@js-recon/js-recon 1.3.1-beta.2

package/build/analyze/index.js

@@ -0,0 +1,150 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import chalk from "chalk";
+import fs from "fs";
+import path from "path";
+import validateRules from "./helpers/validate.js";
+import engine from "./engine/index.js";
+import yaml from "yaml";
+import initRules from "./helpers/initRules.js";
+import { generateEngineOutput } from "./helpers/outputHelper.js";
+const availableTechs = {
+    next: "Next.js",
+    vue: "Vue.js",
+    react: "React",
+    svelte: "Svelte/Astro",
+};
+/**
+ * Recursively searches for YAML rule files in a directory.
+ *
+ * @param dir - The directory path to search for rule files
+ * @returns An array of file paths to YAML rule files (.yml or .yaml)
+ */
+const getRuleFilesRecursive = (dir) => {
+    let results = [];
+    const list = fs.readdirSync(dir);
+    list.forEach(function (entry) {
+        // skip hidden directories (e.g. .github)
+        if (entry.startsWith("."))
+            return;
+        const file = path.join(dir, entry);
+        const stat = fs.statSync(file);
+        if (stat && stat.isDirectory()) {
+            results = results.concat(getRuleFilesRecursive(file));
+        }
+        else {
+            if (file.endsWith(".yml") || file.endsWith(".yaml")) {
+                results.push(file);
+            }
+        }
+    });
+    return results;
+};
+/**
+ * Analyzes JavaScript code using custom rules and generates findings.
+ *
+ * This function loads and validates rules, processes mapped JSON data or OpenAPI specs,
+ * and runs analysis engines to identify potential security issues or code patterns.
+ *
+ * @param rulesPath - Path to rules file or directory containing YAML rule files
+ * @param mappedJson - Path to the mapped JSON file containing code analysis data
+ * @param tech - Technology stack identifier (currently supports "next" for Next.js)
+ * @param list - Whether to list available technologies instead of running analysis
+ * @param openapi - Path to OpenAPI specification file for API analysis
+ * @param validate - Whether to only validate rules without running analysis
+ * @param outputFile - Output file name for analysis results
+ * @returns Promise that resolves when analysis is complete
+ */
+const analyze = (rulesPath, mappedJson, tech, list, openapi, validate, outputFile) => __awaiter(void 0, void 0, void 0, function* () {
+    console.log(chalk.cyan(`[i] Loading analyze module...`));
+    yield initRules();
+    // check if `-r` flag is there. If not, default to `~/.js-recon/rules`
+    if (!rulesPath || rulesPath === "") {
+        rulesPath = path.join(process.env.HOME, "/.js-recon/rules");
+    }
+    // check if `rules` exists
+    if (!fs.existsSync(rulesPath)) {
+        console.error(chalk.red(`[!] Rules ${rulesPath} does not exist`));
+        return;
+    }
+    // now that the rule thing exist, check if it is a direcotory or a file
+    let ruleFiles = [];
+    if (fs.lstatSync(rulesPath).isDirectory()) {
+        ruleFiles = getRuleFilesRecursive(rulesPath);
+    }
+    else {
+        ruleFiles = [rulesPath];
+    }
+    // now, validate all those files
+    const { allValid: allValidated, compatibleRuleFiles } = yield validateRules(ruleFiles);
+    if (!allValidated) {
+        console.error(chalk.red("[!] Some rules are invalid"));
+        process.exit(20);
+    }
+    if (validate) {
+        console.log(chalk.green("[✓] All rules are valid"));
+        return;
+    }
+    // check if the list flag is passed. If so, list the techs and return
+    if (list) {
+        console.log(chalk.green("[i] List of available technologies"));
+        for (const [key, value] of Object.entries(availableTechs)) {
+            console.log(chalk.green(`- ${key}: ${value}`));
+        }
+        return;
+    }
+    // check if a valid tech is passed
+    if (!availableTechs[tech]) {
+        console.error(chalk.red(`[!] Invalid technology ${tech}.`));
+        console.error(chalk.yellow("[i] Run with -l/--list to see available technologies"));
+        return;
+    }
+    // check if either mappedJson or either openapi is passed
+    if (!mappedJson && !openapi) {
+        console.error(chalk.red("[!] Either mappedJson or openapi must be passed"));
+        return;
+    }
+    // check if the mappedJson and openapi exists if they are not undefined
+    if (mappedJson && !fs.existsSync(mappedJson)) {
+        console.error(chalk.red(`[!] Mapped JSON ${mappedJson} does not exist`));
+        return;
+    }
+    if (openapi && !fs.existsSync(openapi)) {
+        console.error(chalk.red(`[!] OpenAPI spec ${openapi} does not exist`));
+        return;
+    }
+    // load the mapped json and openapi in memory
+    let mappedJsonData;
+    let openapiData;
+    if (mappedJson) {
+        mappedJsonData = JSON.parse(fs.readFileSync(mappedJson, "utf8"));
+        console.log(chalk.green(`[✓] Mapped JSON loaded successfully`));
+    }
+    if (openapi) {
+        openapiData = JSON.parse(fs.readFileSync(openapi, "utf8"));
+        console.log(chalk.green(`[✓] OpenAPI spec loaded successfully`));
+    }
+    // iterate over the ruleFiles
+    let ruleFindings = [];
+    for (const ruleFile of compatibleRuleFiles) {
+        // load the rule
+        const rule = yaml.parse(fs.readFileSync(ruleFile, "utf8"));
+        // run the rule
+        const engineFindings = yield engine(rule, mappedJsonData, openapiData, tech);
+        // add findings to the global findings
+        if (engineFindings) {
+            ruleFindings.push(...engineFindings);
+        }
+    }
+    // generate the engine output
+    generateEngineOutput(outputFile, ruleFindings);
+});
+export default analyze;
+//# sourceMappingURL=index.js.map

