@jshookmcp/jshook 0.2.5 → 0.2.6

package/workflows/bundle-recovery/workflow.ts

@@ -0,0 +1,179 @@
+import {
+  createWorkflow,
+  type WorkflowExecutionContext,
+  SequenceNodeBuilder,
+} from '@jshookmcp/extension-sdk/workflow';
+
+const workflowId = 'workflow.bundle-recovery.v1';
+
+/**
+ * Bundle Recovery — Reverse Mission Workflow
+ *
+ * End-to-end bundle analysis workflow:
+ *   1. Collects all scripts from the target page
+ *   2. Detects source maps and attempts recovery
+ *   3. Identifies webpack/rollup/parcel bundles
+ *   4. Enumerates modules and entry points
+ *   5. Runs webcrack for code unpacking/deobfuscation
+ *   6. Extracts function dependency trees for key modules
+ *   7. Exports structured module map and evidence
+ */
+export default createWorkflow(workflowId, 'Bundle Recovery')
+  .description(
+    'Collects scripts, recovers source maps, identifies bundlers (webpack/rollup/parcel), enumerates modules, runs webcrack deobfuscation, and extracts function trees.',
+  )
+  .tags([
+    'reverse',
+    'bundle',
+    'webpack',
+    'sourcemap',
+    'deobfuscation',
+    'webcrack',
+    'module',
+    'mission',
+  ])
+  .timeoutMs(15 * 60_000)
+  .defaultMaxConcurrency(3)
+  .buildGraph((ctx: WorkflowExecutionContext) => {
+    const prefix = 'workflows.bundleRecovery';
+
+    // ── Config ──────────────────────────────────────────────────────
+    const url = String(ctx.getConfig(`${prefix}.url`, 'https://example.com'));
+    const waitUntil = String(ctx.getConfig(`${prefix}.waitUntil`, 'networkidle0'));
+    const collectInline = Boolean(ctx.getConfig(`${prefix}.collectInline`, true));
+    const maxScripts = Number(ctx.getConfig(`${prefix}.maxScripts`, 50));
+    const runWebcrack = Boolean(ctx.getConfig(`${prefix}.runWebcrack`, true));
+    const extractFunctionTree = Boolean(ctx.getConfig(`${prefix}.extractFunctionTree`, true));
+    const maxConcurrency = Number(ctx.getConfig(`${prefix}.parallel.maxConcurrency`, 3));
+    const moduleSearchDepth = Number(ctx.getConfig(`${prefix}.moduleSearchDepth`, 4));
+
+    const root = new SequenceNodeBuilder('bundle-recovery-root');
+
+    root
+      // ── Phase 1: Navigate & Enable ────────────────────────────────
+      .tool('enable-network', 'network_enable', {
+        input: { enableExceptions: true },
+      })
+      .tool('navigate', 'page_navigate', {
+        input: { url, waitUntil },
+      })
+
+      // ── Phase 2: Collect Scripts ──────────────────────────────────
+      .tool('collect-scripts', 'collect_code', {
+        input: {
+          includeInline: collectInline,
+          limit: maxScripts,
+        },
+      })
+
+      // ── Phase 3: Parallel Analysis ────────────────────────────────
+      .parallel('analyse-bundles', (p) => {
+        p.maxConcurrency(maxConcurrency)
+          .failFast(false)
+          // Detect & fetch source maps
+          .tool('detect-sourcemaps', 'source_map_detect', {
+            input: {},
+          })
+          .tool('fetch-sourcemaps', 'source_map_fetch', {
+            input: {},
+          })
+          // Identify bundler type
+          .tool('detect-bundler', 'js_bundle_detect', {
+            input: {},
+          })
+          // Search for webpack/rollup runtime signatures
+          .tool('search-webpack', 'js_bundle_search', {
+            input: {
+              bundlerType: 'webpack',
+            },
+          })
+          // Detect obfuscation
+          .tool('detect-obfuscation', 'detect_obfuscation', {
+            input: {},
+          });
+      })
+
+      // ── Phase 4: Source Map Recovery ──────────────────────────────
+      .tool('recover-sourcemaps', 'source_map_recover', {
+        input: {},
+      })
+
+      // ── Phase 5: Module Enumeration ───────────────────────────────
+      .tool('enumerate-modules', 'js_bundle_enumerate_modules', {
+        input: {
+          depth: moduleSearchDepth,
+        },
+      });
+
+    // ── Phase 6: Webcrack (Optional) ────────────────────────────────
+    if (runWebcrack) {
+      root.tool('run-webcrack', 'webcrack_unpack', {
+        input: {},
+      });
+    }
+
+    // ── Phase 7: Function Tree (Optional) ───────────────────────────
+    if (extractFunctionTree) {
+      root.tool('extract-function-tree', 'extract_function_tree', {
+        input: {
+          targetParam: '__webpack_require__',
+          depth: 3,
+        },
+      });
+    }
+
+    root
+      // ── Phase 8: Evidence Recording ───────────────────────────────
+      .tool('create-evidence-session', 'instrumentation_session_create', {
+        input: {
+          name: `bundle-recovery-${new Date().toISOString().slice(0, 10)}`,
+          metadata: { url, workflowId },
+        },
+      })
+      .tool('record-artifact', 'instrumentation_artifact_record', {
+        input: {
+          type: 'bundle_analysis',
+          label: `Bundle analysis for ${url}`,
+          metadata: { url, maxScripts, runWebcrack, extractFunctionTree },
+        },
+      })
+
+      // ── Phase 9: Session Insight ──────────────────────────────────
+      .tool('emit-insight', 'append_session_insight', {
+        input: {
+          insight: JSON.stringify({
+            status: 'bundle_recovery_complete',
+            workflowId,
+            url,
+            maxScripts,
+            runWebcrack,
+            extractFunctionTree,
+          }),
+        },
+      });
+
+    return root;
+  })
+  .onStart((ctx) => {
+    ctx.emitMetric('workflow_runs_total', 1, 'counter', {
+      workflowId,
+      mission: 'bundle_recovery',
+      stage: 'start',
+    });
+  })
+  .onFinish((ctx) => {
+    ctx.emitMetric('workflow_runs_total', 1, 'counter', {
+      workflowId,
+      mission: 'bundle_recovery',
+      stage: 'finish',
+    });
+  })
+  .onError((ctx, error) => {
+    ctx.emitMetric('workflow_errors_total', 1, 'counter', {
+      workflowId,
+      mission: 'bundle_recovery',
+      stage: 'error',
+      error: error.name,
+    });
+  })
+  .build();

