@anonympins/fingerprint 0.3.1 → 0.3.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (51) hide show
  1. package/CHANGELOG.md +172 -0
  2. package/README.md +298 -37
  3. package/composer.json +38 -0
  4. package/index.js +5 -0
  5. package/package.json +100 -94
  6. package/phpunit.xml +20 -0
  7. package/public/fp.js +2 -0
  8. package/public/fp.wasm +0 -0
  9. package/src/js/build-client.js +69 -0
  10. package/{fingerprint.builder.js → src/js/fingerprint.builder.js} +168 -171
  11. package/{fingerprint.client.js → src/js/fingerprint.client.js} +634 -483
  12. package/src/js/fingerprint.client.obfuscated.js +1 -0
  13. package/{fingerprint.js → src/js/fingerprint.js} +338 -120
  14. package/{library.js → src/js/library.js} +1729 -1727
  15. package/{problem-manager.js → src/js/problem-manager.js} +539 -522
  16. package/src/php/AutoTuner.php +155 -0
  17. package/src/php/Challenge/ChallengeUtils.php +306 -0
  18. package/src/php/Config/SecurityProfiles.php +257 -0
  19. package/src/php/DirectFingerprint.php +81 -0
  20. package/src/php/FingerprintBuilder.php +185 -0
  21. package/src/php/FingerprintClient.php +118 -0
  22. package/src/php/FingerprintEngine.php +850 -0
  23. package/src/php/Optimization/FunctionRegistry.php +63 -0
  24. package/src/php/Optimization/Optimization.php +256 -0
  25. package/src/php/Optimization/OptimizationOperators.php +305 -0
  26. package/src/php/Optimization/ProblemInitializers.php +53 -0
  27. package/src/php/ProblemManager.php +255 -0
  28. package/src/php/RequestContext.php +87 -0
  29. package/src/php/Store/IStore.php +42 -0
  30. package/src/php/Store/InMemoryStore.php +67 -0
  31. package/src/php/Store/StoreManager.php +26 -0
  32. package/src/php/Tests/ChallengeUtilsTest.php +82 -0
  33. package/src/php/Tests/FingerprintBuilderTest.php +58 -0
  34. package/src/php/Tests/FingerprintEngineTest.php +219 -0
  35. package/src/php/Tests/PowTest.php +40 -0
  36. package/src/php/Tests/ProblemManagerTest.php +295 -0
  37. package/src/php/Tests/RequestUtilsTest.php +81 -0
  38. package/src/php/Tests/problems.config.json +9 -0
  39. package/src/php/Utils/BigInt.php +102 -0
  40. package/src/php/Utils/BlockList.php +100 -0
  41. package/src/php/Utils/Logger.php +30 -0
  42. package/src/php/Utils/MaliciousPatterns.php +59 -0
  43. package/src/php/Utils/RequestUtils.php +673 -0
  44. package/fingerprint.client.obfuscated.js +0 -1
  45. /package/{mongodb-store.js → src/js/mongodb-store.js} +0 -0
  46. /package/{optimization.worker.js → src/js/optimization.worker.js} +0 -0
  47. /package/{pow.solver.inline.js → src/js/pow.solver.inline.js} +0 -0
  48. /package/{pow.solver.js → src/js/pow.solver.js} +0 -0
  49. /package/{pow.worker.js → src/js/pow.worker.js} +0 -0
  50. /package/{redis-store.js → src/js/redis-store.js} +0 -0
  51. /package/{sql-store.js → src/js/sql-store.js} +0 -0
package/composer.json ADDED
@@ -0,0 +1,38 @@
1
+ {
2
+ "name": "anonympins/fingerprint",
3
+ "description": "Advanced anti-bot library for Node.js and PHP using multi-layer fingerprinting, behavioral analysis, and adaptive Proof-of-Work (PoW) challenges.",
4
+ "type": "library",
5
+ "license": "MIT",
6
+ "authors": [
7
+ {
8
+ "name": "anonympins",
9
+ "homepage": "https://github.com/anonympins"
10
+ }
11
+ ],
12
+ "require": {
13
+ "php": ">=8.0",
14
+ "ext-gmp": "*",
15
+ "ext-json": "*"
16
+ },
17
+ "require-dev": {
18
+ "phpunit/phpunit": "^9.5"
19
+ },
20
+ "autoload": {
21
+ "psr-4": {
22
+ "Anonympins\\Fingerprint\\": "src/php/"
23
+ }
24
+ },
25
+ "autoload-dev": {
26
+ "psr-4": {
27
+ "Anonympins\\Fingerprint\\Tests\\": "src/php/Tests/"
28
+ }
29
+ },
30
+ "suggest": {
31
+ "ext-redis": "Required to use the Redis store adapter.",
32
+ "ext-pdo": "Required to use SQL store adapters (e.g., for PostgreSQL, MySQL)."