package/build/analyze/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/analyze/index.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,aAAa,MAAM,uBAAuB,CAAC;AAElD,OAAO,MAAM,MAAM,mBAAmB,CAAC;AACvC,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,OAAO,SAAS,MAAM,wBAAwB,CAAC;AAC/C,OAAO,EAAgB,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAE/E,MAAM,cAAc,GAAG;IACnB,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,QAAQ;IACb,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,cAAc;CACzB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,qBAAqB,GAAG,CAAC,GAAW,EAAY,EAAE;IACpD,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK;QACxB,yCAAyC;QACzC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7B,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACJ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;QACL,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACnB,CAAC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,GAAG,CACZ,SAAiB,EACjB,UAAkB,EAClB,IAAyC,EACzC,IAAa,EACb,OAAe,EACf,QAAiB,EACjB,UAAkB,EACpB,EAAE;IACA,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC;IAEzD,MAAM,SAAS,EAAE,CAAC;IAElB,sEAAsE;IACtE,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACjC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IAChE,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,SAAS,iBAAiB,CAAC,CAAC,CAAC;QAClE,OAAO;IACX,CAAC;IAED,uEAAuE;IACvE,IAAI,SAAS,GAAa,EAAE,CAAC;IAE7B,IAAI,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACxC,SAAS,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACJ,SAAS,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IAED,gCAAgC;IAChC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,mBAAmB,EAAE,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IAEvF,IAAI,CAAC,YAAY,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACpD,OAAO;IACX,CAAC;IAED,qEAAqE;IACrE,IAAI,IAAI,EAAE,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;QAC/D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO;IACX,CAAC;IAED,kCAAkC;IAClC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,IAAI,GAAG,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,sDAAsD,CAAC,CAAC,CAAC;QACpF,OAAO;IACX,CAAC;IAED,yDAAyD;IACzD,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC,CAAC;QAC5E,OAAO;IACX,CAAC;IAED,uEAAuE;IACvE,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,UAAU,iBAAiB,CAAC,CAAC,CAAC;QACzE,OAAO;IACX,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,OAAO,iBAAiB,CAAC,CAAC,CAAC;QACvE,OAAO;IACX,CAAC;IAED,6CAA6C;IAC7C,IAAI,cAAkC,CAAC;IACvC,IAAI,WAAoC,CAAC;IACzC,IAAI,UAAU,EAAE,CAAC;QACb,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACV,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,6BAA6B;IAC7B,IAAI,YAAY,GAAmB,EAAE,CAAC;IACtC,KAAK,MAAM,QAAQ,IAAI,mBAAmB,EAAE,CAAC;QACzC,gBAAgB;QAChB,MAAM,IAAI,GAAS,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAEjE,eAAe;QACf,MAAM,cAAc,GAAmB,MAAM,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QAE7F,sCAAsC;QACtC,IAAI,cAAc,EAAE,CAAC;YACjB,YAAY,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;QACzC,CAAC;IACL,CAAC;IAED,6BAA6B;IAC7B,oBAAoB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AACnD,CAAC,CAAA,CAAC;AAEF,eAAe,OAAO,CAAC"}