package/workflows/challenge-detector/.jshook-install.json

@@ -0,0 +1,14 @@
+{
+  "version": 1,
+  "kind": "workflow",
+  "slug": "challenge-detector",
+  "id": "workflow.challenge-detector.v1",
+  "source": {
+    "type": "git",
+    "repo": "https://github.com/vmoranv/jshook_workflow_challenge_detector",
+    "ref": "main",
+    "commit": "f050d18394c908485771e79a3778e9711724f073",
+    "subpath": ".",
+    "entry": "workflow.ts"
+  }
+}

package/workflows/challenge-detector/meta.yaml

@@ -0,0 +1,14 @@
+name: challenge-detector
+description: JSHook workflow for challenge-detector (v2 - CTF platform support)
+author: vmoranv
+tags:
+  - workflow
+  - challenge-detector
+  - ctf
+  - juiceshop
+  - dvwa
+  - hackthebox
+  - tryhackme
+  - overthewire
+  - picoctf
+  - rootme

package/workflows/challenge-detector/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "jshook-workflow-challenge-detector",
+  "private": true,
+  "version": "0.1.0",
+  "description": "jshookmcp workflow: challenge-detector",
+  "type": "module",
+  "packageManager": "pnpm@10.28.2",
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "check": "tsc -p tsconfig.json --noEmit"
+  },
+  "dependencies": {
+    "@jshookmcp/extension-sdk": "^0.3.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.3.0",
+    "typescript": "^5.9.3"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  }
+}