInspector.js.map +1 -0
- package/dist/modules/collector/PageController.d.ts +79 -0
- package/dist/modules/collector/PageController.d.ts.map +1 -0
- package/dist/modules/collector/PageController.js +287 -0
- package/dist/modules/collector/PageController.js.map +1 -0
- package/dist/modules/collector/SmartCodeCollector.d.ts +38 -0
- package/dist/modules/collector/SmartCodeCollector.d.ts.map +1 -0
- package/dist/modules/collector/SmartCodeCollector.js +208 -0
- package/dist/modules/collector/SmartCodeCollector.js.map +1 -0
- package/dist/modules/collector/StreamingCollector.d.ts +46 -0
- package/dist/modules/collector/StreamingCollector.d.ts.map +1 -0
- package/dist/modules/collector/StreamingCollector.js +127 -0
- package/dist/modules/collector/StreamingCollector.js.map +1 -0
- package/dist/modules/crypto/CryptoDetector.d.ts +22 -0
- package/dist/modules/crypto/CryptoDetector.d.ts.map +1 -0
- package/dist/modules/crypto/CryptoDetector.js +168 -0
- package/dist/modules/crypto/CryptoDetector.js.map +1 -0
- package/dist/modules/crypto/CryptoDetectorEnhanced.d.ts +31 -0
- package/dist/modules/crypto/CryptoDetectorEnhanced.d.ts.map +1 -0
- package/dist/modules/crypto/CryptoDetectorEnhanced.js +269 -0
- package/dist/modules/crypto/CryptoDetectorEnhanced.js.map +1 -0
- package/dist/modules/crypto/CryptoRules.d.ts +59 -0
- package/dist/modules/crypto/CryptoRules.d.ts.map +1 -0
- package/dist/modules/crypto/CryptoRules.js +234 -0
- package/dist/modules/crypto/CryptoRules.js.map +1 -0
- package/dist/modules/debugger/BlackboxManager.d.ts +14 -0
- package/dist/modules/debugger/BlackboxManager.d.ts.map +1 -0
- package/dist/modules/debugger/BlackboxManager.js +98 -0
- package/dist/modules/debugger/BlackboxManager.js.map +1 -0
- package/dist/modules/debugger/DebuggerManager.d.ts +138 -0
- package/dist/modules/debugger/DebuggerManager.d.ts.map +1 -0
- package/dist/modules/debugger/DebuggerManager.js +777 -0
- package/dist/modules/debugger/DebuggerManager.js.map +1 -0
- package/dist/modules/debugger/EventBreakpointManager.d.ts +30 -0
- package/dist/modules/debugger/EventBreakpointManager.d.ts.map +1 -0
- package/dist/modules/debugger/EventBreakpointManager.js +125 -0
- package/dist/modules/debugger/EventBreakpointManager.js.map +1 -0
- package/dist/modules/debugger/RuntimeInspector.d.ts +54 -0
- package/dist/modules/debugger/RuntimeInspector.d.ts.map +1 -0
- package/dist/modules/debugger/RuntimeInspector.js +277 -0
- package/dist/modules/debugger/RuntimeInspector.js.map +1 -0
- package/dist/modules/debugger/ScriptManager.d.ts +94 -0
- package/dist/modules/debugger/ScriptManager.d.ts.map +1 -0
- package/dist/modules/debugger/ScriptManager.js +433 -0
- package/dist/modules/debugger/ScriptManager.js.map +1 -0
- package/dist/modules/debugger/WatchExpressionManager.d.ts +52 -0
- package/dist/modules/debugger/WatchExpressionManager.d.ts.map +1 -0
- package/dist/modules/debugger/WatchExpressionManager.js +136 -0
- package/dist/modules/debugger/WatchExpressionManager.js.map +1 -0
- package/dist/modules/debugger/XHRBreakpointManager.d.ts +21 -0
- package/dist/modules/debugger/XHRBreakpointManager.d.ts.map +1 -0
- package/dist/modules/debugger/XHRBreakpointManager.js +81 -0
- package/dist/modules/debugger/XHRBreakpointManager.js.map +1 -0
- package/dist/modules/deobfuscator/ASTOptimizer.d.ts +12 -0
- package/dist/modules/deobfuscator/ASTOptimizer.d.ts.map +1 -0
- package/dist/modules/deobfuscator/ASTOptimizer.js +234 -0
- package/dist/modules/deobfuscator/ASTOptimizer.js.map +1 -0
- package/dist/modules/deobfuscator/AdvancedDeobfuscator.d.ts +52 -0
- package/dist/modules/deobfuscator/AdvancedDeobfuscator.d.ts.map +1 -0
- package/dist/modules/deobfuscator/AdvancedDeobfuscator.js +985 -0
- package/dist/modules/deobfuscator/AdvancedDeobfuscator.js.map +1 -0
- package/dist/modules/deobfuscator/Deobfuscator.d.ts +23 -0
- package/dist/modules/deobfuscator/Deobfuscator.d.ts.map +1 -0
- package/dist/modules/deobfuscator/Deobfuscator.js +487 -0
- package/dist/modules/deobfuscator/Deobfuscator.js.map +1 -0
- package/dist/modules/deobfuscator/JSVMPDeobfuscator.d.ts +19 -0
- package/dist/modules/deobfuscator/JSVMPDeobfuscator.d.ts.map +1 -0
- package/dist/modules/deobfuscator/JSVMPDeobfuscator.js +594 -0
- package/dist/modules/deobfuscator/JSVMPDeobfuscator.js.map +1 -0
- package/dist/modules/deobfuscator/JScramberDeobfuscator.d.ts +28 -0
- package/dist/modules/deobfuscator/JScramberDeobfuscator.d.ts.map +1 -0
- package/dist/modules/deobfuscator/JScramberDeobfuscator.js +239 -0
- package/dist/modules/deobfuscator/JScramberDeobfuscator.js.map +1 -0
- package/dist/modules/deobfuscator/PackerDeobfuscator.d.ts +38 -0
- package/dist/modules/deobfuscator/PackerDeobfuscator.d.ts.map +1 -0
- package/dist/modules/deobfuscator/PackerDeobfuscator.js +191 -0
- package/dist/modules/deobfuscator/PackerDeobfuscator.js.map +1 -0
- package/dist/modules/detector/ObfuscationDetector.d.ts +35 -0
- package/dist/modules/detector/ObfuscationDetector.d.ts.map +1 -0
- package/dist/modules/detector/ObfuscationDetector.js +278 -0
- package/dist/modules/detector/ObfuscationDetector.js.map +1 -0
- package/dist/modules/emulator/AIEnvironmentAnalyzer.d.ts +32 -0
- package/dist/modules/emulator/AIEnvironmentAnalyzer.d.ts.map +1 -0
- package/dist/modules/emulator/AIEnvironmentAnalyzer.js +548 -0
- package/dist/modules/emulator/AIEnvironmentAnalyzer.js.map +1 -0
- package/dist/modules/emulator/BrowserAPIDatabase.d.ts +34 -0
- package/dist/modules/emulator/BrowserAPIDatabase.d.ts.map +1 -0
- package/dist/modules/emulator/BrowserAPIDatabase.js +326 -0
- package/dist/modules/emulator/BrowserAPIDatabase.js.map +1 -0
- package/dist/modules/emulator/BrowserEnvironmentRules.d.ts +47 -0
- package/dist/modules/emulator/BrowserEnvironmentRules.d.ts.map +1 -0
- package/dist/modules/emulator/BrowserEnvironmentRules.js +493 -0
- package/dist/modules/emulator/BrowserEnvironmentRules.js.map +1 -0