33
+ },
34
+ "config": {
35
+ "sort-packages": true
36
+ },
37
+ "minimum-stability": "stable"
38
+ }
package/index.js ADDED
@@ -0,0 +1,5 @@
1
+ /**
2
+ * Point d'entrée principal pour le package Node.js.
3
+ * Ré-exporte toutes les fonctionnalités de la bibliothèque principale.
4
+ */
5
+ export * from './src/js/fingerprint.js';
package/package.json CHANGED
@@ -1,94 +1,100 @@
1
- {
2
- "name": "@anonympins/fingerprint",
3
- "version": "0.3.1",
4
- "description": "Advanced anti-bot library for Node.js using multi-layer fingerprinting (JA3, client-side, headers), behavioral analysis, and adaptive Proof-of-Work (PoW) challenges to mitigate scraping, scalping, and automated threats.",
5
- "main": "fingerprint.js",
6
- "type": "module",
7
- "engines": {
8
- "node": ">=20.0.0"
9
- },
10
- "scripts": {
11
- "test": "vitest run --reporter=verbose",
12
- "build": "npm run build:client",
13
- "build:client": "node build-client.js"
14
- },
15
- "files": [
16
- "fingerprint.js",
17
- "fingerprint.client.js",
18
- "fingerprint.client.obfuscated.js",
19
- "fingerprint.builder.js",
20
- "pow.solver.js",
21
- "pow.worker.js",
22
- "pow.solver.inline.js",
23
- "problem-manager.js",
24
- "optimization.worker.js",
25
- "library.js",
26
- "redis-store.js",
27
- "mongodb-store.js",
28
- "sql-store.js",
29
- "README.md",
30
- "LICENSE"
31
- ],
32
- "repository": {
33
- "type": "git",
34
- "url": "git+https://github.com/anonympins/fingerprint.git"
35
- },
36
- "keywords": [
37
- "anti-bot",
38
- "bot-detection",
39
- "security",
40
- "middleware",
41
- "express",
42
- "nodejs",
43
- "fingerprint",
44
- "device-fingerprinting",
45
- "ja3",
46
- "tls-fingerprinting",
47
- "proof-of-work",
48
- "pow",
49
- "useful-proof-of-work",
50
- "upow",
51
- "waf",
52
- "scraping",
53
- "scalping",
54
- "mitigation",
55
- "rate-limiting",
56
- "honeypot",
57
- "behavioral-analysis"
58
- ],
59
- "author": "anonympins",
60
- "license": "MIT",
61
- "bugs": {
62
- "url": "https://github.com/anonympins/fingerprint/issues"
63
- },
64
- "homepage": "https://github.com/anonympins/fingerprint#readme",
65
- "devDependencies": {
66
- "body-parser": "^1.20.2",
67
- "cookie-parser": "^1.4.6",
68
- "express": "^4.18.2",
69
- "prom-client": "^15.1.2",
70
- "vitest": "^4.1.11",
71
- "javascript-obfuscator": "^4.1.0",
72
- "terser": "^5.30.3"
73
- },
74
- "peerDependencies": {
75
- "ioredis": "^5.3.2",
76
- "knex": ">=3.0.0",
77
- "mongodb": "^6.3.0",
78
- "sqlite3": "^5.1.7"
79
- },
80
- "peerDependenciesMeta": {
81
- "ioredis": {
82
- "optional": true
83
- },
84
- "mongodb": {
85
- "optional": true
86
- },
87
- "knex": {
88
- "optional": true
89
- },
90
- "sqlite3": {
91
- "optional": true
92
- }
93
- }
94
- }
1
+ {
2
+ "name": "@anonympins/fingerprint",
3
+ "version": "0.3.3",
4
+ "description": "Advanced anti-bot library for Node.js using multi-layer fingerprinting (JA3, client-side, headers), behavioral analysis, and adaptive Proof-of-Work (PoW) challenges to mitigate scraping, scalping, and automated threats.",
5
+ "main": "index.js",
6
+ "type": "module",
7
+ "engines": {
8
+ "node": ">=20.0.0"
9
+ },
10
+ "scripts": {
11
+ "test": "vitest run --reporter=verbose",
12
+ "build": "node src/js/build-client.js"
13
+ },
14
+ "exports": {
15
