@jshookmcp/jshook 0.2.8 → 0.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +36 -5
- package/README.zh.md +36 -5
- package/dist/{AntiCheatDetector-S8VRj-dD.mjs → AntiCheatDetector-CqGDXmfc.mjs} +160 -54
- package/dist/{CodeInjector-4Z3ngPoX.mjs → CodeInjector-BdjRfNx7.mjs} +5 -5
- package/dist/ConsoleMonitor-DykL3IAw.mjs +2269 -0
- package/dist/{DarwinAPI-B8hg_yhz.mjs → DarwinAPI-ETyy0xyo.mjs} +1 -1
- package/dist/DetailedDataManager-HT49OrvF.mjs +217 -0
- package/dist/EventBus-DFKvADm3.mjs +141 -0
- package/dist/EvidenceGraphBridge-318Oi0Lf.mjs +153 -0
- package/dist/{ExtensionManager-D5-bO9D8.mjs → ExtensionManager-BDMsY2Dz.mjs} +27 -13
- package/dist/{FingerprintManager-BVxFJL2-.mjs → FingerprintManager-BN4UQWnX.mjs} +1 -1
- package/dist/{HardwareBreakpoint-DK1yjWkV.mjs → HardwareBreakpoint-Cc2AFq1Y.mjs} +3 -3
- package/dist/{HeapAnalyzer-CEbo10xU.mjs → HeapAnalyzer-DruMgsgj.mjs} +21 -21
- package/dist/HookGeneratorBuilders.core.generators.storage-CTbB4Lcx.mjs +566 -0
- package/dist/InstrumentationSession-DLH0vd-z.mjs +244 -0
- package/dist/{MemoryController-DdtnBdD4.mjs → MemoryController-CMtviNW_.mjs} +3 -3
- package/dist/{MemoryScanSession-RMixN3bX.mjs → MemoryScanSession-ITgb_NMi.mjs} +81 -78
- package/dist/{MemoryScanner-QjK4ld0B.mjs → MemoryScanner-CiL7Z3ey.mjs} +50 -21
- package/dist/{NativeMemoryManager.impl-CB6gJ0NM.mjs → NativeMemoryManager.impl-D9Lkovvn.mjs} +20 -56
- package/dist/{NativeMemoryManager.utils-BML4q1ry.mjs → NativeMemoryManager.utils-BBlAixF5.mjs} +1 -1
- package/dist/{PEAnalyzer-CK0xe0Fs.mjs → PEAnalyzer-DMQ44gen.mjs} +16 -16
- package/dist/PageController-BPJNqqBN.mjs +431 -0
- package/dist/{PointerChainEngine-Cd73qu5b.mjs → PointerChainEngine-K7wN8Z-w.mjs} +10 -7
- package/dist/PrerequisiteError-TuyZIs6n.mjs +20 -0
- package/dist/ProcessRegistry-zGg12QbE.mjs +74 -0
- package/dist/ResponseBuilder-CJXWmWNw.mjs +143 -0
- package/dist/ReverseEvidenceGraph-C02-gXOh.mjs +269 -0
- package/dist/ScriptManager-ZuWD-0Jg.mjs +3003 -0
- package/dist/{Speedhack-CeF0XmEz.mjs → Speedhack-D-z0umeT.mjs} +2 -2
- package/dist/{StructureAnalyzer-D4GkMduU.mjs → StructureAnalyzer-Cav5AVSL.mjs} +9 -6
- package/dist/ToolCatalog-5OJdMiF0.mjs +582 -0
- package/dist/ToolError-jh9whhMd.mjs +15 -0
- package/dist/ToolProbe-DbCFGyrg.mjs +45 -0
- package/dist/ToolRegistry-B9krbTtI.mjs +180 -0
- package/dist/ToolRouter.policy-BGDAGyeH.mjs +344 -0
- package/dist/TraceRecorder-B41Z5XBj.mjs +1286 -0
- package/dist/{Win32API-Bc0QnQsN.mjs → Win32API-C2kjj0ze.mjs} +19 -13
- package/dist/{Win32Debug-DUHt9XUn.mjs → Win32Debug-CKrGOTpo.mjs} +3 -3
- package/dist/WorkflowEngine-DJ6M4opp.mjs +569 -0
- package/dist/analysis-BHeJW2Nb.mjs +1234 -0
- package/dist/antidebug-BRKeyt27.mjs +1081 -0
- package/dist/artifactRetention-CPXkUJXp.mjs +598 -0
- package/dist/artifacts-DkfosXH3.mjs +59 -0
- package/dist/authorization-schema-DRqyJMSk.mjs +31 -0
- package/dist/betterSqlite3-DLSBZodi.mjs +74 -0
- package/dist/binary-instrument--V3MAhJ4.mjs +971 -0
- package/dist/bind-helpers-ClV34xdn.mjs +42 -0
- package/dist/boringssl-inspector-Bo_LOLaS.mjs +180 -0
- package/dist/browser-Dx3_S2cG.mjs +4369 -0
- package/dist/capabilities-CcHlvWgK.mjs +33 -0
- package/dist/concurrency-Drev_Vz9.mjs +41 -0
- package/dist/{constants-CCvsN80K.mjs → constants-CDZLOoVv.mjs} +105 -48
- package/dist/coordination-DgItD9DL.mjs +259 -0
- package/dist/debugger-RS3RSAqs.mjs +1288 -0
- package/dist/definitions-BEoYofW5.mjs +47 -0
- package/dist/definitions-BRaefg3u.mjs +365 -0
- package/dist/definitions-BbkvZkiv.mjs +96 -0
- package/dist/definitions-BtWSHJ3o.mjs +17 -0
- package/dist/definitions-C1gCHO0i.mjs +43 -0
- package/dist/definitions-CDOg_b-l.mjs +138 -0
- package/dist/definitions-CVPD9hzZ.mjs +54 -0
- package/dist/definitions-Cea8Lgl7.mjs +94 -0
- package/dist/definitions-DAgIyjxM.mjs +10 -0
- package/dist/definitions-DJA27nsL.mjs +66 -0
- package/dist/definitions-DKPFU3LW.mjs +25 -0
- package/dist/definitions-DPRpZQ96.mjs +47 -0
- package/dist/definitions-DUE5gmdn.mjs +18 -0
- package/dist/definitions-DYVjOtxa.mjs +26 -0
- package/dist/definitions-DcYLVLCo.mjs +37 -0
- package/dist/definitions-Pp5LI2H4.mjs +27 -0
- package/dist/definitions-j9KdHVNR.mjs +14 -0
- package/dist/definitions-uzkjBwa7.mjs +258 -0
- package/dist/definitions-va-AnLuQ.mjs +28 -0
- package/dist/encoding-DJeqHmpd.mjs +1079 -0
- package/dist/evidence-graph-bridge-DcYizFk2.mjs +136 -0
- package/dist/{factory-CibqTNC8.mjs → factory-C90tBff6.mjs} +41 -56
- package/dist/flat-target-session-Dgax2Cy3.mjs +29 -0
- package/dist/graphql-CoHrhweh.mjs +1197 -0
- package/dist/handlers-4jmR0nMs.mjs +898 -0
- package/dist/handlers-BAHPxcch.mjs +789 -0
- package/dist/handlers-BOs9b907.mjs +2600 -0
- package/dist/handlers-BWXEy6ef.mjs +917 -0
- package/dist/handlers-Bndn6QvE.mjs +111 -0
- package/dist/handlers-BqC4bD4s.mjs +681 -0
- package/dist/handlers-BtYq60bM2.mjs +276 -0