package/build/analyze/types/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/build/analyze/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/analyze/types/index.ts"],"names":[],"mappings":""}

package/build/api_gateway/checkFeasibility.js

@@ -0,0 +1,41 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { get } from "./genReq.js";
+import chalk from "chalk";
+import checkFireWallBlocking from "./checkFireWallBlocking.js";
+/**
+ * Checks the feasibility of using API Gateway by testing for firewall blocking.
+ *
+ * Sends multiple test requests to the target URL through the API Gateway
+ * to determine if the requests are being blocked by a firewall or security system.
+ *
+ * @param url - The target URL to test for API Gateway feasibility
+ * @returns Promise that resolves when feasibility check is complete
+ */
+const checkFeasibility = (url) => __awaiter(void 0, void 0, void 0, function* () {
+    console.log(chalk.cyan(`[i] Checking feasibility of API Gateway with ${url}`));
+    try {
+        // send 10 requests, and check if any of those contain any signs of blocking
+        for (let i = 0; i < 10; i++) {
+            const response = yield get(url);
+            const isFireWallBlocking = yield checkFireWallBlocking(response);
+            if (isFireWallBlocking) {
+                console.error(chalk.magenta("[!] Please try again without API Gateway"));
+                return;
+            }
+        }
+        console.log(chalk.green("[✓] Feasibility check passed."), chalk.dim("However, this doesn't represent the true nature of the firewall used."));
+    }
+    catch (error) {
+        console.error(chalk.red(`[!] An error occured in feasibility check: ${error}`));
+    }
+});
+export default checkFeasibility;
+//# sourceMappingURL=checkFeasibility.js.map

package/build/api_gateway/checkFeasibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkFeasibility.js","sourceRoot":"","sources":["../../src/api_gateway/checkFeasibility.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,qBAAqB,MAAM,4BAA4B,CAAC;AAE/D;;;;;;;;GAQG;AACH,MAAM,gBAAgB,GAAG,CAAO,GAAW,EAAiB,EAAE;IAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gDAAgD,GAAG,EAAE,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC;QACD,4EAA4E;QAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,kBAAkB,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YACjE,IAAI,kBAAkB,EAAE,CAAC;gBACrB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,CAAC;gBACzE,OAAO;YACX,CAAC;QACL,CAAC;QACD,OAAO,CAAC,GAAG,CACP,KAAK,CAAC,KAAK,CAAC,+BAA+B,CAAC,EAC5C,KAAK,CAAC,GAAG,CAAC,uEAAuE,CAAC,CACrF,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,8CAA8C,KAAK,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC;AACL,CAAC,CAAA,CAAC;AAEF,eAAe,gBAAgB,CAAC"}

package/build/api_gateway/checkFireWallBlocking.js

@@ -0,0 +1,33 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import chalk from "chalk";
+/**
+ * Checks if a response body contains signs of firewall or security system blocking.
+ *
+ * Currently detects Cloudflare protection pages by looking for specific HTML title patterns
+ * that indicate the request was intercepted by a security system.
+ *
+ * @param body - The response body content to analyze for blocking indicators
+ * @returns Promise that resolves to true if blocking is detected, false otherwise
+ */
+const checkFireWallBlocking = (body) => __awaiter(void 0, void 0, void 0, function* () {
+    // check common signs of CF first
+    if (body.includes("<title>Just a moment...</title>")) {
+        console.error(chalk.red("[!] Cloudflare detected"));
+        return true;
+    }
+    else if (body.includes("<title>Attention Required! | Cloudflare</title>")) {
+        console.error(chalk.red("[!] Cloudflare detected"));
+        return true;
+    }
+    return false;
+});
+export default checkFireWallBlocking;
+//# sourceMappingURL=checkFireWallBlocking.js.map