- package/dist/modules/emulator/EnvironmentEmulator.d.ts +27 -0
- package/dist/modules/emulator/EnvironmentEmulator.d.ts.map +1 -0
- package/dist/modules/emulator/EnvironmentEmulator.js +1113 -0
- package/dist/modules/emulator/EnvironmentEmulator.js.map +1 -0
- package/dist/modules/emulator/EnvironmentEmulatorEnhanced.d.ts +26 -0
- package/dist/modules/emulator/EnvironmentEmulatorEnhanced.d.ts.map +1 -0
- package/dist/modules/emulator/EnvironmentEmulatorEnhanced.js +493 -0
- package/dist/modules/emulator/EnvironmentEmulatorEnhanced.js.map +1 -0
- package/dist/modules/emulator/templates/chrome-env.d.ts +260 -0
- package/dist/modules/emulator/templates/chrome-env.d.ts.map +1 -0
- package/dist/modules/emulator/templates/chrome-env.js +253 -0
- package/dist/modules/emulator/templates/chrome-env.js.map +1 -0
- package/dist/modules/hook/AIHookGenerator.d.ts +53 -0
- package/dist/modules/hook/AIHookGenerator.d.ts.map +1 -0
- package/dist/modules/hook/AIHookGenerator.js +353 -0
- package/dist/modules/hook/AIHookGenerator.js.map +1 -0
- package/dist/modules/hook/HookManager.d.ts +67 -0
- package/dist/modules/hook/HookManager.d.ts.map +1 -0
- package/dist/modules/hook/HookManager.js +1225 -0
- package/dist/modules/hook/HookManager.js.map +1 -0
- package/dist/modules/monitor/ConsoleMonitor.d.ts +140 -0
- package/dist/modules/monitor/ConsoleMonitor.d.ts.map +1 -0
- package/dist/modules/monitor/ConsoleMonitor.js +834 -0
- package/dist/modules/monitor/ConsoleMonitor.js.map +1 -0
- package/dist/modules/monitor/PerformanceMonitor.d.ts +65 -0
- package/dist/modules/monitor/PerformanceMonitor.d.ts.map +1 -0
- package/dist/modules/monitor/PerformanceMonitor.js +175 -0
- package/dist/modules/monitor/PerformanceMonitor.js.map +1 -0
- package/dist/modules/stealth/StealthScripts2025.d.ts +17 -0
- package/dist/modules/stealth/StealthScripts2025.d.ts.map +1 -0
- package/dist/modules/stealth/StealthScripts2025.js +274 -0
- package/dist/modules/stealth/StealthScripts2025.js.map +1 -0
- package/dist/modules/symbolic/JSVMPSymbolicExecutor.d.ts +69 -0
- package/dist/modules/symbolic/JSVMPSymbolicExecutor.d.ts.map +1 -0
- package/dist/modules/symbolic/JSVMPSymbolicExecutor.js +232 -0
- package/dist/modules/symbolic/JSVMPSymbolicExecutor.js.map +1 -0
- package/dist/modules/symbolic/SymbolicExecutor.d.ts +69 -0
- package/dist/modules/symbolic/SymbolicExecutor.d.ts.map +1 -0
- package/dist/modules/symbolic/SymbolicExecutor.js +346 -0
- package/dist/modules/symbolic/SymbolicExecutor.js.map +1 -0
- package/dist/server/AIHookToolDefinitions.d.ts +3 -0
- package/dist/server/AIHookToolDefinitions.d.ts.map +1 -0
- package/dist/server/AIHookToolDefinitions.js +284 -0
- package/dist/server/AIHookToolDefinitions.js.map +1 -0
- package/dist/server/AIHookToolHandlers.d.ts +50 -0
- package/dist/server/AIHookToolHandlers.d.ts.map +1 -0
- package/dist/server/AIHookToolHandlers.js +311 -0
- package/dist/server/AIHookToolHandlers.js.map +1 -0
- package/dist/server/AdvancedToolDefinitions.d.ts +3 -0
- package/dist/server/AdvancedToolDefinitions.d.ts.map +1 -0
- package/dist/server/AdvancedToolDefinitions.js +218 -0
- package/dist/server/AdvancedToolDefinitions.js.map +1 -0
- package/dist/server/AdvancedToolHandlers.d.ts +85 -0
- package/dist/server/AdvancedToolHandlers.d.ts.map +1 -0
- package/dist/server/AdvancedToolHandlers.js +431 -0
- package/dist/server/AdvancedToolHandlers.js.map +1 -0
- package/dist/server/BrowserToolDefinitions.d.ts +3 -0
- package/dist/server/BrowserToolDefinitions.d.ts.map +1 -0
- package/dist/server/BrowserToolDefinitions.js +841 -0
- package/dist/server/BrowserToolDefinitions.js.map +1 -0
- package/dist/server/BrowserToolHandlers.d.ts +290 -0
- package/dist/server/BrowserToolHandlers.d.ts.map +1 -0
- package/dist/server/BrowserToolHandlers.js +784 -0
- package/dist/server/BrowserToolHandlers.js.map +1 -0
- package/dist/server/CacheToolDefinitions.d.ts +3 -0
- package/dist/server/CacheToolDefinitions.d.ts.map +1 -0
- package/dist/server/CacheToolDefinitions.js +166 -0
- package/dist/server/CacheToolDefinitions.js.map +1 -0
- package/dist/server/DebuggerToolDefinitions.d.ts +3 -0
- package/dist/server/DebuggerToolDefinitions.d.ts.map +1 -0
- package/dist/server/DebuggerToolDefinitions.js +600 -0
- package/dist/server/DebuggerToolDefinitions.js.map +1 -0
- package/dist/server/DebuggerToolHandlers.d.ts +230 -0
- package/dist/server/DebuggerToolHandlers.d.ts.map +1 -0
- package/dist/server/DebuggerToolHandlers.js +935 -0
- package/dist/server/DebuggerToolHandlers.js.map +1 -0
- package/dist/server/MCPServer.d.ts +55 -0
- package/dist/server/MCPServer.d.ts.map +1 -0
- package/dist/server/MCPServer.js +1344 -0
- package/dist/server/MCPServer.js.map +1 -0
- package/dist/server/TokenBudgetToolDefinitions.d.ts +3 -0
- package/dist/server/TokenBudgetToolDefinitions.d.ts.map +1 -0
- package/dist/server/TokenBudgetToolDefinitions.js +114 -0
- package/dist/server/TokenBudgetToolDefinitions.js.map +1 -0
- package/dist/services/LLMService.d.ts +41 -0
- package/dist/services/LLMService.d.ts.map +1 -0
- package/dist/services/LLMService.js +792 -0
- package/dist/services/LLMService.js.map +1 -0
- package/dist/types/index.d.ts +527 -0
- package/dist/types/index.d.ts.map +1 -0
- package/dist/types/index.js +2 -0
- package/dist/types/index.js.map +1 -0
- package/dist/utils/AdaptiveDataSerializer.d.ts +27 -0
- package/dist/utils/AdaptiveDataSerializer.d.ts.map +1 -0
- package/dist/utils/AdaptiveDataSerializer.js +215 -0
- package/dist/utils/AdaptiveDataSerializer.js.map +1 -0
- package/dist/utils/CacheAdapters.d.ts +30 -0
- package/dist/utils/CacheAdapters.d.ts.map +1 -0
- package/dist/utils/CacheAdapters.js +83 -0
- package/dist/utils/CacheAdapters.js.map +1 -0
- package/dist/utils/TokenBudgetManager.d.ts +52 -0
- package/dist/utils/TokenBudgetManager.d.ts.map +1 -0