- package/dist/handlers-BzgcB4iv.mjs +799 -0
- package/dist/handlers-CRyRWj2b.mjs +859 -0
- package/dist/handlers-CVv2H1uq.mjs +592 -0
- package/dist/handlers-Dl5a7JS4.mjs +572 -0
- package/dist/handlers-Dx2d7jt7.mjs +2537 -0
- package/dist/handlers-Dz9PYsCa.mjs +2805 -0
- package/dist/handlers-HujRKC3b.mjs +661 -0
- package/dist/handlers.impl-XWXkQfyi.mjs +807 -0
- package/dist/hooks-B1B8NRHL.mjs +898 -0
- package/dist/index.mjs +491 -259
- package/dist/{logger-BmWzC2lM.mjs → logger-Dh_xb7_2.mjs} +14 -6
- package/dist/maintenance-PRMkLVRW.mjs +835 -0
- package/dist/manifest-67Bok-Si.mjs +58 -0
- package/dist/manifest-6lNTMZAB2.mjs +87 -0
- package/dist/manifest-B2duEHiH.mjs +90 -0
- package/dist/manifest-B6EY9Vm8.mjs +57 -0
- package/dist/manifest-B6nKSbyY.mjs +95 -0
- package/dist/manifest-BL8AQNPF.mjs +106 -0
- package/dist/manifest-BSZvJJmV.mjs +47 -0
- package/dist/manifest-BU7qzUyX.mjs +418 -0
- package/dist/manifest-Bl62e8WK.mjs +49 -0
- package/dist/manifest-Bo5cXjdt.mjs +82 -0
- package/dist/manifest-BpS4gtUK.mjs +1347 -0
- package/dist/manifest-Bv65_e2W.mjs +101 -0
- package/dist/manifest-BytNIF4Z.mjs +117 -0
- package/dist/manifest-C-xtsjS3.mjs +81 -0
- package/dist/manifest-CDYl7OhA.mjs +66 -0
- package/dist/manifest-CRZ3xmkD.mjs +61 -0
- package/dist/manifest-CoW6u4Tp.mjs +132 -0
- package/dist/manifest-Cq5zN_8A.mjs +50 -0
- package/dist/manifest-D7YZM_2e.mjs +194 -0
- package/dist/manifest-DE_VrAeQ.mjs +314 -0
- package/dist/manifest-DGsXSCpT.mjs +39 -0
- package/dist/manifest-DJ2vfEuW.mjs +156 -0
- package/dist/manifest-DPXDYhEu.mjs +80 -0
- package/dist/manifest-Dd4fQb0a.mjs +322 -0
- package/dist/manifest-Deq6opGg.mjs +223 -0
- package/dist/manifest-DfJTafJK.mjs +37 -0
- package/dist/manifest-DgOdgN_j.mjs +50 -0
- package/dist/manifest-DlbMW4v4.mjs +47 -0
- package/dist/manifest-DmVfbH0w.mjs +374 -0
- package/dist/manifest-Dog6Ddjr.mjs +109 -0
- package/dist/manifest-DvgU5FWb.mjs +58 -0
- package/dist/manifest-HsfDBs7j.mjs +50 -0
- package/dist/manifest-I8oQHvCG.mjs +186 -0
- package/dist/manifest-NvH_a-av.mjs +786 -0
- package/dist/manifest-cEJU1v0Z.mjs +129 -0
- package/dist/manifest-wOl5XLB12.mjs +112 -0
- package/dist/modules-tZozf0LQ.mjs +10635 -0
- package/dist/mojo-ipc-DXNEXEqb.mjs +640 -0
- package/dist/network-CPVvwvFg.mjs +3852 -0
- package/dist/{artifacts-BbdOMET5.mjs → outputPaths-um7lCRY3.mjs} +219 -216
- package/dist/parse-args-B4cY5Vx5.mjs +39 -0
- package/dist/platform-CYeFoTWp.mjs +2161 -0
- package/dist/process-BTbgcVc6.mjs +1306 -0
- package/dist/proxy-r8YN6nP1.mjs +192 -0
- package/dist/registry-Bl8ZQW61.mjs +34 -0
- package/dist/response-CWhh2aLo.mjs +34 -0
- package/dist/server/plugin-api.mjs +2 -2
- package/dist/shared-state-board-BoZnSoj-.mjs +586 -0
- package/dist/sourcemap-BIDHUVXy.mjs +934 -0
- package/dist/ssrf-policy-Dsqd-DTX.mjs +166 -0
- package/dist/streaming-Dal6utPp.mjs +725 -0
- package/dist/tool-builder-BHJp32mV.mjs +186 -0
- package/dist/transform-DRVgGG90.mjs +1011 -0
- package/dist/types-Bx92KJfT.mjs +4 -0
- package/dist/wasm-BYx5UOeG.mjs +1044 -0
- package/dist/webcrack-Be0_FccV.mjs +747 -0
- package/dist/workflow-BpuKEtvn.mjs +725 -0
- package/package.json +82 -49
- package/dist/ExtensionManager-CPTJhHFg.mjs +0 -2
- package/dist/ToolCatalog-Bq4V2sbJ.mjs +0 -67201
- package/dist/{CacheAdapters-CzFNpD9a.mjs → CacheAdapters-jJFy20G-.mjs} +0 -0
- package/dist/{StealthVerifier-BzBCFiwx.mjs → StealthVerifier-BWmPgQsv.mjs} +0 -0
- package/dist/{VersionDetector-CNXcvD46.mjs → VersionDetector-K3V4vGsw.mjs} +0 -0
- package/dist/{formatAddress-ChCSIRWT.mjs → formatAddress-nnMvEohD.mjs} +0 -0
- package/dist/{types-BBjOqye-.mjs → types-DDBWs9UP.mjs} +1 -1
|
@@ -0,0 +1,859 @@
|
|
|
1
|
+
import { xr as UNIDBG_TIMEOUT_MS } from "./constants-CDZLOoVv.mjs";
|
|
2
|
+
import { a as invokePlugin, c as FridaSession, i as getAvailablePlugins, n as UnidbgRunner, o as HookCodeGenerator, r as HookGenerator, s as GhidraAnalyzer } from "./binary-instrument--V3MAhJ4.mjs";
|
|
3
|
+
import { n as capabilityReport, t as capabilityFailure } from "./capabilities-CcHlvWgK.mjs";
|
|
4
|
+
import { access } from "node:fs/promises";
|
|
5
|
+
import { execFile } from "node:child_process";
|
|
6
|
+
//#region src/server/domains/binary-instrument/handlers/shared.ts
|
|
7
|
+
/**
|
|
8
|
+
* Shared types and helpers for binary-instrument sub-handlers.
|
|
9
|
+
*/
|
|
10
|
+
const UNIDBG_MAX_BUFFER_BYTES = 8 * 1024 * 1024;
|
|
11
|
+
const LEGACY_PLUGIN_FIXES = {
|
|
12
|
+
plugin_frida_bridge: "Install @jshookmcpextension/plugin-frida-bridge and reload extensions.",
|
|
13
|
+
plugin_ghidra_bridge: "Install @jshookmcpextension/plugin-ghidra-bridge and reload extensions.",
|
|
14
|
+
plugin_ida_bridge: "Install @jshookmcpextension/plugin-ida-bridge and reload extensions.",
|
|
15
|
+
plugin_jadx_bridge: "Install @jshookmcpextension/plugin-jadx-bridge and reload extensions."