package/build/api_gateway/checkFireWallBlocking.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkFireWallBlocking.js","sourceRoot":"","sources":["../../src/api_gateway/checkFireWallBlocking.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B;;;;;;;;GAQG;AACH,MAAM,qBAAqB,GAAG,CAAO,IAAY,EAAoB,EAAE;IACnE,iCAAiC;IACjC,IAAI,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IAChB,CAAC;SAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,iDAAiD,CAAC,EAAE,CAAC;QAC1E,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC,CAAA,CAAC;AAEF,eAAe,qBAAqB,CAAC"}

package/build/api_gateway/genReq.js

@@ -0,0 +1,205 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { APIGatewayClient, CreateResourceCommand, GetResourcesCommand, PutMethodCommand, PutIntegrationCommand, 
+//   CreateDeploymentCommand,
+//   CreateStageCommand,
+PutIntegrationResponseCommand, PutMethodResponseCommand, TestInvokeMethodCommand, DeleteResourceCommand, } from "@aws-sdk/client-api-gateway";
+import fs from "fs";
+import md5 from "md5";
+import chalk from "chalk";
+import * as globals from "../utility/globals.js";
+import checkFireWallBlocking from "./checkFireWallBlocking.js";
+/**
+ * Utility function to pause execution for a specified duration.
+ *
+ * @param ms - Number of milliseconds to sleep
+ * @returns Promise that resolves after the specified delay
+ */
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/**
+ * Given a URL, generates a new API Gateway for it and returns the response of the URL.
+ * @param {string} url The URL to generate an API Gateway for.
+ * @param {object} [headers] The headers to include in the request.
+ * @returns {Promise<string>} The response of the URL.
+ */
+const get = (url_1, ...args_1) => __awaiter(void 0, [url_1, ...args_1], void 0, function* (url, headers = {}) {
+    // read the config file
+    // Load and parse API Gateway config with error handling
+    let config;
+    try {
+        config = JSON.parse(fs.readFileSync(globals.apiGatewayConfigFile, "utf8"));
+    }
+    catch (error) {
+        throw new Error(`Failed to read or parse API Gateway config file: ${error.message}`);
+    }
+    // select a random api gateway
+    let apiGateway = Object.keys(config)[Math.floor(Math.random() * Object.keys(config).length)];
+    const client = new APIGatewayClient({
+        region: config[apiGateway].region,
+        credentials: {
+            accessKeyId: config[apiGateway].access_key,
+            secretAccessKey: config[apiGateway].secret_key,
+        },
+    });
+    // get the root resource id
+    const getResourceCommand = new GetResourcesCommand({
+        restApiId: config[apiGateway].id,
+        limit: 999999999,
+    });
+    const getResourceResponse = yield client.send(getResourceCommand);
+    yield sleep(200);
+    // before creating a resource, check if the resource already exists
+    const resourceExists = getResourceResponse.items.find(
+    // file deepcode ignore InsecureHash: False positive
+    (item) => item.pathPart === md5(url));
+    let newResourceResponse;
+    if (resourceExists) {
+        // console.error(chalk.yellow("[!] Resource already exists"));
+        newResourceResponse = {
+            id: resourceExists.id,
+        };
+    }
+    else {
+        // create a new resource
+        let rootId;
+        if (getResourceResponse.items.find((item) => item.path === "/")) {
+            rootId = getResourceResponse.items.find((item) => item.path === "/").id;
+        }
+        else {
+            rootId = getResourceResponse.items[0].parentId;
+        }
+        const newResourceCommand = new CreateResourceCommand({
+            restApiId: config[apiGateway].id,
+            parentId: rootId,
+            pathPart: md5(url), // md5 of the url
+        });
+        newResourceResponse = yield client.send(newResourceCommand);
+        yield sleep(200);
+        // add a new method
+        const newMethodCommand = new PutMethodCommand({
+            restApiId: config[apiGateway].id,
+            resourceId: newResourceResponse.id,
+            httpMethod: "GET",
+            authorizationType: "NONE",
+            requestParameters: {
+                "method.request.header.RSC": false,
+                "method.request.header.User-Agent": false,
+                "method.request.header.Referer": false,
+                "method.request.header.Accept": false,
+                "method.request.header.Accept-Language": false,
+                "method.request.header.Accept-Encoding": false,
+                "method.request.header.Content-Type": false,
+                "method.request.header.Content-Length": false,
+                "method.request.header.Origin": false,