- package/dist/utils/TokenBudgetManager.js +190 -0
- package/dist/utils/TokenBudgetManager.js.map +1 -0
- package/dist/utils/UnifiedCacheManager.d.ts +55 -0
- package/dist/utils/UnifiedCacheManager.d.ts.map +1 -0
- package/dist/utils/UnifiedCacheManager.js +207 -0
- package/dist/utils/UnifiedCacheManager.js.map +1 -0
- package/dist/utils/cache.d.ts +13 -0
- package/dist/utils/cache.d.ts.map +1 -0
- package/dist/utils/cache.js +92 -0
- package/dist/utils/cache.js.map +1 -0
- package/dist/utils/config.d.ts +7 -0
- package/dist/utils/config.d.ts.map +1 -0
- package/dist/utils/config.js +93 -0
- package/dist/utils/config.js.map +1 -0
- package/dist/utils/detailedDataManager.d.ts +60 -0
- package/dist/utils/detailedDataManager.d.ts.map +1 -0
- package/dist/utils/detailedDataManager.js +204 -0
- package/dist/utils/detailedDataManager.js.map +1 -0
- package/dist/utils/logger.d.ts +16 -0
- package/dist/utils/logger.d.ts.map +1 -0
- package/dist/utils/logger.js +47 -0
- package/dist/utils/logger.js.map +1 -0
- package/dist/utils/parallel.d.ts +40 -0
- package/dist/utils/parallel.d.ts.map +1 -0
- package/dist/utils/parallel.js +148 -0
- package/dist/utils/parallel.js.map +1 -0
- package/package.json +94 -0
- package/server.json +39 -0
- package/tsconfig.dev.json +14 -0
|
@@ -0,0 +1,127 @@
|
|
|
1
|
+
import { logger } from '../../utils/logger.js';
|
|
2
|
+
export class StreamingCollector {
|
|
3
|
+
DEFAULT_CHUNK_SIZE = 100 * 1024;
|
|
4
|
+
DEFAULT_MAX_CHUNKS = 50;
|
|
5
|
+
async *streamFile(file, options = {}) {
|
|
6
|
+
const chunkSize = options.chunkSize || this.DEFAULT_CHUNK_SIZE;
|
|
7
|
+
const maxChunks = options.maxChunks || this.DEFAULT_MAX_CHUNKS;
|
|
8
|
+
const content = file.content;
|
|
9
|
+
const totalSize = content.length;
|
|
10
|
+
const totalChunks = Math.min(Math.ceil(totalSize / chunkSize), maxChunks);
|
|
11
|
+
logger.debug(`Streaming file: ${file.url} (${totalChunks} chunks)`);
|
|
12
|
+
for (let i = 0; i < totalChunks; i++) {
|
|
13
|
+
const offset = i * chunkSize;
|
|
14
|
+
const chunk = content.substring(offset, offset + chunkSize);
|
|
15
|
+
yield {
|
|
16
|
+
chunkIndex: i,
|
|
17
|
+
totalChunks,
|
|
18
|
+
url: file.url,
|
|
19
|
+
content: chunk,
|
|
20
|
+
isLast: i === totalChunks - 1,
|
|
21
|
+
metadata: {
|
|
22
|
+
fileSize: totalSize,
|
|
23
|
+
chunkSize: chunk.length,
|
|
24
|
+
offset,
|
|
25
|
+
},
|
|
26
|
+
};
|
|
27
|
+
}
|
|
28
|
+
}
|
|
29
|
+
async *streamFiles(files, options = {}) {
|
|
30
|
+
for (const file of files) {
|
|
31
|
+
for await (const chunk of this.streamFile(file, options)) {
|
|
32
|
+
yield chunk;
|
|
33
|
+
}
|
|
34
|
+
}
|
|
35
|
+
}
|
|
36
|
+
async collectStream(stream) {
|
|
37
|
+
const files = new Map();
|
|
38
|
+
for await (const chunk of stream) {
|
|
39
|
+
if (!files.has(chunk.url)) {
|
|
40
|
+
files.set(chunk.url, []);
|
|
41
|
+
}
|
|
42
|
+
files.get(chunk.url).push(chunk.content);
|
|
43
|
+
}
|
|
44
|
+
const result = new Map();
|
|
45
|
+
for (const [url, chunks] of files.entries()) {
|
|
46
|
+
result.set(url, chunks.join(''));
|
|
47
|
+
}
|
|
48
|
+
return result;
|
|
49
|
+
}
|
|
50
|
+
async *streamByPriority(files, priorities, options = {}) {
|
|
51
|
+
const scored = files.map(file => ({
|
|
52
|
+
file,
|
|
53
|
+
score: this.calculatePriority(file, priorities),
|
|
54
|
+
}));
|
|
55
|
+
scored.sort((a, b) => b.score - a.score);
|
|
56
|
+
for (const { file } of scored) {
|
|
57
|
+
for await (const chunk of this.streamFile(file, options)) {
|
|
58
|
+
yield chunk;
|
|
59
|
+
}
|
|
60
|
+
}
|
|
61
|
+
}
|
|
62
|
+
calculatePriority(file, priorities) {
|
|
63
|
+
let score = 0;
|
|
64
|
+
for (let i = 0; i < priorities.length; i++) {
|
|
65
|
+
const pattern = priorities[i];
|
|
66
|
+
if (pattern && new RegExp(pattern, 'i').test(file.url)) {
|
|
67
|
+
score += (priorities.length - i) * 10;
|
|
68
|
+
}
|
|
69
|
+
}
|
|
70
|
+
if (/encrypt|crypto|cipher/i.test(file.content))
|
|
71
|
+
score += 50;
|
|
72
|
+
if (/fetch|xhr|ajax/i.test(file.content))
|
|
73
|
+
score += 30;
|
|
74
|
+
return score;
|
|
75
|
+
}
|
|
76
|
+
async *streamCompressed(files, options = {}) {
|
|
77
|
+
for await (const chunk of this.streamFiles(files, options)) {
|
|
78
|
+
if (chunk.content.length > 10 * 1024) {
|
|
79
|
+
yield {
|
|
80
|
+
chunk,
|
|
81
|
+
compressed: false,
|
|
82
|
+
};
|
|
83
|
+
}
|
|
84
|
+
else {
|
|
85
|
+
yield {
|
|
86
|
+
chunk,
|
|
87
|
+
compressed: false,
|
|
88
|
+
};
|
|
89
|
+
}
|
|
90
|
+
}
|
|
91
|
+
}
|
|
92
|
+
async *streamFiltered(files, filter, options = {}) {
|
|
93
|
+
const filtered = files.filter(filter);
|
|
94
|
+
for await (const chunk of this.streamFiles(filtered, options)) {
|
|
95
|
+
yield chunk;
|
|
96
|
+
}
|
|
97
|
+
}
|
|
98
|
+
async *streamSummaries(files) {
|
|
99
|
+
for (const file of files) {
|
|
100
|
+
const preview = file.content.substring(0, 500);
|
|
101
|
+
yield {
|
|
102
|
+
url: file.url,
|
|
103
|
+
size: file.size,
|
|
104
|
+
type: file.type,
|
|
105
|
+
preview,
|
|
106
|
+
hasEncryption: /encrypt|crypto|cipher/i.test(file.content),
|
|
107
|
+
hasAPI: /fetch|xhr|ajax|request/i.test(file.content),
|
|
108
|
+
};
|
|
109
|
+
}
|
|
110
|
+
}
|
|
111
|
+
async getStreamStats(stream) {
|
|
112
|
+
let totalChunks = 0;
|
|
113
|
+
let totalSize = 0;
|
|
114
|
+
const urls = new Set();
|
|
115
|
+
for await (const chunk of stream) {
|
|
116
|
+
totalChunks++;
|
|
117
|
+
totalSize += chunk.content.length;
|
|
118
|
+
urls.add(chunk.url);
|
|
119
|
+
}
|
|
120
|
+
return {
|
|
121
|
+
totalChunks,
|
|
122
|
+
totalSize,
|
|
123
|
+
files: urls.size,
|
|
124
|
+
};
|
|
125
|
+
}
|
|
126
|
+
}
|
|
127
|
+