|
|
16
|
+
};
|
|
17
|
+
function textResponse(text) {
|
|
18
|
+
return { content: [{
|
|
19
|
+
type: "text",
|
|
20
|
+
text
|
|
21
|
+
}] };
|
|
22
|
+
}
|
|
23
|
+
function jsonResponse(payload) {
|
|
24
|
+
return textResponse(JSON.stringify(payload));
|
|
25
|
+
}
|
|
26
|
+
function readRequiredString(args, key) {
|
|
27
|
+
const value = args[key];
|
|
28
|
+
if (typeof value !== "string" || value.trim().length === 0) throw new Error(`${key} is required`);
|
|
29
|
+
return value.trim();
|
|
30
|
+
}
|
|
31
|
+
function readOptionalString(args, key) {
|
|
32
|
+
const value = args[key];
|
|
33
|
+
return typeof value === "string" && value.trim().length > 0 ? value.trim() : void 0;
|
|
34
|
+
}
|
|
35
|
+
function readOptionalNumber(args, key) {
|
|
36
|
+
const value = args[key];
|
|
37
|
+
return typeof value === "number" && Number.isFinite(value) ? value : void 0;
|
|
38
|
+
}
|
|
39
|
+
function readStringArray(args, key) {
|
|
40
|
+
const value = args[key];
|
|
41
|
+
if (!Array.isArray(value)) return [];
|
|
42
|
+
return value.filter((entry) => typeof entry === "string" && entry.length > 0);
|
|
43
|
+
}
|
|
44
|
+
function isRecord(value) {
|
|
45
|
+
return typeof value === "object" && value !== null;
|
|
46
|
+
}
|
|
47
|
+
function isServerContext(value) {
|
|
48
|
+
return isRecord(value) && value["extensionPluginsById"] instanceof Map && value["extensionPluginRuntimeById"] instanceof Map;
|
|
49
|
+
}
|
|
50
|
+
function hasInstalledLegacyPlugin(context, pluginId) {
|
|
51
|
+
if (!context) return void 0;
|
|
52
|
+
const installed = context.extensionPluginsById;
|
|
53
|
+
if (!(installed instanceof Map)) return void 0;
|
|
54
|
+
return installed.has(pluginId);
|
|
55
|
+
}
|
|
56
|
+
function getLegacyPluginFix(pluginId) {
|
|
57
|
+
return LEGACY_PLUGIN_FIXES[pluginId];
|
|
58
|
+
}
|
|
59
|
+
function getLegacyPluginStatus(context, pluginId) {
|
|
60
|
+
const installed = hasInstalledLegacyPlugin(context, pluginId);
|
|
61
|
+
if (installed === true) return {
|
|
62
|
+
status: "available",
|
|
63
|
+
fix: getLegacyPluginFix(pluginId)
|
|
64
|
+
};
|
|
65
|
+
if (installed === false) return {
|
|
66
|
+
status: "unavailable",
|
|
67
|
+
reason: `Plugin ${pluginId.replaceAll("_", "-")} is not installed`,
|
|
68
|
+
fix: getLegacyPluginFix(pluginId)
|
|
69
|
+
};
|
|
70
|
+
return {
|
|
71
|
+
status: "unknown",
|
|
72
|
+
reason: "Extension plugin registry is not available in the current server context",
|
|
73
|
+
fix: "Run inside the full MCP server with extension support enabled."
|
|
74
|
+
};
|
|
75
|
+
}
|
|
76
|
+
async function invokeLegacyPlugin(context, pluginId, toolName, args) {
|
|
77
|
+
const pluginStatus = getLegacyPluginStatus(context, pluginId);
|
|
78
|
+
if (!context || pluginStatus.status !== "available") return jsonResponse({
|
|
79
|
+
...capabilityFailure(toolName, pluginId, pluginStatus.reason ?? `Plugin ${pluginId.replaceAll("_", "-")} is not available`, pluginStatus.fix),
|
|
80
|
+
status: pluginStatus.status
|
|
81
|
+
});
|
|
82
|
+
const result = await invokePlugin(context, {
|
|
83
|
+
pluginId,
|
|
84
|
+
toolName,
|
|
85
|
+
args
|
|
86
|
+
});
|
|
87
|
+
if (result.success) return jsonResponse(result);
|
|
88
|
+
return jsonResponse({ ...capabilityFailure(toolName, pluginId, result.error ?? "Plugin invocation failed", pluginStatus.fix) });
|
|
89
|
+
}
|
|
90
|
+
function readHookOptions(args, key) {
|
|
91
|
+
const raw = args[key];
|
|
92
|
+
if (!isRecord(raw)) return void 0;
|
|
93
|
+
const options = {};
|
|
94
|
+
const includeArgs = raw["includeArgs"];
|
|
95
|
+
const includeRetAddr = raw["includeRetAddr"];
|
|
96
|
+
if (typeof includeArgs === "boolean") options.includeArgs = includeArgs;
|
|
97
|
+
if (typeof includeRetAddr === "boolean") options.includeRetAddr = includeRetAddr;
|
|
98
|
+
return options;
|
|
99
|
+
}
|
|
100
|
+
function parsePid(target) {
|
|
101
|
+
if (!/^\d+$/.test(target)) return null;
|
|
102
|
+
const parsed = Number.parseInt(target, 10);
|
|
103
|
+
return Number.isNaN(parsed) ? null : parsed;
|
|
104
|
+
}
|
|
105
|
+
function makeMockId(value) {
|
|
106
|
+
return value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 24);
|
|
107
|
+
}
|
|
108
|
+
async function getUnidbgAvailability() {
|
|
109
|
+
const jarPath = process.env["UNIDBG_JAR"] ?? "";
|
|
110
|
+
if (jarPath.length === 0) return {
|
|
111
|
+
available: false,
|
|
112
|
+
reason: "UNIDBG_JAR is not configured",
|
|
113
|
+
command: "java",
|
|
114
|
+
jarPath: ""
|
|
115
|
+
};
|
|
116
|
+
try {
|
|
117
|
+
await access(jarPath);
|
|
118
|
+
} catch {
|
|
119
|
+
return {
|
|
120
|
+
available: false,
|
|
121
|
+
reason: `UNIDBG_JAR not found: ${jarPath}`,
|
|
122
|
+
command: "java",
|
|
123
|
+
jarPath
|
|
124
|
+
};
|
|
125
|
+
}
|
|
126
|
+
return {
|
|
127
|
+
available: true,
|
|
128
|
+
reason: "",
|
|
129
|
+
command: "java",
|
|
130
|
+
jarPath
|
|
131
|
+
};
|
|
132
|
+
}
|
|
133
|
+
function execFileUtf8(file, args, timeoutMs) {
|
|
134
|
+
return new Promise((resolve, reject) => {
|
|
135
|
+
execFile(file, args, {
|
|
136
|
+
timeout: timeoutMs,
|
|
137
|
+
windowsHide: true,
|
|
138
|
+
maxBuffer: UNIDBG_MAX_BUFFER_BYTES,
|
|
139
|
+
encoding: "utf8"
|
|
140
|
+
}, (error, stdout, stderr) => {
|
|
141
|
+
if (error) {
|
|
142
|
+
reject(error);
|
|
143
|
+
return;
|
|
144
|
+
}
|
|
145
|
+
resolve({
|
|
146
|
+
stdout: typeof stdout === "string" ? stdout : "",
|
|
147
|
+
stderr: typeof stderr === "string" ? stderr : ""
|
|
148
|
+
});
|
|
149
|
+
});
|
|
150
|
+
});
|
|
151
|
+
}
|
|
152
|
+
function isGhidraAnalysisOutput(value) {
|
|
153
|
+
return isRecord(value) && Array.isArray(value["functions"]) && Array.isArray(value["imports"]);
|
|
154
|
+
}
|
|
155
|
+
function toHookTemplates(value) {
|
|
156
|
+
const templates = [];
|
|
157
|
+
for (const entry of value) {
|
|
158
|
+
if (!isRecord(entry)) continue;
|
|
159
|
+
const functionName = readStringRecordField(entry, "functionName");
|
|
160
|
+
const hookCode = readStringRecordField(entry, "hookCode");
|
|
161
|
+
const description = readStringRecordField(entry, "description");
|
|
162
|
+
const parameters = parseHookParameters(entry["parameters"]);
|
|
163
|
+
if (!functionName || !hookCode || !description) continue;
|
|
164
|
+
templates.push({
|
|
165
|
+
functionName,
|
|
166
|
+
hookCode,
|
|
167
|
+
description,
|
|
168
|
+
parameters
|
|
169
|
+
});
|
|
170
|
+
}
|
|
171
|
+
return templates;
|
|
172
|
+
}
|
|
173
|
+
function readStringRecordField(record, key) {
|
|
174
|
+
const value = record[key];
|
|
175
|
+
return typeof value === "string" ? value : void 0;
|
|
176
|
+
}
|
|
177
|
+
function parseHookParameters(value) {
|
|
178
|
+
if (!Array.isArray(value)) return [];
|
|
179
|
+
const parameters = [];
|
|
180
|
+
for (const entry of value) {
|
|
181
|
+
if (!isRecord(entry)) continue;
|
|
182
|
+
const name = readStringRecordField(entry, "name");
|
|
183
|
+
const type = readStringRecordField(entry, "type");
|
|
184
|
+
const description = readStringRecordField(entry, "description");
|
|
185
|
+
if (name && type && description) parameters.push({
|
|
186
|
+
name,
|
|
187
|
+
type,
|
|
188
|
+
description
|
|
189
|
+
});
|
|
190
|
+
}
|
|
191
|
+
return parameters;
|
|
192
|
+
}
|
|
193
|
+
//#endregion
|
|
194
|
+
//#region src/server/domains/binary-instrument/handlers/frida-handlers.ts
|
|
195
|
+
/**
|
|
196
|
+
* Frida sub-handler — attach, runScript, detach, listSessions, generateScript,
|
|
197
|
+
* enumerateModules, enumerateFunctions, findSymbols.