+                "method.request.header.X-Forwarded-For": false,
+                "method.request.header.X-Forwarded-Host": false,
+                "method.request.header.X-IP": false,
+                "method.request.header.X-Forwarded-Proto": false,
+                "method.request.header.X-Forwarded-Port": false,
+                "method.request.header.Sec-Fetch-Site": false,
+                "method.request.header.Sec-Fetch-Mode": false,
+                "method.request.header.Sec-Fetch-Dest": false,
+            },
+        });
+        const newMethodResponse = yield client.send(newMethodCommand);
+        yield sleep(100);
+        // create new integration
+        const newIntegrationCommand = new PutIntegrationCommand({
+            restApiId: config[apiGateway].id,
+            resourceId: newResourceResponse.id,
+            httpMethod: "GET",
+            integrationHttpMethod: "GET",
+            type: "HTTP",
+            timeoutInMillis: 29000,
+            uri: url,
+        });
+        const newIntegrationResponse = yield client.send(newIntegrationCommand);
+        yield sleep(100);
+        // create a new method response
+        const newMethodResponseCommand = new PutMethodResponseCommand({
+            httpMethod: "GET",
+            resourceId: newResourceResponse.id,
+            restApiId: config[apiGateway].id,
+            statusCode: "200",
+        });
+        const newMethodResponseResponse = yield client.send(newMethodResponseCommand);
+        yield sleep(100);
+        // put integration response
+        const putIntegrationResponseCommand = new PutIntegrationResponseCommand({
+            httpMethod: "GET",
+            resourceId: newResourceResponse.id,
+            restApiId: config[apiGateway].id,
+            statusCode: "200",
+        });
+        const putIntegrationResponseResponse = yield client.send(putIntegrationResponseCommand);
+        yield sleep(100);
+    }
+    // Generate dynamic stage name
+    //   const dynamicStageName = `prod-${Date.now()}-${Math.random().toString(36).substring(2, 7)}`;
+    //   console.log(chalk.blue(`[*] Using dynamic stage name: ${dynamicStageName}`));
+    // Create a deployment
+    //   const createDeploymentCommand = new CreateDeploymentCommand({
+    //     restApiId: config[apiGateway].id,
+    //     stageName: dynamicStageName,
+    //     description: `Deployment for ${url} at ${new Date().toISOString()} to stage ${dynamicStageName}`,
+    //   });
+    //   const deploymentResponse = await client.send(createDeploymentCommand);
+    //   console.log(chalk.green("[+] Deployment created:"), deploymentResponse.id);
+    //   await sleep(100);
+    const testInvokeMethodQuery = new TestInvokeMethodCommand({
+        httpMethod: "GET",
+        resourceId: newResourceResponse.id,
+        restApiId: config[apiGateway].id,
+        headers: headers || {},
+    });
+    const testInvokeMethodResponse = yield client.send(testInvokeMethodQuery);
+    yield sleep(100);
+    const body = yield testInvokeMethodResponse.body;
+    // check if any firewall is there in the way
+    const isFireWallBlocking = yield checkFireWallBlocking(body);
+    // delete the resource
+    const deleteResourceCommand = new DeleteResourceCommand({
+        restApiId: config[apiGateway].id,
+        resourceId: newResourceResponse.id,
+    });
+    try {
+        yield client.send(deleteResourceCommand);
+    }
+    catch (err) {
+        console.error(chalk.red(`[!] Error when sending delete resource command to AWS: ${err}`));
+    }
+    if (isFireWallBlocking) {
+        console.error(chalk.magenta("[!] Please try again without API Gateway"));
+        process.exit(18);
+    }
+    return body;
+    // create a new stage
+    //   dynamicStageName = `prod-${Date.now()}-${Math.random().toString(36).substring(2, 7)}`;
+    //   const newStageCommand = new CreateStageCommand({
+    //     restApiId: config[apiGateway].id,
+    //     stageName: dynamicStageName, // Use dynamic stage name
+    //     deploymentId: deploymentResponse.id, // Use the ID from the deployment
+    //     cacheClusterEnabled: false,
+    //     // cacheClusterSize: "0", // Removed as cacheClusterEnabled is false
+    //     methodSettings: [
+    //       {
+    //         httpMethod: "*",
+    //         // resourceId: "*", // This might need to be more specific if you don't want it for all resources
+    //         throttlingBurstLimit: 5,
+    //         throttlingRateLimit: 10,
+    //       },
+    //     ],
+    //   });
+    //   const newStageResponse = await client.send(newStageCommand);
+    //   await sleep(100);
+    //   console.log(newStageResponse);
+});
+export { get };
+//# sourceMappingURL=genReq.js.map