//# sourceMappingURL=StreamingCollector.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"StreamingCollector.js","sourceRoot":"","sources":["../../../src/modules/collector/StreamingCollector.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAqB/C,MAAM,OAAO,kBAAkB;IACZ,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC;IAChC,kBAAkB,GAAG,EAAE,CAAC;IAKzC,KAAK,CAAC,CAAC,UAAU,CACf,IAAc,EACd,UAAyB,EAAE;QAE3B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,kBAAkB,CAAC;QAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,kBAAkB,CAAC;QAE/D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;QACjC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAC1B,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,EAChC,SAAS,CACV,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,GAAG,KAAK,WAAW,UAAU,CAAC,CAAC;QAEpE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC;YAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;YAE5D,MAAM;gBACJ,UAAU,EAAE,CAAC;gBACb,WAAW;gBACX,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,CAAC,KAAK,WAAW,GAAG,CAAC;gBAC7B,QAAQ,EAAE;oBACR,QAAQ,EAAE,SAAS;oBACnB,SAAS,EAAE,KAAK,CAAC,MAAM;oBACvB,MAAM;iBACP;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAKD,KAAK,CAAC,CAAC,WAAW,CAChB,KAAiB,EACjB,UAAyB,EAAE;QAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;gBACzD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAKD,KAAK,CAAC,aAAa,CACjB,MAAmC;QAEnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;QAE1C,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC3B,CAAC;YAED,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QAGD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAKD,KAAK,CAAC,CAAC,gBAAgB,CACrB,KAAiB,EACjB,UAAoB,EACpB,UAAyB,EAAE;QAG3B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChC,IAAI;YACJ,KAAK,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC;SAChD,CAAC,CAAC,CAAC;QAGJ,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAGzC,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;YAC9B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;gBACzD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAKO,iBAAiB,CAAC,IAAc,EAAE,UAAoB;QAC5D,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,OAAO,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvD,KAAK,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACxC,CAAC;QACH,CAAC;QAGD,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,KAAK,IAAI,EAAE,CAAC;QAC7D,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,KAAK,IAAI,EAAE,CAAC;QAEtD,OAAO,KAAK,CAAC;IACf,CAAC;IAKD,KAAK,CAAC,CAAC,gBAAgB,CACrB,KAAiB,EACjB,UAAyB,EAAE;QAM3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YAE3D,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;gBAErC,MAAM;oBACJ,KAAK;oBACL,UAAU,EAAE,KAAK;iBAClB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM;oBACJ,KAAK;oBACL,UAAU,EAAE,KAAK;iBAClB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAKD,KAAK,CAAC,CAAC,cAAc,CACnB,KAAiB,EACjB,MAAmC,EACnC,UAAyB,EAAE;QAE3B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEtC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;YAC9D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAKD,KAAK,CAAC,CAAC,eAAe,CACpB,KAAiB;QASjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAE/C,MAAM;gBACJ,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO;gBACP,aAAa,EAAE,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC1D,MAAM,EAAE,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;aACrD,CAAC;QACJ,CAAC;IACH,CAAC;IAKD,KAAK,CAAC,cAAc,CAClB,MAAmC;QAMnC,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAE/B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,WAAW,EAAE,CAAC;YACd,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAED,OAAO;YACL,WAAW;YACX,SAAS;YACT,KAAK,EAAE,IAAI,CAAC,IAAI;SACjB,CAAC;IACJ,CAAC;CACF"}
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
import type { DetectCryptoOptions, DetectCryptoResult } from '../../types/index.js';
|
|
2
|
+
import { LLMService } from '../../services/LLMService.js';
|
|
3
|
+
import { CryptoRulesManager } from './CryptoRules.js';
|
|
4
|
+
import { SecurityIssue, CryptoStrength } from './CryptoDetectorEnhanced.js';
|
|
5
|
+
export declare class CryptoDetector {
|
|
6
|
+
private llm;
|
|
7
|
+
private rulesManager;
|
|
8
|
+
constructor(llm: LLMService, customRules?: CryptoRulesManager);
|
|
9
|
+
loadCustomRules(json: string): void;
|
|
10
|
+
exportRules(): string;
|
|
11
|
+
detect(options: DetectCryptoOptions): Promise<DetectCryptoResult & {
|
|
12
|
+
securityIssues?: SecurityIssue[];
|
|
13
|
+
strength?: CryptoStrength;
|
|
14
|
+
}>;
|
|
15
|
+
private detectByKeywords;
|
|
16
|
+
private escapeRegex;
|
|
17
|
+
private detectByAI;
|
|
18
|
+
private detectLibraries;
|
|
19
|
+
private mergeResults;
|
|
20
|
+
private findLineNumber;
|
|
21
|
+
}
|
|
22
|
+
//# sourceMappingURL=CryptoDetector.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"CryptoDetector.d.ts","sourceRoot":"","sources":["../../../src/modules/crypto/CryptoDetector.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAkC,MAAM,sBAAsB,CAAC;AACpH,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAE1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EACL,aAAa,EACb,cAAc,EAKf,MAAM,6BAA6B,CAAC;AAErC,qBAAa,cAAc;IACzB,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,YAAY,CAAqB;gBAE7B,GAAG,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,kBAAkB;IAQ7D,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAOnC,WAAW,IAAI,MAAM;IAOf,MAAM,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,GAAG;QACvE,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;QACjC,QAAQ,CAAC,EAAE,cAAc,CAAC;KAC3B,CAAC;IAwEF,OAAO,CAAC,gBAAgB;IAoCxB,OAAO,CAAC,WAAW;YAUL,UAAU;IAuCxB,OAAO,CAAC,eAAe;IAoCvB,OAAO,CAAC,YAAY;IAkBpB,OAAO,CAAC,cAAc;CASvB"}
|
|
@@ -0,0 +1,168 @@
|
|
|
1
|
+
import { logger } from '../../utils/logger.js';
|
|
2
|
+
import { CryptoRulesManager } from './CryptoRules.js';
|
|
3
|
+
import { detectByAST, mergeParameters, evaluateSecurity, analyzeStrength, } from './CryptoDetectorEnhanced.js';
|
|
4
|
+
export class CryptoDetector {
|
|
5
|
+
llm;
|
|
6
|
+
rulesManager;
|
|
7
|
+
constructor(llm, customRules) {