|
|
198
|
+
*/
|
|
199
|
+
var FridaHandlers = class {
|
|
200
|
+
state;
|
|
201
|
+
constructor(state) {
|
|
202
|
+
this.state = state;
|
|
203
|
+
}
|
|
204
|
+
async handleFridaAttach(args) {
|
|
205
|
+
const legacyPid = readOptionalString(args, "pid");
|
|
206
|
+
if (!readOptionalString(args, "target") && legacyPid) return invokeLegacyPlugin(this.state.context, "plugin_frida_bridge", "frida_attach", args);
|
|
207
|
+
const target = readRequiredString(args, "target");
|
|
208
|
+
const frida = this.getFridaSession();
|
|
209
|
+
const availability = await frida.getAvailability();
|
|
210
|
+
if (!availability.available) {
|
|
211
|
+
const sessionId = `mock-frida-${makeMockId(target)}`;
|
|
212
|
+
return jsonResponse({
|
|
213
|
+
success: false,
|
|
214
|
+
available: false,
|
|
215
|
+
capability: "frida_cli",
|
|
216
|
+
fix: "Install frida-tools and ensure the frida CLI is on PATH.",
|
|
217
|
+
target,
|
|
218
|
+
sessionId,
|
|
219
|
+
reason: availability.reason ?? "Frida CLI is not available",
|
|
220
|
+
sessions: [{
|
|
221
|
+
id: sessionId,
|
|
222
|
+
target,
|
|
223
|
+
pid: parsePid(target),
|
|
224
|
+
status: "unavailable"
|
|
225
|
+
}]
|
|
226
|
+
});
|
|
227
|
+
}
|
|
228
|
+
let sessionId;
|
|
229
|
+
try {
|
|
230
|
+
sessionId = await frida.attach(target);
|
|
231
|
+
} catch (error) {
|
|
232
|
+
return jsonResponse({
|
|
233
|
+
success: false,
|
|
234
|
+
available: true,
|
|
235
|
+
capability: "frida_attach",
|
|
236
|
+
fix: "Run the server elevated or choose a target process that allows Frida injection.",
|
|
237
|
+
target,
|
|
238
|
+
reason: error instanceof Error ? error.message : String(error),
|
|
239
|
+
sessions: frida.listSessions()
|
|
240
|
+
});
|
|
241
|
+
}
|
|
242
|
+
this.state.context?.eventBus.emit("frida:attached", {
|
|
243
|
+
target,
|
|
244
|
+
sessionId,
|
|
245
|
+
timestamp: (/* @__PURE__ */ new Date()).toISOString()
|
|
246
|
+
});
|
|
247
|
+
return jsonResponse({
|
|
248
|
+
success: true,
|
|
249
|
+
available: true,
|
|
250
|
+
target,
|
|
251
|
+
sessionId,
|
|
252
|
+
sessions: frida.listSessions()
|
|
253
|
+
});
|
|
254
|
+
}
|
|
255
|
+
async handleFridaEnumerateModules(args) {
|
|
256
|
+
const sessionId = readRequiredString(args, "sessionId");
|
|
257
|
+
const frida = this.getFridaSession();
|
|
258
|
+
const availability = await frida.getAvailability();
|
|
259
|
+
if (!availability.available) return jsonResponse({
|
|
260
|
+
available: false,
|
|
261
|
+
capability: "frida_cli",
|
|
262
|
+
fix: "Install frida-tools and ensure the frida CLI is on PATH.",
|
|
263
|
+
sessionId,
|
|
264
|
+
reason: availability.reason ?? "Frida CLI is not available",
|
|
265
|
+
modules: [{
|
|
266
|
+
name: "mock-module",
|
|
267
|
+
base: "0x0",
|
|
268
|
+
size: 0,
|
|
269
|
+
path: "<unavailable>"
|
|
270
|
+
}]
|
|
271
|
+
});
|
|
272
|
+
if (!frida.useSession(sessionId)) return jsonResponse({
|
|
273
|
+
available: false,
|
|
274
|
+
capability: "frida_session",
|
|
275
|
+
fix: "Call frida_attach first and reuse the returned sessionId.",
|
|
276
|
+
sessionId,
|
|
277
|
+
reason: `Unknown Frida session: ${sessionId}`,
|
|
278
|
+
modules: []
|
|
279
|
+
});
|
|
280
|
+
const modules = await frida.enumerateModules();
|
|
281
|
+
const diagnostics = frida.getSessionDiagnostics(sessionId);
|
|
282
|
+
if (diagnostics?.status === "error" && diagnostics.lastError) return jsonResponse({
|
|
283
|
+
success: false,
|
|
284
|
+
available: true,
|
|
285
|
+
sessionId,
|
|
286
|
+
reason: diagnostics.lastError,
|
|
287
|
+
modules
|
|
288
|
+
});
|
|
289
|
+
return jsonResponse({
|
|
290
|
+
success: true,
|
|
291
|
+
available: true,
|
|
292
|
+
sessionId,
|
|
293
|
+
modules
|
|
294
|
+
});
|
|
295
|
+
}
|
|
296
|
+
async handleFridaRunScript(args) {
|
|
297
|
+
const sessionId = readOptionalString(args, "sessionId");
|
|
298
|
+
if (!sessionId) return textResponse("Missing required string argument: sessionId");
|
|
299
|
+
const script = readRequiredString(args, "script");
|
|
300
|
+
const frida = this.getFridaSession();
|
|
301
|
+
const availability = await frida.getAvailability();
|
|
302
|
+
if (!availability.available) return {
|
|
303
|
+
available: false,
|
|
304
|
+
capability: "frida_cli",
|
|
305
|
+
fix: "Install frida-tools and ensure the frida CLI is on PATH.",
|
|
306
|
+
sessionId,
|
|
307
|
+
reason: availability.reason ?? "Frida CLI is not available",
|
|
308
|
+
execution: {
|
|
309
|
+
output: "",
|
|
310
|
+
error: "Frida unavailable"
|
|
311
|
+
}
|
|
312
|
+
};
|
|
313
|
+
if (!frida.useSession(sessionId)) return {
|
|
314
|
+
available: false,
|
|
315
|
+
capability: "frida_session",
|
|
316
|
+
fix: "Call frida_attach first and reuse the returned sessionId.",
|
|
317
|
+
sessionId,
|
|
318
|
+
reason: `Unknown Frida session: ${sessionId}`,
|
|
319
|
+
execution: {
|
|
320
|
+
output: "",
|
|
321
|
+
error: "Unknown session"
|
|
322
|
+
}
|
|
323
|
+
};
|
|
324
|
+
const execution = await frida.executeScript(script);
|
|
325
|
+
if (execution.error) return jsonResponse({
|
|
326
|
+
success: false,
|
|
327
|
+
available: true,
|
|
328
|
+
sessionId,
|
|
329
|
+
reason: execution.error,
|
|
330
|
+
execution
|
|
331
|
+
});
|
|
332
|
+
return jsonResponse({
|
|
333
|
+
success: true,
|
|
334
|
+
available: true,
|
|
335
|
+
sessionId,
|
|
336
|
+
execution
|
|
337
|
+
});
|
|
338
|
+
}
|
|
339
|
+
async handleFridaDetach(args) {
|
|
340
|
+
const sessionId = readOptionalString(args, "sessionId");
|
|
341
|
+
if (!sessionId) return textResponse("Missing required string argument: sessionId");
|
|
342
|
+
const frida = this.getFridaSession();
|
|
343
|
+
if ((await frida.getAvailability()).available && frida.hasSession(sessionId)) {
|
|
344
|
+
frida.useSession(sessionId);
|
|
345
|
+
await frida.detach();
|
|
346
|
+