+ ".": "./index.js",
16
+ "./client": {
17
+ "import": "./src/js/fingerprint.client.obfuscated.js",
18
+ "require": "./src/js/fingerprint.client.obfuscated.js",
19
+ "browser": "./src/js/fingerprint.client.obfuscated.js"
20
+ },
21
+ "./client/src/*": "./src/js/*",
22
+ "./fp.wasm": "./public/fp.wasm",
23
+ "./fp.js": "./public/fp.js",
24
+ "./package.json": "./package.json"
25
+ },
26
+ "files": [
27
+ "index.js",
28
+ "src/js/",
29
+ "public/",
30
+ "README.md",
31
+ "LICENSE",
32
+ "CHANGELOG.md",
33
+ "src/php/",
34
+ "composer.json",
35
+ "phpunit.xml"
36
+ ],
37
+ "repository": {
38
+ "type": "git",
39
+ "url": "git+https://github.com/anonympins/fingerprint.git"
40
+ },
41
+ "keywords": [
42
+ "anti-bot",
43
+ "bot-detection",
44
+ "security",
45
+ "middleware",
46
+ "express",
47
+ "nodejs",
48
+ "fingerprint",
49
+ "device-fingerprinting",
50
+ "ja3",
51
+ "tls-fingerprinting",
52
+ "proof-of-work",
53
+ "pow",
54
+ "useful-proof-of-work",
55
+ "upow",
56
+ "waf",
57
+ "scraping",
58
+ "scalping",
59
+ "mitigation",
60
+ "rate-limiting",
61
+ "honeypot",
62
+ "behavioral-analysis"
63
+ ],
64
+ "author": "anonympins",
65
+ "license": "MIT",
66
+ "bugs": {
67
+ "url": "https://github.com/anonympins/fingerprint/issues"
68
+ },
69
+ "homepage": "https://github.com/anonympins/fingerprint#readme",
70
+ "devDependencies": {
71
+ "body-parser": "^1.20.2",
72
+ "cookie-parser": "^1.4.6",
73
+ "express": "^4.18.2",
74
+ "prom-client": "^15.1.2",
75
+ "vitest": "^4.1.11",
76
+ "javascript-obfuscator": "^4.1.0",
77
+ "terser": "^5.30.3",
78
+ "jsdom": "^24.0.0"
79
+ },
80
+ "peerDependencies": {
81
+ "ioredis": "^5.3.2",
82
+ "knex": ">=3.0.0",
83
+ "mongodb": "^6.3.0",
84
+ "sqlite3": "^5.1.7"
85
+ },
86
+ "peerDependenciesMeta": {
87
+ "ioredis": {
88
+ "optional": true
89
+ },
90
+ "mongodb": {
91
+ "optional": true
92
+ },
93
+ "knex": {
94
+ "optional": true
95
+ },
96
+ "sqlite3": {
97
+ "optional": true
98
+ }
99
+ }
100
+ }
package/phpunit.xml ADDED
@@ -0,0 +1,20 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <phpunit xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
3
+ xsi:noNamespaceSchemaLocation="https://schema.phpunit.de/9.6/phpunit.xsd"
4
+ bootstrap="vendor/autoload.php"
5
+ colors="true">
6
+ <testsuites>
7
+ <testsuite name="default">
8
+ <directory>src/php/Tests</directory>
9
+ </testsuite>
10
+ </testsuites>
11
+
12
+ <coverage>
13
+ <include>
14
+ <directory suffix=".php">./src/php</directory>
15
+ </include>
16
+ <exclude>
17
+ <directory>./src/php/Tests</directory>
18
+ </exclude>
19
+ </coverage>
20
+ </phpunit>
package/public/fp.js ADDED
@@ -0,0 +1,2 @@
1
+ var createFingerprintModule=(()=>{var _scriptName=globalThis.document?.currentScript?.src;return async function(moduleArg={}){var Module=moduleArg;var ENVIRONMENT_IS_WEB=!!globalThis.window;var ENVIRONMENT_IS_WORKER=!!globalThis.WorkerGlobalScope;var ENVIRONMENT_IS_NODE=globalThis.process?.versions?.node&&globalThis.process?.type!="renderer";var programArgs=[];var thisProgram="./this.program";var quit_=(status,toThrow)=>{throw toThrow};if(typeof __filename!