|
|
8
|
+
this.llm = llm;
|
|
9
|
+
this.rulesManager = customRules || new CryptoRulesManager();
|
|
10
|
+
}
|
|
11
|
+
loadCustomRules(json) {
|
|
12
|
+
this.rulesManager.loadFromJSON(json);
|
|
13
|
+
}
|
|
14
|
+
exportRules() {
|
|
15
|
+
return this.rulesManager.exportToJSON();
|
|
16
|
+
}
|
|
17
|
+
async detect(options) {
|
|
18
|
+
logger.info('Starting crypto detection...');
|
|
19
|
+
const startTime = Date.now();
|
|
20
|
+
try {
|
|
21
|
+
const { code } = options;
|
|
22
|
+
const algorithms = [];
|
|
23
|
+
const libraries = [];
|
|
24
|
+
const securityIssues = [];
|
|
25
|
+
const keywordResults = this.detectByKeywords(code);
|
|
26
|
+
algorithms.push(...keywordResults);
|
|
27
|
+
logger.debug(`Found ${keywordResults.length} algorithms by keywords`);
|
|
28
|
+
const libraryResults = this.detectLibraries(code);
|
|
29
|
+
libraries.push(...libraryResults);
|
|
30
|
+
logger.debug(`Found ${libraryResults.length} libraries`);
|
|
31
|
+
const astResults = detectByAST(code, this.rulesManager);
|
|
32
|
+
algorithms.push(...astResults.algorithms);
|
|
33
|
+
if (astResults.parameters) {
|
|
34
|
+
mergeParameters(algorithms, astResults.parameters);
|
|
35
|
+
}
|
|
36
|
+
logger.debug(`Found ${astResults.algorithms.length} algorithms by AST analysis`);
|
|
37
|
+
const useAI = options.useAI !== false;
|
|
38
|
+
if (useAI) {
|
|
39
|
+
const aiResults = await this.detectByAI(code);
|
|
40
|
+
algorithms.push(...aiResults);
|
|
41
|
+
logger.debug(`AI detected ${aiResults.length} algorithms`);
|
|
42
|
+
}
|
|
43
|
+
const mergedAlgorithms = this.mergeResults(algorithms);
|
|
44
|
+
const securityResults = evaluateSecurity(mergedAlgorithms, code, this.rulesManager);
|
|
45
|
+
securityIssues.push(...securityResults);
|
|
46
|
+
logger.debug(`Found ${securityIssues.length} security issues`);
|
|
47
|
+
const strength = analyzeStrength(mergedAlgorithms, securityIssues);
|
|
48
|
+
const confidence = mergedAlgorithms.length > 0
|
|
49
|
+
? mergedAlgorithms.reduce((sum, algo) => sum + algo.confidence, 0) / mergedAlgorithms.length
|
|
50
|
+
: 0;
|
|
51
|
+
const duration = Date.now() - startTime;
|
|
52
|
+
logger.success(`Crypto detection completed in ${duration}ms, found ${mergedAlgorithms.length} algorithms`);
|
|
53
|
+
return {
|
|
54
|
+
algorithms: mergedAlgorithms,
|
|
55
|
+
libraries,
|
|
56
|
+
confidence,
|
|
57
|
+
securityIssues,
|
|
58
|
+
strength,
|
|
59
|
+
};
|
|
60
|
+
}
|
|
61
|
+
catch (error) {
|
|
62
|
+
logger.error('Crypto detection failed', error);
|
|
63
|
+
throw error;
|
|
64
|
+
}
|
|
65
|
+
}
|
|
66
|
+
detectByKeywords(code) {
|
|
67
|
+
const algorithms = [];
|
|
68
|
+
const keywordRules = this.rulesManager.getKeywordRules();
|
|
69
|
+
keywordRules.forEach((rule) => {
|
|
70
|
+
rule.keywords.forEach((keyword) => {
|
|
71
|
+
const regex = new RegExp(`\\b${this.escapeRegex(keyword)}\\b`, 'gi');
|
|
72
|
+
const matches = code.match(regex);
|
|
73
|
+
if (matches) {
|
|
74
|
+
if (rule.category === 'mode' || rule.category === 'padding') {
|
|
75
|
+
return;
|
|
76
|
+
}
|
|
77
|
+
algorithms.push({
|
|
78
|
+
name: keyword,
|
|
79
|
+
type: rule.category,
|
|
80
|
+
confidence: rule.confidence,
|
|
81
|
+
location: {
|
|
82
|
+
file: 'current',
|
|
83
|
+
line: this.findLineNumber(code, keyword),
|
|
84
|
+
},
|
|
85
|
+
usage: `Found ${matches.length} occurrence(s) of ${keyword}${rule.description ? ` (${rule.description})` : ''}`,
|
|
86
|
+
});
|
|
87
|
+
}
|
|
88
|
+
});
|
|
89
|
+
});
|
|
90
|
+
return algorithms;
|
|
91
|
+
}
|
|
92
|
+
escapeRegex(str) {
|
|
93
|
+
return str.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
|
|
94
|
+
}
|
|
95
|
+
async detectByAI(code) {
|
|
96
|
+
try {
|
|
97
|
+
const messages = this.llm.generateCryptoDetectionPrompt(code);
|
|
98
|
+
const response = await this.llm.chat(messages, { temperature: 0.2, maxTokens: 2000 });
|
|
99
|
+
const jsonMatch = response.content.match(/\{[\s\S]*\}/);
|
|
100
|
+
if (!jsonMatch) {
|
|
101
|
+
return [];
|
|
102
|
+
}
|
|
103
|
+
const result = JSON.parse(jsonMatch[0]);
|
|
104
|
+
if (!Array.isArray(result.algorithms)) {
|
|
105
|
+
return [];
|
|
106
|
+
}
|
|
107
|
+
return result.algorithms.map((algo) => {
|
|
108
|
+
const a = algo;
|
|
109
|
+
return {
|
|
110
|
+
name: a.name || 'Unknown',
|
|
111
|
+
type: a.type || 'other',
|
|
112
|
+
confidence: a.confidence || 0.5,
|
|
113
|
+
location: {
|
|
114
|
+
file: 'current',
|
|
115
|
+
line: 0,
|
|
116
|
+
},
|
|
117
|
+
parameters: a.parameters,
|
|
118
|
+
usage: a.usage || '',
|
|
119
|
+
};
|
|
120
|
+
});
|
|
121
|
+
}
|
|
122
|
+
catch (error) {
|
|
123
|
+
logger.warn('AI crypto detection failed', error);
|
|
124
|
+
return [];
|
|
125
|
+
}
|
|
126
|
+
}
|
|
127
|
+
detectLibraries(code) {
|
|
128
|
+
const libraries = [];
|
|
129
|
+
const libraryRules = this.rulesManager.getLibraryRules();
|
|
130
|
+
libraryRules.forEach((rule) => {
|
|
131
|
+
const found = rule.patterns.some((pattern) => code.includes(pattern));
|
|
132
|
+
if (found) {
|
|
133
|
+
let version;
|
|
134
|
+
if (rule.versionPattern) {
|
|
135
|
+
const versionMatch = code.match(rule.versionPattern);
|
|
136
|
+
version = versionMatch?.[1];
|
|
137
|
+
}
|
|
138
|
+
libraries.push({
|
|
139
|
+
name: rule.name,
|
|
140
|
+
version,
|
|
141
|
+
confidence: rule.confidence,
|
|
142
|
+
});
|
|
143
|
+
}
|
|
144
|
+
});
|
|
145
|
+
return libraries;
|
|
146
|
+
}
|
|
147
|
+
mergeResults(algorithms) {
|
|
148
|
+
const merged = new Map();
|
|
149
|
+
algorithms.forEach((algo) => {
|
|
150
|
+
const key = `${algo.name}-${algo.type}`;
|
|
151
|
+
const existing = merged.get(key);
|
|
152
|
+
if (!existing || algo.confidence > existing.confidence) {
|
|
153
|
+
merged.set(key, algo);
|
|
154
|
+
}
|
|
155
|
+
});
|
|
156
|
+
return Array.from(merged.values()).sort((a, b) => b.confidence - a.confidence);
|
|
157
|
+
}
|