return jsonResponse({
|
|
347
|
+
success: true,
|
|
348
|
+
sessionId,
|
|
349
|
+
detached: true
|
|
350
|
+
});
|
|
351
|
+
}
|
|
352
|
+
return invokeLegacyPlugin(this.state.context, "plugin_frida_bridge", "frida_detach", args);
|
|
353
|
+
}
|
|
354
|
+
async handleFridaListSessions(_args) {
|
|
355
|
+
const frida = this.getFridaSession();
|
|
356
|
+
const availability = await frida.getAvailability();
|
|
357
|
+
const sessions = frida.listSessions();
|
|
358
|
+
if (availability.available) return jsonResponse({
|
|
359
|
+
success: true,
|
|
360
|
+
available: true,
|
|
361
|
+
sessions,
|
|
362
|
+
count: sessions.length
|
|
363
|
+
});
|
|
364
|
+
const pluginStatus = getLegacyPluginStatus(this.state.context, "plugin_frida_bridge");
|
|
365
|
+
if (sessions.length > 0 || pluginStatus.status === "unavailable") return jsonResponse({
|
|
366
|
+
success: true,
|
|
367
|
+
available: false,
|
|
368
|
+
capability: "frida_cli",
|
|
369
|
+
reason: availability.reason ?? "Frida CLI is not available",
|
|
370
|
+
fix: "Install frida-tools and ensure the frida CLI is on PATH.",
|
|
371
|
+
sessions,
|
|
372
|
+
count: sessions.length
|
|
373
|
+
});
|
|
374
|
+
return invokeLegacyPlugin(this.state.context, "plugin_frida_bridge", "frida_list_sessions", _args);
|
|
375
|
+
}
|
|
376
|
+
async handleFridaGenerateScript(args) {
|
|
377
|
+
const target = readOptionalString(args, "target") ?? "unknown";
|
|
378
|
+
const template = readOptionalString(args, "template") ?? "trace";
|
|
379
|
+
const functionName = readOptionalString(args, "functionName") ?? "target_function";
|
|
380
|
+
const templates = [{
|
|
381
|
+
functionName,
|
|
382
|
+
hookCode: `console.log('[${template}] ${functionName} called');`,
|
|
383
|
+
description: `${template} hook for ${functionName}`,
|
|
384
|
+
parameters: []
|
|
385
|
+
}];
|
|
386
|
+
return jsonResponse({
|
|
387
|
+
success: true,
|
|
388
|
+
target,
|
|
389
|
+
template,
|
|
390
|
+
functionName,
|
|
391
|
+
script: this.state.hookCodeGenerator.exportScript(templates, "frida")
|
|
392
|
+
});
|
|
393
|
+
}
|
|
394
|
+
async handleFridaEnumerateFunctions(args) {
|
|
395
|
+
const sessionId = readRequiredString(args, "sessionId");
|
|
396
|
+
const moduleName = readRequiredString(args, "moduleName");
|
|
397
|
+
const frida = this.getFridaSession();
|
|
398
|
+
const availability = await frida.getAvailability();
|
|
399
|
+
if (!availability.available) return {
|
|
400
|
+
available: false,
|
|
401
|
+
capability: "frida_cli",
|
|
402
|
+
fix: "Install frida-tools and ensure the frida CLI is on PATH.",
|
|
403
|
+
sessionId,
|
|
404
|
+
moduleName,
|
|
405
|
+
reason: availability.reason ?? "Frida CLI is not available",
|
|
406
|
+
functions: []
|
|
407
|
+
};
|
|
408
|
+
if (!frida.useSession(sessionId)) return {
|
|
409
|
+
available: false,
|
|
410
|
+
capability: "frida_session",
|
|
411
|
+
fix: "Call frida_attach first and reuse the returned sessionId.",
|
|
412
|
+
sessionId,
|
|
413
|
+
reason: `Unknown Frida session: ${sessionId}`,
|
|
414
|
+
functions: []
|
|
415
|
+
};
|
|
416
|
+
const functions = await frida.enumerateFunctions(moduleName);
|
|
417
|
+
const diagnostics = frida.getSessionDiagnostics(sessionId);
|
|
418
|
+
if (diagnostics?.status === "error" && diagnostics.lastError) return jsonResponse({
|
|
419
|
+
success: false,
|
|
420
|
+
available: true,
|
|
421
|
+
sessionId,
|
|
422
|
+
moduleName,
|
|
423
|
+
reason: diagnostics.lastError,
|
|
424
|
+
functions,
|
|
425
|
+
count: functions.length
|
|
426
|
+
});
|
|
427
|
+
return jsonResponse({
|
|
428
|
+
success: true,
|
|
429
|
+
available: true,
|
|
430
|
+
sessionId,
|
|
431
|
+
moduleName,
|
|
432
|
+
functions,
|
|
433
|
+
count: functions.length
|
|
434
|
+
});
|
|
435
|
+
}
|
|
436
|
+
async handleFridaFindSymbols(args) {
|
|
437
|
+
const sessionId = readRequiredString(args, "sessionId");
|
|
438
|
+
const pattern = readRequiredString(args, "pattern");
|
|
439
|
+
const frida = this.getFridaSession();
|
|
440
|
+
const availability = await frida.getAvailability();
|
|
441
|
+
if (!availability.available) return {
|
|
442
|
+
available: false,
|
|
443
|
+
capability: "frida_cli",
|
|
444
|
+
fix: "Install frida-tools and ensure the frida CLI is on PATH.",
|
|
445
|
+
sessionId,
|
|
446
|
+
pattern,
|
|
447
|
+
reason: availability.reason ?? "Frida CLI is not available",
|
|
448
|
+
symbols: []
|
|
449
|
+
};
|
|
450
|
+
if (!frida.useSession(sessionId)) return {
|
|
451
|
+
available: false,
|
|
452
|
+
capability: "frida_session",
|
|
453
|
+
fix: "Call frida_attach first and reuse the returned sessionId.",
|
|
454
|
+
sessionId,
|
|
455
|
+
reason: `Unknown Frida session: ${sessionId}`,
|
|
456
|
+
symbols: []
|
|
457
|
+
};
|
|
458
|
+
const symbols = await frida.findSymbols(pattern);
|
|
459
|
+
const diagnostics = frida.getSessionDiagnostics(sessionId);
|
|
460
|
+
if (diagnostics?.status === "error" && diagnostics.lastError) return jsonResponse({
|
|
461
|
+
success: false,
|
|
462
|
+
available: true,
|
|
463
|
+
sessionId,
|
|
464
|
+
pattern,
|
|
465
|
+
reason: diagnostics.lastError,
|
|
466
|
+
symbols,
|
|
467
|
+
count: symbols.length
|
|
468
|
+
});
|
|
469
|
+
return jsonResponse({
|
|
470
|
+
success: true,
|
|
471
|
+
available: true,
|
|
472
|
+
sessionId,
|
|
473
|
+
pattern,
|
|
474
|
+
symbols,
|
|
475
|
+
count: symbols.length
|
|
476
|
+
});
|
|
477
|
+
}
|
|
478
|
+
getFridaSession() {
|
|
479
|
+
if (!this.state.fridaSession) this.state.fridaSession = new FridaSession();
|
|
480
|
+
return this.state.fridaSession;
|
|
481
|
+
}
|
|
482
|
+
};
|
|
483
|
+
//#endregion
|
|
484
|
+
//#region src/server/domains/binary-instrument/handlers/analysis-handlers.ts
|
|
485
|
+
/**
|
|
486
|
+
* Static analysis sub-handler — Ghidra, IDA, JADX, Unidbg, hooks, plugins.