="undefined"){_scriptName=__filename}else if(ENVIRONMENT_IS_WORKER){_scriptName=self.location.href}var scriptDirectory="";function locateFile(path){if(Module["locateFile"]){return Module["locateFile"](path,scriptDirectory)}return scriptDirectory+path}var readAsync,readBinary;if(ENVIRONMENT_IS_NODE){var fs=require("node:fs");scriptDirectory=__dirname+"/";readBinary=filename=>{filename=isFileURI(filename)?new URL(filename):filename;var ret=fs.readFileSync(filename);return ret};readAsync=async(filename,binary=true)=>{filename=isFileURI(filename)?new URL(filename):filename;var ret=fs.readFileSync(filename,binary?undefined:"utf8");return ret};if(process.argv.length>1){thisProgram=process.argv[1].replace(/\\/g,"/")}programArgs=process.argv.slice(2);quit_=(status,toThrow)=>{process.exitCode=status;throw toThrow}}else if(ENVIRONMENT_IS_WEB||ENVIRONMENT_IS_WORKER){try{scriptDirectory=new URL(".",_scriptName).href}catch{}{if(ENVIRONMENT_IS_WORKER){readBinary=url=>{var xhr=new XMLHttpRequest;xhr.open("GET",url,false);xhr.responseType="arraybuffer";xhr.send(null);return new Uint8Array(xhr.response)}}readAsync=async url=>{if(isFileURI(url)){return new Promise((resolve,reject)=>{var xhr=new XMLHttpRequest;xhr.open("GET",url,true);xhr.responseType="arraybuffer";xhr.onload=()=>{if(xhr.status==200||xhr.status==0&&xhr.response){resolve(xhr.response);return}reject(xhr.status)};xhr.onerror=reject;xhr.send(null)})}var response=await fetch(url,{credentials:"same-origin"});if(response.ok){return response.arrayBuffer()}throw new Error(response.status+" : "+response.url)}}}else{}var out=console.log.bind(console);var err=console.error.bind(console);var wasmBinary;var ABORT=false;var isFileURI=filename=>filename.startsWith("file://");class EmscriptenEH{}class EmscriptenSjLj extends EmscriptenEH{}var runtimeInitialized=false;function updateMemoryViews(){var b=wasmMemory.buffer;HEAP8=new Int8Array(b);HEAPU8=new Uint8Array(b);HEAPU32=new Uint32Array(b)}function preRun(){var preRun=Module["preRun"];if(preRun){if(typeof preRun=="function")preRun=[preRun];onPreRuns.push(...preRun)}callRuntimeCallbacks(onPreRuns)}function initRuntime(){runtimeInitialized=true;wasmExports["e"]()}function postRun(){var postRun=Module["postRun"];if(postRun){if(typeof postRun=="function")postRun=[postRun];onPostRuns.push(...postRun)}callRuntimeCallbacks(onPostRuns)}function abort(what){Module["onAbort"]?.(what);what=`Aborted(${what})`;err(what);ABORT=true;what+=". Build with -sASSERTIONS for more info.";var e=new WebAssembly.RuntimeError(what);throw e}var wasmBinaryFile;function findWasmBinary(){return locateFile("fp.wasm")}function getBinarySync(file){if(readBinary){return readBinary(file)}throw"both async and sync fetching of the wasm failed"}async function getWasmBinary(binaryFile){if(!wasmBinary){try{var response=await readAsync(binaryFile);return new Uint8Array(response)}catch{}}return getBinarySync(binaryFile)}async function instantiateArrayBuffer(binaryFile,imports){try{var binary=await getWasmBinary(binaryFile);var instance=await WebAssembly.instantiate(binary,imports);return instance}catch(reason){err(`failed to asynchronously prepare wasm: ${reason}`);abort(reason)}}async function instantiateAsync(binary,binaryFile,imports){if(!binary&&!isFileURI(binaryFile)&&!ENVIRONMENT_IS_NODE){try{var response=fetch(binaryFile,{credentials:"same-origin"});var instantiationResult=await WebAssembly.instantiateStreaming(response,imports);return