|
158
|
+
findLineNumber(code, keyword) {
|
|
159
|
+
const lines = code.split('\n');
|
|
160
|
+
for (let i = 0; i < lines.length; i++) {
|
|
161
|
+
if (lines[i]?.includes(keyword)) {
|
|
162
|
+
return i + 1;
|
|
163
|
+
}
|
|
164
|
+
}
|
|
165
|
+
return 0;
|
|
166
|
+
}
|
|
167
|
+
}
|
|
168
|
+
//# sourceMappingURL=CryptoDetector.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"CryptoDetector.js","sourceRoot":"","sources":["../../../src/modules/crypto/CryptoDetector.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAGL,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,eAAe,GAChB,MAAM,6BAA6B,CAAC;AAErC,MAAM,OAAO,cAAc;IACjB,GAAG,CAAa;IAChB,YAAY,CAAqB;IAEzC,YAAY,GAAe,EAAE,WAAgC;QAC3D,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,YAAY,GAAG,WAAW,IAAI,IAAI,kBAAkB,EAAE,CAAC;IAC9D,CAAC;IAKD,eAAe,CAAC,IAAY;QAC1B,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAKD,WAAW;QACT,OAAO,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;IAC1C,CAAC;IAKD,KAAK,CAAC,MAAM,CAAC,OAA4B;QAIvC,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YACzB,MAAM,UAAU,GAAsB,EAAE,CAAC;YACzC,MAAM,SAAS,GAAoB,EAAE,CAAC;YACtC,MAAM,cAAc,GAAoB,EAAE,CAAC;YAG3C,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACnD,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,SAAS,cAAc,CAAC,MAAM,yBAAyB,CAAC,CAAC;YAGtE,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAClD,SAAS,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;YAClC,MAAM,CAAC,KAAK,CAAC,SAAS,cAAc,CAAC,MAAM,YAAY,CAAC,CAAC;YAGzD,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACxD,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;gBAC1B,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,SAAS,UAAU,CAAC,UAAU,CAAC,MAAM,6BAA6B,CAAC,CAAC;YAGjF,MAAM,KAAK,GAAI,OAAe,CAAC,KAAK,KAAK,KAAK,CAAC;YAC/C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC9C,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;gBAC9B,MAAM,CAAC,KAAK,CAAC,eAAe,SAAS,CAAC,MAAM,aAAa,CAAC,CAAC;YAC7D,CAAC;YAGD,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YAGvD,MAAM,eAAe,GAAG,gBAAgB,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACpF,cAAc,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,SAAS,cAAc,CAAC,MAAM,kBAAkB,CAAC,CAAC;YAG/D,MAAM,QAAQ,GAAG,eAAe,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;YAGnE,MAAM,UAAU,GACd,gBAAgB,CAAC,MAAM,GAAG,CAAC;gBACzB,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,gBAAgB,CAAC,MAAM;gBAC5F,CAAC,CAAC,CAAC,CAAC;YAER,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,MAAM,CAAC,OAAO,CAAC,iCAAiC,QAAQ,aAAa,gBAAgB,CAAC,MAAM,aAAa,CAAC,CAAC;YAE3G,OAAO;gBACL,UAAU,EAAE,gBAAgB;gBAC5B,SAAS;gBACT,UAAU;gBACV,cAAc;gBACd,QAAQ;aACT,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAC/C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAKO,gBAAgB,CAAC,IAAY;QACnC,MAAM,UAAU,GAAsB,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,CAAC;QAEzD,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC5B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAEhC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBACrE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAElC,IAAI,OAAO,EAAE,CAAC;oBAEZ,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;wBAC5D,OAAO;oBACT,CAAC;oBAED,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,OAAO;wBACb,IAAI,EAAE,IAAI,CAAC,QAAmC;wBAC9C,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,QAAQ,EAAE;4BACR,IAAI,EAAE,SAAS;4BACf,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC;yBACzC;wBACD,KAAK,EAAE,SAAS,OAAO,CAAC,MAAM,qBAAqB,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;qBAChH,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC;IACpB,CAAC;IAKO,WAAW,CAAC,GAAW;QAC7B,OAAO,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAQO,KAAK,CAAC,UAAU,CAAC,IAAY;QACnC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAGtF,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACxD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAA+B,CAAC;YACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,OAAO,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAa,EAAE,EAAE;gBAC7C,MAAM,CAAC,GAAG,IAA+B,CAAC;gBAC1C,OAAO;oBACL,IAAI,EAAG,CAAC,CAAC,IAAe,IAAI,SAAS;oBACrC,IAAI,EAAG,CAAC,CAAC,IAAgC,IAAI,OAAO;oBACpD,UAAU,EAAG,CAAC,CAAC,UAAqB,IAAI,GAAG;oBAC3C,QAAQ,EAAE;wBACR,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE,CAAC;qBACR;oBACD,UAAU,EAAE,CAAC,CAAC,UAA2C;oBACzD,KAAK,EAAG,CAAC,CAAC,KAAgB,IAAI,EAAE;iBACjC,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;YACjD,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAKO,eAAe,CAAC,IAAY;QAClC,MAAM,SAAS,GAAoB,EAAE,CAAC;QACtC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,CAAC;QAEzD,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAEtE,IAAI,KAAK,EAAE,CAAC;gBAEV,IAAI,OAA2B,CAAC;gBAChC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;oBACxB,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;oBACrD,OAAO,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC9B,CAAC;gBAED,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO;oBACP,UAAU,EAAE,IAAI,CAAC,UAAU;iBAE5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IACnB,CAAC;IAWO,YAAY,CAAC,UAA6B;QAChD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;QAElD,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC1B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAEjC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;gBACvD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IACjF,CAAC;IAKO,cAAc,CAAC,IAAY,EAAE,OAAe;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;CACF"}
|
|
@@ -0,0 +1,31 @@
|
|
|
1
|
+
import type { CryptoAlgorithm } from '../../types/index.js';
|
|
2
|
+
import { CryptoRulesManager } from './CryptoRules.js';
|
|
3
|
+
export interface SecurityIssue {
|
|
4
|
+
severity: 'critical' | 'high' | 'medium' | 'low';
|
|
5
|
+
algorithm?: string;
|
|
6
|
+
issue: string;
|
|
7
|
+
recommendation: string;
|
|
8
|
+
location?: {
|
|
9
|
+