|
|
487
|
+
*/
|
|
488
|
+
var AnalysisHandlers = class {
|
|
489
|
+
state;
|
|
490
|
+
constructor(state) {
|
|
491
|
+
this.state = state;
|
|
492
|
+
}
|
|
493
|
+
async handleGhidraAnalyze(args) {
|
|
494
|
+
const legacyTargetPath = readOptionalString(args, "targetPath");
|
|
495
|
+
if (!readOptionalString(args, "binaryPath") && legacyTargetPath) return invokeLegacyPlugin(this.state.context, "plugin_ghidra_bridge", "ghidra_analyze", args);
|
|
496
|
+
const binaryPath = readRequiredString(args, "binaryPath");
|
|
497
|
+
const timeout = readOptionalNumber(args, "timeout");
|
|
498
|
+
const ghidra = this.getGhidraAnalyzer();
|
|
499
|
+
const availability = await ghidra.getAvailability();
|
|
500
|
+
const analysis = await ghidra.analyze(binaryPath, timeout !== void 0 ? { timeout } : void 0);
|
|
501
|
+
if (!availability.available) return {
|
|
502
|
+
available: false,
|
|
503
|
+
capability: "ghidra_headless",
|
|
504
|
+
fix: "Install Ghidra and ensure analyzeHeadless is on PATH.",
|
|
505
|
+
binaryPath,
|
|
506
|
+
reason: availability.reason ?? "Ghidra analyzeHeadless is not available",
|
|
507
|
+
analysis
|
|
508
|
+
};
|
|
509
|
+
return {
|
|
510
|
+
available: true,
|
|
511
|
+
binaryPath,
|
|
512
|
+
analysis
|
|
513
|
+
};
|
|
514
|
+
}
|
|
515
|
+
async handleGhidraDecompile(args) {
|
|
516
|
+
return invokeLegacyPlugin(this.state.context, "plugin_ghidra_bridge", "ghidra_decompile", args);
|
|
517
|
+
}
|
|
518
|
+
async handleIdaDecompile(args) {
|
|
519
|
+
return invokeLegacyPlugin(this.state.context, "plugin_ida_bridge", "ida_decompile", args);
|
|
520
|
+
}
|
|
521
|
+
async handleJadxDecompile(args) {
|
|
522
|
+
return invokeLegacyPlugin(this.state.context, "plugin_jadx_bridge", "jadx_decompile", args);
|
|
523
|
+
}
|
|
524
|
+
async handleGenerateHooks(args) {
|
|
525
|
+
const legacyGhidraOutput = readOptionalString(args, "ghidraOutput");
|
|
526
|
+
if (legacyGhidraOutput) return this.handleLegacyGenerateHooks(legacyGhidraOutput);
|
|
527
|
+
const legacyGhidraOutputObj = args["ghidraOutput"];
|
|
528
|
+
if (isRecord(legacyGhidraOutputObj)) return this.handleLegacyGenerateHooks(JSON.stringify(legacyGhidraOutputObj));
|
|
529
|
+
const symbols = readStringArray(args, "symbols");
|
|
530
|
+
if (symbols.length === 0) return textResponse("symbols or ghidraOutput is required");
|
|
531
|
+
const options = readHookOptions(args, "options");
|
|
532
|
+
const script = this.getHookGenerator().generateFridaHookScript(symbols, options);
|
|
533
|
+
return jsonResponse({
|
|
534
|
+
available: true,
|
|
535
|
+
symbolCount: symbols.length,
|
|
536
|
+
script
|
|
537
|
+
});
|
|
538
|
+
}
|
|
539
|
+
async handleExportHookScript(args) {
|
|
540
|
+
const rawTemplates = readOptionalString(args, "hookTemplates");
|
|
541
|
+
if (!rawTemplates) {
|
|
542
|
+
const generated = this.state.hookCodeGenerator.exportScript([], "frida");
|
|
543
|
+
return jsonResponse({
|
|
544
|
+
format: "frida",
|
|
545
|
+
hookCount: 0,
|
|
546
|
+
script: generated.includes("Java.perform") ? generated : `Java.perform(function() {\n${generated}\n});`
|
|
547
|
+
});
|
|
548
|
+
}
|
|
549
|
+
try {
|
|
550
|
+
const parsed = JSON.parse(rawTemplates);
|
|
551
|
+
if (!Array.isArray(parsed)) return textResponse("Invalid JSON");
|
|
552
|
+
const templates = toHookTemplates(parsed);
|
|
553
|
+
const script = this.state.hookCodeGenerator.exportScript(templates, "frida");
|
|
554
|
+
return jsonResponse({
|
|
555
|
+
format: "frida",
|
|
556
|
+
hookCount: templates.length,
|
|
557
|
+
script
|
|
558
|
+
});
|
|
559
|
+
} catch {
|
|
560
|
+
return textResponse("Invalid JSON");
|
|
561
|
+
}
|
|
562
|
+
}
|
|
563
|
+
async handleUnidbgEmulate(args) {
|
|
564
|
+
const binaryPath = readRequiredString(args, "binaryPath");
|
|
565
|
+
const functionName = readRequiredString(args, "functionName");
|
|
566
|
+
const invokeArgs = readStringArray(args, "args");
|
|
567
|
+
const availability = await getUnidbgAvailability();
|
|
568
|
+
if (!availability.available) return {
|
|
569
|
+
available: false,
|
|
570
|
+
capability: "unidbg_jar",
|
|
571
|
+
fix: "Set UNIDBG_JAR to a reachable Unidbg JAR path.",
|
|
572
|
+
binaryPath,
|
|
573
|
+
functionName,
|
|
574
|
+
args: invokeArgs,
|
|
575
|
+
reason: availability.reason,
|
|
576
|
+
result: {
|
|
577
|
+
returnValue: "0x0",
|
|
578
|
+
stdout: "",
|
|
579
|
+
stderr: "",
|
|
580
|
+
trace: ["mock-unidbg-unavailable"]
|
|
581
|
+
}
|
|
582
|
+
};
|
|
583
|
+
const result = await execFileUtf8(availability.command, [
|
|
584
|
+
"-jar",
|
|
585
|
+
availability.jarPath,
|
|
586
|
+
binaryPath,
|
|
587
|
+
functionName,
|
|
588
|
+
...invokeArgs
|
|
589
|
+
], UNIDBG_TIMEOUT_MS);
|
|
590
|
+
return {
|
|
591
|
+
available: true,
|
|
592
|
+
binaryPath,
|
|
593
|
+
functionName,
|
|
594
|
+
args: invokeArgs,
|
|
595
|
+
result: {
|
|
596
|
+
returnValue: "0x0",
|
|
597
|
+
stdout: result.stdout.trim(),
|
|
598
|
+
stderr: result.stderr.trim(),
|
|
599
|
+
trace: []
|
|
600
|
+
}
|
|
601
|
+
};
|
|
602
|
+
}
|
|
603
|
+
async handleUnidbgLaunch(args) {
|
|
604
|
+
const soPath = readOptionalString(args, "soPath");
|
|
605
|
+
if (!soPath) return textResponse("Missing required string argument: soPath");
|
|
606
|
+
const arch = readOptionalString(args, "arch") ?? "arm";
|
|
607
|
+
try {
|