instantiationResult}catch(reason){err(`wasm streaming compile failed: ${reason}`);err("falling back to ArrayBuffer instantiation")}}return instantiateArrayBuffer(binaryFile,imports)}function getWasmImports(){var imports={a:wasmImports};return imports}async function createWasm(){function receiveInstance(instance){wasmExports=instance.exports;assignWasmExports(wasmExports);updateMemoryViews();return wasmExports}function receiveInstantiationResult(result){return receiveInstance(result["instance"])}var info=getWasmImports();var instantiateWasm=Module["instantiateWasm"];if(instantiateWasm){return new Promise(resolve=>{instantiateWasm(info,inst=>resolve(receiveInstance(inst)))})}wasmBinaryFile??=findWasmBinary();var result=await instantiateAsync(wasmBinary,wasmBinaryFile,info);var exports=receiveInstantiationResult(result);return exports}class ExitStatus{name="ExitStatus";constructor(status){this.message=`Program terminated with exit(${status})`;this.status=status}}var callRuntimeCallbacks=callbacks=>{while(callbacks.length>0){callbacks.shift()(Module)}};var onPostRuns=[];var onPreRuns=[];var noExitRuntime=true;var HEAP8;var HEAPU32;class ExceptionInfo{constructor(excPtr){this.excPtr=excPtr;this.ptr=excPtr-24}set_type(type){HEAPU32[this.ptr+4>>2]=type}get_type(){return HEAPU32[this.ptr+4>>2]}set_destructor(destructor){HEAPU32[this.ptr+8>>2]=destructor}get_destructor(){return HEAPU32[this.ptr+8>>2]}set_caught(caught){caught=caught?1:0;HEAP8[this.ptr+12]=caught}get_caught(){return HEAP8[this.ptr+12]!=0}set_rethrown(rethrown){rethrown=rethrown?1:0;HEAP8[this.ptr+13]=rethrown}get_rethrown(){return HEAP8[this.ptr+13]!=0}init(type,destructor){this.set_adjusted_ptr(0);this.set_type(type);this.set_destructor(destructor)}set_adjusted_ptr(adjustedPtr){HEAPU32[this.ptr+16>>2]=adjustedPtr}get_adjusted_ptr(){return HEAPU32[this.ptr+16>>2]}}var uncaughtExceptionCount=0;var __Unwind_RaiseException=ex=>{abort()};var ___cxa_throw=(ptr,type,destructor)=>{var info=new ExceptionInfo(ptr);info.init(type,destructor);uncaughtExceptionCount++;__Unwind_RaiseException(ptr)};var __abort_js=()=>abort("");var abortOnCannotGrowMemory=requestedSize=>{abort("OOM")};var HEAPU8;var _emscripten_resize_heap=requestedSize=>{var oldSize=HEAPU8.length;requestedSize>>>=0;abortOnCannotGrowMemory(requestedSize)};{if(Module["noExitRuntime"])noExitRuntime=Module["noExitRuntime"];if(Module["print"])out=Module["print"];if(Module["printErr"])err=Module["printErr"];if(Module["arguments"])programArgs=Module["arguments"];if(Module["thisProgram"])thisProgram=Module["thisProgram"];var preInit=Module["preInit"];if(preInit){if(typeof preInit=="function")Module["preInit"]=preInit=[preInit];while(preInit.length>0){preInit.shift()()}}}var _hash_string,memory,__indirect_function_table,wasmMemory;function assignWasmExports(wasmExports){_hash_string=Module["_hash_string"]=wasmExports["f"];memory=wasmMemory=wasmExports["d"];__indirect_function_table=wasmExports["__indirect_function_table"]}var wasmImports={c:___cxa_throw,a:__abort_js,b:_emscripten_resize_heap};async function run(){preRun();var setStatus=Module["setStatus"];if(setStatus){setStatus("Running...");await new Promise(resolve=>setTimeout(resolve,1));setTimeout(setStatus,1,"")}if(ABORT)return;initRuntime();Module["onRuntimeInitialized"]?.();postRun()}var wasmExports;wasmExports=await createWasm();await run();