file: string;
|
|
10
|
+
line: number;
|
|
11
|
+
};
|
|
12
|
+
}
|
|
13
|
+
export interface CryptoStrength {
|
|
14
|
+
overall: 'strong' | 'moderate' | 'weak' | 'broken';
|
|
15
|
+
score: number;
|
|
16
|
+
factors: {
|
|
17
|
+
algorithm: number;
|
|
18
|
+
keySize: number;
|
|
19
|
+
mode: number;
|
|
20
|
+
implementation: number;
|
|
21
|
+
};
|
|
22
|
+
}
|
|
23
|
+
export interface ASTDetectionResult {
|
|
24
|
+
algorithms: CryptoAlgorithm[];
|
|
25
|
+
parameters: Map<string, Record<string, unknown>>;
|
|
26
|
+
}
|
|
27
|
+
export declare function detectByAST(code: string, rulesManager: CryptoRulesManager): ASTDetectionResult;
|
|
28
|
+
export declare function mergeParameters(algorithms: CryptoAlgorithm[], parameters: Map<string, Record<string, unknown>>): void;
|
|
29
|
+
export declare function evaluateSecurity(algorithms: CryptoAlgorithm[], _code: string, rulesManager: CryptoRulesManager): SecurityIssue[];
|
|
30
|
+
export declare function analyzeStrength(_algorithms: CryptoAlgorithm[], securityIssues: SecurityIssue[]): CryptoStrength;
|
|
31
|
+
//# sourceMappingURL=CryptoDetectorEnhanced.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"CryptoDetectorEnhanced.d.ts","sourceRoot":"","sources":["../../../src/modules/crypto/CryptoDetectorEnhanced.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAClD;AAKD,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,kBAAkB,GAC/B,kBAAkB,CAqIpB;AA8FD,wBAAgB,eAAe,CAC7B,UAAU,EAAE,eAAe,EAAE,EAC7B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC/C,IAAI,CAON;AAKD,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,eAAe,EAAE,EAC7B,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,kBAAkB,GAC/B,aAAa,EAAE,CA0BjB;AAKD,wBAAgB,eAAe,CAC7B,WAAW,EAAE,eAAe,EAAE,EAC9B,cAAc,EAAE,aAAa,EAAE,GAC9B,cAAc,CAyDhB"}
|
|
@@ -0,0 +1,269 @@
|
|
|
1
|
+
import * as parser from '@babel/parser';
|
|
2
|
+
import traverse from '@babel/traverse';
|
|
3
|
+
import * as t from '@babel/types';
|
|
4
|
+
import { logger } from '../../utils/logger.js';
|
|
5
|
+
export function detectByAST(code, rulesManager) {
|
|
6
|
+
const algorithms = [];
|
|
7
|
+
const parameters = new Map();
|
|
8
|
+
try {
|
|
9
|
+
const ast = parser.parse(code, {
|
|
10
|
+
sourceType: 'module',
|
|
11
|
+
plugins: ['jsx', 'typescript'],
|
|
12
|
+
errorRecovery: true,
|
|
13
|
+
});
|
|
14
|
+
const constantRules = rulesManager.getConstantRules();
|
|
15
|
+
traverse(ast, {
|
|
16
|
+
VariableDeclarator(path) {
|
|
17
|
+
const node = path.node;
|
|
18
|
+
if (node.init?.type === 'ArrayExpression' &&
|
|
19
|
+
node.init.elements.length === 256 &&
|
|
20
|
+
node.id.type === 'Identifier' &&
|
|
21
|
+
(node.id.name.toLowerCase().includes('sbox') ||
|
|
22
|
+
node.id.name.toLowerCase().includes('box') ||
|
|
23
|
+
node.id.name.toLowerCase().includes('table'))) {
|
|
24
|
+
algorithms.push({
|
|
25
|
+
name: 'Custom Symmetric Cipher',
|
|
26
|
+
type: 'symmetric',
|
|
27
|
+
confidence: 0.8,
|
|
28
|
+
location: {
|
|
29
|
+
file: 'current',
|
|
30
|
+
line: node.loc?.start.line || 0,
|
|
31
|
+
},
|
|
32
|
+
usage: `S-box array detected (${node.id.name}), likely custom or standard symmetric encryption`,
|
|
33
|
+
});
|
|
34
|
+
}
|
|
35
|
+
},
|
|
36
|
+
CallExpression(path) {
|
|
37
|
+
const node = path.node;
|
|
38
|
+
if (node.callee.type === 'MemberExpression' &&
|
|
39
|
+
node.callee.property.type === 'Identifier') {
|
|
40
|
+
const methodName = node.callee.property.name;
|
|
41
|
+
if (['modPow', 'modInverse', 'gcd', 'isProbablePrime'].includes(methodName)) {
|
|
42
|
+
algorithms.push({
|
|
43
|
+
name: 'Asymmetric Encryption',
|
|
44
|
+
type: 'asymmetric',
|
|
45
|
+
confidence: 0.75,
|
|
46
|
+
location: {
|
|
47
|
+
file: 'current',
|
|
48
|
+
line: node.loc?.start.line || 0,
|
|
49
|
+
},
|
|
50
|
+
usage: `Big number operation detected: ${methodName}`,
|
|
51
|
+
});
|
|
52
|
+
}
|
|
53
|
+
extractCryptoParameters(node, parameters);
|
|
54
|
+
}
|
|
55
|
+
},
|
|
56
|
+
FunctionDeclaration(path) {
|
|
57
|
+
const node = path.node;
|
|
58
|
+
const funcName = node.id?.name.toLowerCase() || '';
|
|
59
|
+
if (funcName.includes('hash') || funcName.includes('digest') || funcName.includes('checksum')) {
|
|
60
|
+
const bodyCode = code.substring(node.start || 0, node.end || 0);
|
|
61
|
+
const hasLoop = bodyCode.includes('for') || bodyCode.includes('while');
|
|
62
|
+
const hasBitOps = />>>|<<|&|\||\^/.test(bodyCode);
|
|
63
|
+
if (hasLoop && hasBitOps) {
|
|
64
|
+
algorithms.push({
|
|
65
|
+
name: 'Custom Hash Function',
|
|
66
|
+
type: 'hash',
|
|
67
|
+
confidence: 0.7,
|
|
68
|
+
location: {
|
|
69
|
+
file: 'current',
|
|
70
|
+
line: node.loc?.start.line || 0,
|
|
71
|
+
},
|
|
72
|
+
usage: `Hash function detected: ${funcName}`,
|
|
73
|
+
});
|
|
74
|
+
}
|
|
75
|
+
}
|
|
76
|
+
},
|
|
77
|
+
ArrayExpression(path) {
|
|
78
|
+
const elements = path.node.elements;
|
|
79
|
+
if (elements.length < 4)
|
|
80
|
+
return;
|
|
81
|
+
const values = [];
|
|
82
|
+
elements.forEach((element) => {
|
|
83
|
+
if (t.isNumericLiteral(element)) {
|
|
84
|
+
values.push(element.value);
|
|
85
|
+
}
|
|
86
|
+
});
|
|
87
|
+
constantRules.forEach((rule) => {
|
|
88
|
+
const matches = rule.values.every((c, i) => values[i] === c);
|
|
89
|
+
if (matches) {
|
|
90
|
+
const algoType = rule.type === 'other' ? 'encoding' : rule.type;
|
|
91
|
+
algorithms.push({
|
|
92
|
+
name: rule.name,
|
|
93
|
+
type: algoType,
|
|
94
|
+
confidence: rule.confidence,
|
|
95
|
+
location: {
|
|
96
|
+
file: 'current',
|
|
97
|
+
line: path.node.loc?.start.line || 0,
|
|
98
|
+
},
|
|
99
|
+
usage: `${rule.name} initialization constants detected${rule.description ? ` (${rule.description})` : ''}`,
|
|
100
|
+
});
|
|
101
|
+
}
|
|
102
|
+
});
|
|
103
|
+
},
|
|
104
|
+
});
|
|
105
|
+
}
|
|
106
|
+
catch (error) {
|
|
107
|
+
logger.warn('AST detection failed', error);