|
608
|
+
const result = await this.state.unidbgRunner.launch(soPath, arch);
|
|
609
|
+
return {
|
|
610
|
+
available: true,
|
|
611
|
+
sessionId: result.sessionId,
|
|
612
|
+
soPath: result.soPath,
|
|
613
|
+
arch: result.arch,
|
|
614
|
+
sessions: this.state.unidbgRunner.listSessions()
|
|
615
|
+
};
|
|
616
|
+
} catch (error) {
|
|
617
|
+
return {
|
|
618
|
+
available: false,
|
|
619
|
+
capability: "unidbg_jar",
|
|
620
|
+
fix: "Set UNIDBG_JAR to a reachable Unidbg JAR path and retry.",
|
|
621
|
+
soPath,
|
|
622
|
+
arch,
|
|
623
|
+
reason: error instanceof Error ? error.message : String(error),
|
|
624
|
+
sessions: this.state.unidbgRunner.listSessions()
|
|
625
|
+
};
|
|
626
|
+
}
|
|
627
|
+
}
|
|
628
|
+
async handleUnidbgCall(args) {
|
|
629
|
+
const sessionId = readOptionalString(args, "sessionId");
|
|
630
|
+
if (!sessionId) return textResponse("Missing required string argument: sessionId");
|
|
631
|
+
const functionName = readOptionalString(args, "functionName");
|
|
632
|
+
if (!functionName) return textResponse("Missing required string argument: functionName");
|
|
633
|
+
const callArgs = isRecord(args["args"]) ? args["args"] : {};
|
|
634
|
+
try {
|
|
635
|
+
return jsonResponse(await this.state.unidbgRunner.callFunction(sessionId, functionName, callArgs));
|
|
636
|
+
} catch (error) {
|
|
637
|
+
const message = error instanceof Error ? error.message : String(error);
|
|
638
|
+
return textResponse(message.startsWith("No unidbg session found") ? `${message} (not found)` : message);
|
|
639
|
+
}
|
|
640
|
+
}
|
|
641
|
+
async handleUnidbgTrace(args) {
|
|
642
|
+
const sessionId = readOptionalString(args, "sessionId");
|
|
643
|
+
if (!sessionId) return textResponse("Missing required string argument: sessionId");
|
|
644
|
+
try {
|
|
645
|
+
return jsonResponse(await this.state.unidbgRunner.trace(sessionId));
|
|
646
|
+
} catch (error) {
|
|
647
|
+
const message = error instanceof Error ? error.message : String(error);
|
|
648
|
+
return textResponse(message.startsWith("No unidbg session found") ? `${message} (not found)` : message);
|
|
649
|
+
}
|
|
650
|
+
}
|
|
651
|
+
async handleGetAvailablePlugins(_args) {
|
|
652
|
+
const plugins = this.state.context ? getAvailablePlugins(this.state.context) : [];
|
|
653
|
+
return jsonResponse({
|
|
654
|
+
plugins,
|
|
655
|
+
count: plugins.length
|
|
656
|
+
});
|
|
657
|
+
}
|
|
658
|
+
getGhidraAnalyzer() {
|
|
659
|
+
if (!this.state.ghidra) this.state.ghidra = new GhidraAnalyzer();
|
|
660
|
+
return this.state.ghidra;
|
|
661
|
+
}
|
|
662
|
+
getHookGenerator() {
|
|
663
|
+
if (!this.state.hookGen) this.state.hookGen = new HookGenerator();
|
|
664
|
+
return this.state.hookGen;
|
|
665
|
+
}
|
|
666
|
+
handleLegacyGenerateHooks(ghidraOutput) {
|
|
667
|
+
let parsed;
|
|
668
|
+
try {
|
|
669
|
+
parsed = JSON.parse(ghidraOutput);
|
|
670
|
+
} catch {
|
|
671
|
+
return textResponse("Invalid JSON");
|
|
672
|
+
}
|
|
673
|
+
if (!isGhidraAnalysisOutput(parsed)) return textResponse("ghidraOutput is required");
|
|
674
|
+
const hooks = this.state.hookCodeGenerator.generateHooks(parsed);
|
|
675
|
+
return jsonResponse({
|
|
676
|
+
count: hooks.length,
|
|
677
|
+
hooks
|
|
678
|
+
});
|
|
679
|
+
}
|
|
680
|
+
};
|
|
681
|
+
//#endregion
|
|
682
|
+
//#region src/server/domains/binary-instrument/handlers/capability-handlers.ts
|
|
683
|
+
var CapabilityHandlers = class {
|
|
684
|
+
constructor(state) {
|
|
685
|
+
this.state = state;
|
|
686
|
+
}
|
|
687
|
+
async handleBinaryInstrumentCapabilities() {
|
|
688
|
+
const fridaAvailability = await this.getFridaSession().getAvailability();
|
|
689
|
+
const ghidraAvailability = await this.getGhidraAnalyzer().getAvailability();
|
|
690
|
+
const unidbgAvailability = await getUnidbgAvailability();
|
|
691
|
+
return jsonResponse(capabilityReport("binary_instrument_capabilities", [
|
|
692
|
+
{
|
|
693
|
+
capability: "frida_cli",
|
|
694
|
+
status: fridaAvailability.available ? "available" : "unavailable",
|
|
695
|
+
reason: fridaAvailability.reason,
|
|
696
|
+
fix: fridaAvailability.available ? void 0 : "Install frida-tools and ensure the frida CLI is on PATH.",
|
|
697
|
+
details: {
|
|
698
|
+
tools: [
|
|
699
|
+
"frida_attach",
|
|
700
|
+
"frida_enumerate_modules",
|
|
701
|
+
"frida_run_script",
|
|
702
|
+
"frida_enumerate_functions",
|
|
703
|
+
"frida_find_symbols"
|
|
704
|
+
],
|
|
705
|
+
...fridaAvailability.path ? { path: fridaAvailability.path } : {},
|
|
706
|
+
...fridaAvailability.version ? { version: fridaAvailability.version } : {}
|
|
707
|
+
}
|
|
708
|
+
},
|
|
709
|
+
{
|
|
710
|
+
capability: "plugin_frida_bridge",
|
|
711
|
+
...getLegacyPluginStatus(this.state.context, "plugin_frida_bridge"),
|
|
712
|
+
details: { tools: [
|
|
713
|
+
"frida_attach",
|
|
714
|
+
"frida_detach",
|
|
715
|
+
"frida_list_sessions"
|
|
716
|
+
] }
|
|
717
|
+
},
|
|
718
|
+
{
|
|
719
|
+
capability: "ghidra_headless",
|
|
720
|
+
status: ghidraAvailability.available ? "available" : "unavailable",
|
|
721
|
+
reason: ghidraAvailability.reason,
|
|
722
|
+
fix: ghidraAvailability.available ? void 0 : "Install Ghidra and ensure analyzeHeadless is on PATH.",
|
|
723
|
+
details: {
|
|
724
|
+
tools: ["ghidra_analyze"],
|
|
725
|
+
...ghidraAvailability.path ? { path: ghidraAvailability.path } : {},