package/build/api_gateway/genReq.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"genReq.js","sourceRoot":"","sources":["../../src/api_gateway/genReq.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EACH,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB;AACrB,6BAA6B;AAC7B,wBAAwB;AACxB,6BAA6B,EAC7B,wBAAwB,EACxB,uBAAuB,EACvB,qBAAqB,GACxB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,OAAO,MAAM,uBAAuB,CAAC;AACjD,OAAO,qBAAqB,MAAM,4BAA4B,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAE/F;;;;;GAKG;AACH,MAAM,GAAG,GAAG,mBAAuD,EAAE,0DAAlD,GAAW,EAAE,UAAc,EAAE;IAC5C,uBAAuB;IACvB,wDAAwD;IACxD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oDAAoD,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,8BAA8B;IAC9B,IAAI,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAE7F,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC;QAChC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM;QACjC,WAAW,EAAE;YACT,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU;YAC1C,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU;SACjD;KACJ,CAAC,CAAC;IAEH,2BAA2B;IAC3B,MAAM,kBAAkB,GAAG,IAAI,mBAAmB,CAAC;QAC/C,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE;QAChC,KAAK,EAAE,SAAS;KACnB,CAAC,CAAC;IACH,MAAM,mBAAmB,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAEjB,mEAAmE;IACnE,MAAM,cAAc,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI;IACjD,oDAAoD;IACpD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,GAAG,CAAC,CACvC,CAAC;IAEF,IAAI,mBAAmB,CAAC;IACxB,IAAI,cAAc,EAAE,CAAC;QACjB,8DAA8D;QAC9D,mBAAmB,GAAG;YAClB,EAAE,EAAE,cAAc,CAAC,EAAE;SACxB,CAAC;IACN,CAAC;SAAM,CAAC;QACJ,wBAAwB;QACxB,IAAI,MAAM,CAAC;QACX,IAAI,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC9D,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5E,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnD,CAAC;QACD,MAAM,kBAAkB,GAAG,IAAI,qBAAqB,CAAC;YACjD,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE;YAChC,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,iBAAiB;SACxC,CAAC,CAAC;QACH,mBAAmB,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC5D,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAEjB,mBAAmB;QACnB,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC;YAC1C,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE;YAChC,UAAU,EAAE,mBAAmB,CAAC,EAAE;YAClC,UAAU,EAAE,KAAK;YACjB,iBAAiB,EAAE,MAAM;YACzB,iBAAiB,EAAE;gBACf,2BAA2B,EAAE,KAAK;gBAClC,kCAAkC,EAAE,KAAK;gBACzC,+BAA+B,EAAE,KAAK;gBACtC,8BAA8B,EAAE,KAAK;gBACrC,uCAAuC,EAAE,KAAK;gBAC9C,uCAAuC,EAAE,KAAK;gBAC9C,oCAAoC,EAAE,KAAK;gBAC3C,sCAAsC,EAAE,KAAK;gBAC7C,8BAA8B,EAAE,KAAK;gBACrC,uCAAuC,EAAE,KAAK;gBAC9C,wCAAwC,EAAE,KAAK;gBAC/C,4BAA4B,EAAE,KAAK;gBACnC,yCAAyC,EAAE,KAAK;gBAChD,wCAAwC