|
|
108
|
+
}
|
|
109
|
+
return { algorithms, parameters };
|
|
110
|
+
}
|
|
111
|
+
function extractCryptoParameters(node, parameters) {
|
|
112
|
+
if (!t.isMemberExpression(node.callee))
|
|
113
|
+
return;
|
|
114
|
+
const calleeName = getCalleeFullName(node.callee);
|
|
115
|
+
if (calleeName.includes('CryptoJS')) {
|
|
116
|
+
const algoMatch = calleeName.match(/CryptoJS\.(AES|DES|TripleDES|RC4|Rabbit|RabbitLegacy)/);
|
|
117
|
+
if (algoMatch) {
|
|
118
|
+
const algoName = algoMatch[1];
|
|
119
|
+
const params = {};
|
|
120
|
+
if (node.arguments.length >= 3 && t.isObjectExpression(node.arguments[2])) {
|
|
121
|
+
const config = node.arguments[2];
|
|
122
|
+
config.properties.forEach((prop) => {
|
|
123
|
+
if (t.isObjectProperty(prop) && t.isIdentifier(prop.key)) {
|
|
124
|
+
const key = prop.key.name;
|
|
125
|
+
if (t.isIdentifier(prop.value)) {
|
|
126
|
+
params[key] = prop.value.name;
|
|
127
|
+
}
|
|
128
|
+
else if (t.isStringLiteral(prop.value)) {
|
|
129
|
+
params[key] = prop.value.value;
|
|
130
|
+
}
|
|
131
|
+
else if (t.isNumericLiteral(prop.value)) {
|
|
132
|
+
params[key] = prop.value.value;
|
|
133
|
+
}
|
|
134
|
+
}
|
|
135
|
+
});
|
|
136
|
+
}
|
|
137
|
+
if (algoName) {
|
|
138
|
+
parameters.set(algoName, params);
|
|
139
|
+
}
|
|
140
|
+
}
|
|
141
|
+
}
|
|
142
|
+
if (calleeName.includes('crypto.subtle')) {
|
|
143
|
+
const methodMatch = calleeName.match(/\.(encrypt|decrypt|sign|verify|digest|generateKey)/);
|
|
144
|
+
if (methodMatch && node.arguments.length > 0) {
|
|
145
|
+
const firstArg = node.arguments[0];
|
|
146
|
+
if (t.isObjectExpression(firstArg)) {
|
|
147
|
+
const params = {};
|
|
148
|
+
firstArg.properties.forEach((prop) => {
|
|
149
|
+
if (t.isObjectProperty(prop) && t.isIdentifier(prop.key)) {
|
|
150
|
+
const key = prop.key.name;
|
|
151
|
+
if (t.isStringLiteral(prop.value)) {
|
|
152
|
+
params[key] = prop.value.value;
|
|
153
|
+
}
|
|
154
|
+
else if (t.isNumericLiteral(prop.value)) {
|
|
155
|
+
params[key] = prop.value.value;
|
|
156
|
+
}
|
|
157
|
+
}
|
|
158
|
+
});
|
|
159
|
+
const algoName = params.name || 'WebCrypto';
|
|
160
|
+
if (algoName) {
|
|
161
|
+
parameters.set(algoName, params);
|
|
162
|
+
}
|
|
163
|
+
}
|
|
164
|
+
}
|
|
165
|
+
}
|
|
166
|
+
}
|
|
167
|
+
function getCalleeFullName(node) {
|
|
168
|
+
const parts = [];
|
|
169
|
+
const traverseNode = (n) => {
|
|
170
|
+
if (t.isMemberExpression(n)) {
|
|
171
|
+
traverseNode(n.object);
|
|
172
|
+
if (t.isIdentifier(n.property)) {
|
|
173
|
+
parts.push(n.property.name);
|
|
174
|
+
}
|
|
175
|
+
}
|
|
176
|
+
else if (t.isIdentifier(n)) {
|
|
177
|
+
parts.push(n.name);
|
|
178
|
+
}
|
|
179
|
+
};
|
|
180
|
+
traverseNode(node);
|
|
181
|
+
return parts.join('.');
|
|
182
|
+
}
|
|
183
|
+
export function mergeParameters(algorithms, parameters) {
|
|
184
|
+
algorithms.forEach((algo) => {
|
|
185
|
+
const params = parameters.get(algo.name);
|
|
186
|
+
if (params) {
|
|
187
|
+
algo.parameters = { ...algo.parameters, ...params };
|
|
188
|
+
}
|
|
189
|
+
});
|
|
190
|
+
}
|
|
191
|
+
export function evaluateSecurity(algorithms, _code, rulesManager) {
|
|
192
|
+
const issues = [];
|
|
193
|
+
const securityRules = rulesManager.getSecurityRules();
|
|
194
|
+
algorithms.forEach((algo) => {
|
|
195
|
+
const context = {
|
|
196
|
+
algorithm: algo.name,
|
|
197
|
+
mode: algo.parameters?.mode,
|
|
198
|
+
padding: algo.parameters?.padding,
|
|
199
|
+
keySize: algo.parameters?.keySize,
|
|
200
|
+
};
|
|
201
|
+
securityRules.forEach((rule) => {
|
|
202
|
+
if (rule.check(context)) {
|
|
203
|
+
issues.push({
|
|
204
|
+
severity: rule.severity,
|
|
205
|
+
algorithm: algo.name,
|
|
206
|
+
issue: rule.message,
|
|
207
|
+
recommendation: rule.recommendation || '',
|
|
208
|
+
location: algo.location,
|
|
209
|
+
});
|
|
210
|
+
}
|
|
211
|
+
});
|
|
212
|
+
});
|
|
213
|
+
return issues;
|
|
214
|
+
}
|
|
215
|
+
export function analyzeStrength(_algorithms, securityIssues) {
|
|
216
|
+
let algorithmScore = 100;
|
|
217
|
+
let keySizeScore = 100;
|
|
218
|
+
let modeScore = 100;
|
|
219
|
+
let implementationScore = 100;
|
|
220
|
+
securityIssues.forEach((issue) => {
|
|
221
|
+
const penalty = {
|
|
222
|
+
critical: 40,
|
|
223
|
+
high: 25,
|
|
224
|
+
medium: 15,
|
|
225
|
+
low: 5,
|
|
226
|
+
}[issue.severity];
|
|
227
|
+
if (issue.issue.includes('algorithm') || issue.issue.includes('broken')) {
|
|
228
|
+
algorithmScore -= penalty;
|
|
229
|
+
}
|
|
230
|
+
else if (issue.issue.includes('key')) {
|
|
231
|
+
keySizeScore -= penalty;
|
|
232
|
+
}
|
|
233
|
+
else if (issue.issue.includes('mode')) {
|
|
234
|
+
modeScore -= penalty;
|
|
235
|
+
}
|
|
236
|
+
else {
|
|
237
|
+
implementationScore -= penalty;
|
|
238
|
+
}
|
|
239
|
+
});
|
|
240
|
+
algorithmScore = Math.max(0, algorithmScore);
|
|
241
|
+
keySizeScore = Math.max(0, keySizeScore);
|
|
242
|
+
modeScore = Math.max(0, modeScore);
|
|
243
|
+
implementationScore = Math.max(0, implementationScore);
|
|
244
|
+
const totalScore = (algorithmScore + keySizeScore + modeScore + implementationScore) / 4;
|
|
245
|
+
let overall;
|
|
246
|
+
if (totalScore >= 80) {
|
|
247
|
+
overall = 'strong';
|
|
248
|
+
}
|
|
249
|
+
else if (totalScore >= 60) {
|
|
250
|
+
overall = 'moderate';
|
|
251
|
+
}
|
|
252
|
+
else if (totalScore >= 40) {
|
|
253
|
+
overall = 'weak';
|
|
254
|
+
}
|
|
255
|
+
else {
|
|
256
|
+
overall = 'broken';
|
|
257
|
+
}
|
|
258
|
+
return {
|
|
259
|
+
overall,
|
|
260
|
+
score: Math.round(totalScore),
|
|
261
|
+
factors: {
|
|
262
|
+
algorithm: Math.round(algorithmScore),
|
|
263
|
+
keySize: Math.round(keySizeScore),
|
|
264
|
+
mode: Math.round(modeScore),
|
|
265
|
+
implementation: Math.round(implementationScore),
|
|
266
|
+
},
|
|
267
|
+
};
|
|
268
|
+
}
|
|
269
|
+
//# sourceMappingURL=CryptoDetectorEnhanced.js.map
|