2
+ ;return Module}})();if(typeof exports==="object"&&typeof module==="object"){module.exports=createFingerprintModule;module.exports.default=createFingerprintModule}else if(typeof define==="function"&&define["amd"])define([],()=>createFingerprintModule);
package/public/fp.wasm ADDED
Binary file
@@ -0,0 +1,69 @@
1
+ import { promises as fs } from 'node:fs';
2
+ import { join, dirname } from 'node:path';
3
+ import { fileURLToPath } from 'node:url';
4
+ import { exec } from 'node:child_process';
5
+ import JavaScriptObfuscator from 'javascript-obfuscator';
6
+ import { minify } from 'terser';
7
+
8
+ const __filename = fileURLToPath(import.meta.url);
9
+ const __dirname = dirname(__filename);
10
+
11
+ /**
12
+ * Tente d'exécuter la commande de build pour le module WASM.
13
+ * Ne bloque pas le build si la commande échoue (ex: em++ non trouvé).
14
+ */
15
+ function buildWasm() {
16
+ return new Promise((resolve) => {
17
+ console.log('Attempting to build WASM module (optional)...');
18
+ const command = "em++ src/cpp/main.cpp src/cpp/utils.cpp -o public/fp.js -s WASM=1 -s MODULARIZE=1 -s EXPORT_NAME='createFingerprintModule' -s \"EXPORTED_FUNCTIONS=['_hash_string']\" -O3 --no-entry";
19
+
20
+ exec(command, (error, stdout, stderr) => {
21
+ if (error) {
22
+ console.warn('WASM build failed (this is optional and can be ignored):', stderr);
23
+ } else {
24
+ console.log('WASM module built successfully.');
25
+ }
26
+ resolve(); // Toujours résoudre la promesse pour ne pas bloquer le build principal.
27
+ });
28
+ });
29
+ }
30
+
31
+ async function buildClientScript() {
32
+ try {
33
+ console.log('Reading client script...');
34
+ const clientScriptPath = join(__dirname, 'fingerprint.client.js');
35
+ const clientScriptContent = await fs.readFile(clientScriptPath, 'utf-8');
36
+
37
+ console.log('Obfuscating client script...');
38
+ const obfuscationResult = JavaScriptObfuscator.obfuscate(clientScriptContent, {
39
+ compact: true,
40
+ controlFlowFlattening: true, // Aplatit le flux de contrôle
41
+ deadCodeInjection: true, // Injecte du code mort
42
+ stringArray: true,
43
+ stringArrayRotate: true, // Fait tourner le tableau de chaînes
44
+ stringArrayShuffle: true, // Mélange le tableau de chaînes
45
+ // L'utilisation d'une graine (seed) de 0 signifie que l'obfuscation sera déterministe
46
+ // pour une même entrée. Pour une obfuscation unique à chaque build, on peut utiliser
47
+ // une graine aléatoire, par exemple : seed: Math.random()
48
+ seed: Math.random(),
49
+ selfDefending: true,
50
+ });
51
+
52
+ const obfuscatedCode = obfuscationResult.getObfuscatedCode();
53
+
54
+ console.log('Writing obfuscated script to fingerprint.client.obfuscated.js...');
55
+ await fs.writeFile(join(__dirname, './fingerprint.client.obfuscated.js'), obfuscatedCode);
56
+
57
+ console.log('Client script build process completed successfully.');
58
+ } catch (error) {
59
+ console.error('Error during client script build:', error);
60
+ process.exit(1);
61
+ }
62
+ }
63
+
64
+ async function main() {
65
+ await buildClientScript();
66
+ await buildWasm();
67
+ }
68
+
69
+ main();