|
|
726
|
+
...ghidraAvailability.version ? { version: ghidraAvailability.version } : {}
|
|
727
|
+
}
|
|
728
|
+
},
|
|
729
|
+
{
|
|
730
|
+
capability: "plugin_ghidra_bridge",
|
|
731
|
+
...getLegacyPluginStatus(this.state.context, "plugin_ghidra_bridge"),
|
|
732
|
+
details: { tools: ["ghidra_decompile"] }
|
|
733
|
+
},
|
|
734
|
+
{
|
|
735
|
+
capability: "plugin_ida_bridge",
|
|
736
|
+
...getLegacyPluginStatus(this.state.context, "plugin_ida_bridge"),
|
|
737
|
+
details: { tools: ["ida_decompile"] }
|
|
738
|
+
},
|
|
739
|
+
{
|
|
740
|
+
capability: "plugin_jadx_bridge",
|
|
741
|
+
...getLegacyPluginStatus(this.state.context, "plugin_jadx_bridge"),
|
|
742
|
+
details: { tools: ["jadx_decompile"] }
|
|
743
|
+
},
|
|
744
|
+
{
|
|
745
|
+
capability: "unidbg_jar",
|
|
746
|
+
status: unidbgAvailability.available ? "available" : "unavailable",
|
|
747
|
+
reason: unidbgAvailability.reason || void 0,
|
|
748
|
+
fix: unidbgAvailability.available ? void 0 : "Set UNIDBG_JAR to a reachable Unidbg JAR path.",
|
|
749
|
+
details: {
|
|
750
|
+
tools: [
|
|
751
|
+
"unidbg_emulate",
|
|
752
|
+
"unidbg_launch",
|
|
753
|
+
"unidbg_call",
|
|
754
|
+
"unidbg_trace"
|
|
755
|
+
],
|
|
756
|
+
command: unidbgAvailability.command,
|
|
757
|
+
jarPath: unidbgAvailability.jarPath
|
|
758
|
+
}
|
|
759
|
+
}
|
|
760
|
+
]));
|
|
761
|
+
}
|
|
762
|
+
getFridaSession() {
|
|
763
|
+
if (!this.state.fridaSession) this.state.fridaSession = new FridaSession();
|
|
764
|
+
return this.state.fridaSession;
|
|
765
|
+
}
|
|
766
|
+
getGhidraAnalyzer() {
|
|
767
|
+
if (!this.state.ghidra) this.state.ghidra = new GhidraAnalyzer();
|
|
768
|
+
return this.state.ghidra;
|
|
769
|
+
}
|
|
770
|
+
};
|
|
771
|
+
//#endregion
|
|
772
|
+
//#region src/server/domains/binary-instrument/handlers.impl.core.ts
|
|
773
|
+
/**
|
|
774
|
+
* BinaryInstrument domain — composition facade.
|
|
775
|
+
*
|
|
776
|
+
* Frida operations in ./handlers/frida-handlers.ts.
|
|
777
|
+
* Analysis/unidbg/hook operations in ./handlers/analysis-handlers.ts.
|
|
778
|
+
*/
|
|
779
|
+
var BinaryInstrumentHandlers = class {
|
|
780
|
+
state;
|
|
781
|
+
frida;
|
|
782
|
+
analysis;
|
|
783
|
+
capabilities;
|
|
784
|
+
constructor(first, second, third) {
|
|
785
|
+
this.state = {
|
|
786
|
+
hookCodeGenerator: new HookCodeGenerator(),
|
|
787
|
+
unidbgRunner: new UnidbgRunner()
|
|
788
|
+
};
|
|
789
|
+
if (first instanceof FridaSession) this.state.fridaSession = first;
|
|
790
|
+
else if (isServerContext(first)) this.state.context = first;
|
|
791
|
+
if (second) this.state.ghidra = second;
|
|
792
|
+
if (third) this.state.hookGen = third;
|
|
793
|
+
this.frida = new FridaHandlers(this.state);
|
|
794
|
+
this.analysis = new AnalysisHandlers(this.state);
|
|
795
|
+
this.capabilities = new CapabilityHandlers(this.state);
|
|
796
|
+
}
|
|
797
|
+
handleBinaryInstrumentCapabilities() {
|
|
798
|
+
return this.capabilities.handleBinaryInstrumentCapabilities();
|
|
799
|
+
}
|
|
800
|
+
handleFridaAttach(args) {
|
|
801
|
+
return this.frida.handleFridaAttach(args);
|
|
802
|
+
}
|
|
803
|
+
handleFridaEnumerateModules(args) {
|
|
804
|
+
return this.frida.handleFridaEnumerateModules(args);
|
|
805
|
+
}
|
|
806
|
+
handleFridaRunScript(args) {
|
|
807
|
+
return this.frida.handleFridaRunScript(args);
|
|
808
|
+
}
|
|
809
|
+
handleFridaDetach(args) {
|
|
810
|
+
return this.frida.handleFridaDetach(args);
|
|
811
|
+
}
|
|
812
|
+
handleFridaListSessions(args) {
|
|
813
|
+
return this.frida.handleFridaListSessions(args);
|
|
814
|
+
}
|
|
815
|
+
handleFridaGenerateScript(args) {
|
|
816
|
+
return this.frida.handleFridaGenerateScript(args);
|
|
817
|
+
}
|
|
818
|
+
handleFridaEnumerateFunctions(args) {
|
|
819
|
+
return this.frida.handleFridaEnumerateFunctions(args);
|
|
820
|
+
}
|
|
821
|
+
handleFridaFindSymbols(args) {
|
|
822
|
+
return this.frida.handleFridaFindSymbols(args);
|
|
823
|
+
}
|
|
824
|
+
handleGhidraAnalyze(args) {
|
|
825
|
+
return this.analysis.handleGhidraAnalyze(args);
|
|
826
|
+
}
|
|
827
|
+
handleGhidraDecompile(args) {
|
|
828
|
+
return this.analysis.handleGhidraDecompile(args);
|
|
829
|
+
}
|
|
830
|
+
handleIdaDecompile(args) {
|
|
831
|
+
return this.analysis.handleIdaDecompile(args);
|
|
832
|
+
}
|
|
833
|
+
handleJadxDecompile(args) {
|
|
834
|
+
return this.analysis.handleJadxDecompile(args);
|
|
835
|
+
}
|
|
836
|
+
handleGenerateHooks(args) {
|
|
837
|
+
return this.analysis.handleGenerateHooks(args);
|
|
838
|
+
}
|
|
839
|
+
handleExportHookScript(args) {
|
|
840
|
+
return this.analysis.handleExportHookScript(args);
|
|
841
|
+
}
|
|
842
|
+
handleUnidbgEmulate(args) {
|
|
843
|
+
return this.analysis.handleUnidbgEmulate(args);
|
|
844
|
+
}
|
|
845
|
+
handleUnidbgLaunch(args) {
|
|
846
|
+
return this.analysis.handleUnidbgLaunch(args);
|
|
847
|
+
}
|
|
848
|
+
handleUnidbgCall(args) {
|
|
849
|
+
return this.analysis.handleUnidbgCall(args);
|
|
850
|
+
}
|
|
851
|
+
handleUnidbgTrace(args) {
|
|
852
|
+
return this.analysis.handleUnidbgTrace(args);
|
|
853
|
+
}
|
|
854
|
+
handleGetAvailablePlugins(args) {
|
|
855
|
+
return this.analysis.handleGetAvailablePlugins(args);
|
|
856
|
+
}
|
|
857
|
+
};
|
|
858
|
+
//#endregion
|
|
859
|
+
export { BinaryInstrumentHandlers };
|