,EAAE,KAAK;gBAC/C,sCAAsC,EAAE,KAAK;gBAC7C,sCAAsC,EAAE,KAAK;gBAC7C,sCAAsC,EAAE,KAAK;aAChD;SACJ,CAAC,CAAC;QACH,MAAM,iBAAiB,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9D,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAEjB,yBAAyB;QACzB,MAAM,qBAAqB,GAAG,IAAI,qBAAqB,CAAC;YACpD,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE;YAChC,UAAU,EAAE,mBAAmB,CAAC,EAAE;YAClC,UAAU,EAAE,KAAK;YACjB,qBAAqB,EAAE,KAAK;YAC5B,IAAI,EAAE,MAAM;YACZ,eAAe,EAAE,KAAK;YACtB,GAAG,EAAE,GAAG;SACX,CAAC,CAAC;QACH,MAAM,sBAAsB,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACxE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAEjB,+BAA+B;QAC/B,MAAM,wBAAwB,GAAG,IAAI,wBAAwB,CAAC;YAC1D,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,mBAAmB,CAAC,EAAE;YAClC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE;YAChC,UAAU,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,MAAM,yBAAyB,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC9E,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAEjB,2BAA2B;QAC3B,MAAM,6BAA6B,GAAG,IAAI,6BAA6B,CAAC;YACpE,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,mBAAmB,CAAC,EAAE;YAClC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE;YAChC,UAAU,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,MAAM,8BAA8B,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACxF,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,8BAA8B;IAC9B,iGAAiG;IACjG,kFAAkF;IAElF,sBAAsB;IACtB,kEAAkE;IAClE,wCAAwC;IACxC,mCAAmC;IACnC,wGAAwG;IACxG,QAAQ;IACR,2EAA2E;IAC3E,gFAAgF;IAChF,sBAAsB;IAEtB,MAAM,qBAAqB,GAAG,IAAI,uBAAuB,CAAC;QACtD,UAAU,EAAE,KAAK;QACjB,UAAU,EAAE,mBAAmB,CAAC,EAAE;QAClC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE;QAChC,OAAO,EAAE,OAAO,IAAI,EAAE;KACzB,CAAC,CAAC;IACH,MAAM,wBAAwB,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC1E,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAEjB,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC;IAEjD,4CAA4C;IAC5C,MAAM,kBAAkB,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAE7D,sBAAsB;IACtB,MAAM,qBAAqB,GAAG,IAAI,qBAAqB,CAAC;QACpD,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE;QAChC,UAAU,EAAE,mBAAmB,CAAC,EAAE;KACrC,CAAC,CAAC;IACH,IAAI,CAAC;QACD,MAAM,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,0DAA0D,GAAG,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,kBAAkB,EAAE,CAAC;QACrB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,IAAI,CAAC;IAEZ,qBAAqB;IACrB,2FAA2F;IAC3F,qDAAqD;IACrD,wCAAwC;IACxC,6DAA6D;IAC7D,6EAA6E;IAC7E,kCAAkC;IAClC,2EAA2E;IAC3E,wBAAwB;IACxB,UAAU;IACV,2BAA2B;IAC3B,4GAA4G;IAC5G,mCAAmC;IACnC,mCAAmC;IACnC,WAAW;IACX,SAAS;IACT,QAAQ;IACR,iEAAiE;IACjE,sBAAsB;IACtB,mCAAmC;AACvC,CAAC,CAAA,CAAC;AAEF,OAAO,EAAE,GAAG,EAAE,CAAC"}