brave-real-browser-mcp-server 2.27.13 → 2.27.14

package/README.md

@@ -31,7 +31,12 @@
   "mcpServers": {
     "brave-real-browser": {
       "command": "node",
-      "args": ["c:\\Users\\Admin\\Desktop\\Workspace-For-Brave-Real-browser-Mcp-Server\\Brave-Real-Browser-Mcp-Server\\dist\\index.js"]
+      "args": [
+        "c:\\Users\\Admin\\Desktop\\Workspace-For-Brave-Real-browser-Mcp-Server\\Brave-Real-Browser-Mcp-Server\\dist\\index.js"
+      ],
+      "env": {
+        "headless": "false"
+      }
     }
   }
 }

package/dist/handlers/advanced-tools.js

@@ -408,6 +408,95 @@ function decodeRot13(input) {
 function reverseString(input) {
     return input.split('').reverse().join('');
 }
+/**
+ * Unpack obfuscated JavaScript code using eval(function(p,a,c,k,e,d)) pattern
+ * This is the most common packer used by streaming sites
+ */
+function unpackJs(input) {
+    try {
+        // Pattern: eval(function(p,a,c,k,e,d){...}('packed_code',radix,count,'dictionary'.split('|'),0,{}))
+        const packedRegex = /eval\s*\(\s*function\s*\(\s*p\s*,\s*a\s*,\s*c\s*,\s*k\s*,\s*e\s*,\s*d\s*\)\s*\{[^}]+\}\s*\(\s*'([^']+)'\s*,\s*(\d+)\s*,\s*(\d+)\s*,\s*'([^']+)'\.split\s*\(\s*'\|'\s*\)/;
+        const match = input.match(packedRegex);
+        if (!match) {
+            // Try alternate pattern without word boundary
+            const altRegex = /function\s*\(\s*p\s*,\s*a\s*,\s*c\s*,\s*k\s*,\s*e\s*,\s*d\s*\)[^}]+\}\s*\(\s*'([^']+)'\s*,\s*(\d+)\s*,\s*(\d+)\s*,\s*'([^']+)'\.split/;
+            const altMatch = input.match(altRegex);
+            if (!altMatch)
+                return input;
+            return unpackPACKer(altMatch[1], parseInt(altMatch[2]), parseInt(altMatch[3]), altMatch[4].split('|'));
+        }
+        const packed = match[1];
+        const radix = parseInt(match[2]);
+        const count = parseInt(match[3]);
+        const dictionary = match[4].split('|');
+        return unpackPACKer(packed, radix, count, dictionary);
+    }
+    catch (e) {
+        return input;
+    }
+}
+/**
+ * Core P.A.C.K.E.R. decoding algorithm
+ * Replaces placeholders in packed code with dictionary values
+ */
+function unpackPACKer(p, a, c, k) {
+    // Decode function to convert number to base-a representation
+    function decode(d) {
+        const chars = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
+        let result = '';
+        while (d > 0) {
+            result = chars[d % a] + result;
+            d = Math.floor(d / a);
+        }
+        return result || '0';
+    }
+    // Replace encoded values with dictionary words
+    while (c--) {
+        if (k[c]) {
+            // Match word boundaries using regex based on radix
+            const pattern = new RegExp('\\b' + decode(c) + '\\b', 'g');
+            p = p.replace(pattern, k[c]);
+        }
+    }
+    return p;
+}
+/**
+ * Extract all packed scripts from HTML and decode them
+ */
+function extractAndUnpackAll(html) {
+    const scripts = [];
+    const urls = [];
+    // Find all packed script blocks
+    const packedPattern = /eval\s*\(\s*function\s*\(\s*p\s*,\s*a\s*,\s*c\s*,\s*k\s*,\s*e\s*,\s*d\s*\)[^)]+\([^)]+\)\s*\)/g;
+    let match;
+    while ((match = packedPattern.exec(html)) !== null) {
+        try {
+            const unpacked = unpackJs(match[0]);
+            if (unpacked && unpacked !== match[0]) {
+                scripts.push(unpacked);
+                // Extract URLs from unpacked script
+                const urlPatterns = [
+                    /https?:\/\/[^\s"'<>\\]+\.m3u8[^\s"'<>\\]*/gi,
+                    /https?:\/\/[^\s"'<>\\]+\.txt\?[^\s"'<>\\]*/gi,
+                    /https?:\/\/[^\s"'<>\\]+\/stream\/[^\s"'<>\\]*/gi,
+                    /https?:\/\/[^\s"'<>\\]+\/hls\/[^\s"'<>\\]*/gi,
+                ];
+                for (const pattern of urlPatterns) {
+                    let urlMatch;
+                    while ((urlMatch = pattern.exec(unpacked)) !== null) {
+                        if (!urls.includes(urlMatch[0])) {
+                            urls.push(urlMatch[0]);
+                        }
+                    }
+                }
+            }
+        }
+        catch (e) {
+            // Skip failed unpacking
+        }
+    }
+    return { scripts, urls };
+}
 function applyDecodeLayer(input, layer) {
     switch (layer) {
         case 'base64': return decodeBase64(input);
@@ -415,6 +504,7 @@ function applyDecodeLayer(input, layer) {
         case 'hex': return decodeHex(input);
         case 'rot13': return decodeRot13(input);
         case 'reverse': return reverseString(input);
+        case 'unpackJs': return unpackJs(input);
         default: return input;
     }
 }
@@ -577,7 +667,48 @@ export async function handleExtractJson(page, args) {
         }
     }
     // ============================================================
-    // 5. ORIGINAL JSON EXTRACTION (preserved)
+    // 5. DECODE PACKED JAVASCRIPT (AUTO-DETECT)
+    // ============================================================
+    if (args.decodePackedJs) {
+        try {
+            // Get all script contents from page
+            const scriptContents = await page.evaluate(() => {
+                const scripts = Array.from(document.querySelectorAll('script'));
+                return scripts.map(s => s.textContent || '').filter(s => s.length > 0);
+            });
+            const allUnpacked = { scripts: [], urls: [] };
+            for (const script of scriptContents) {
+                const result = extractAndUnpackAll(script);
+                allUnpacked.scripts.push(...result.scripts);
+                allUnpacked.urls.push(...result.urls);
+            }
+            // Remove duplicates from URLs
+            const uniqueUrls = [...new Set(allUnpacked.urls)];
+            if (allUnpacked.scripts.length > 0 || uniqueUrls.length > 0) {
+                decoded = {
+                    source: 'decodePackedJs',
+                    packedScriptsFound: allUnpacked.scripts.length,
+                    unpackedScripts: allUnpacked.scripts.slice(0, 5), // Limit to first 5
+                    extractedUrls: uniqueUrls,
+                    streamUrls: uniqueUrls.filter(u => u.includes('m3u8') || u.includes('.txt?') ||
+                        u.includes('/stream/') || u.includes('/hls/')),
+                };
+                data.push(decoded);
+            }
+            else {
+                decoded = {
+                    source: 'decodePackedJs',
+                    message: 'No packed JavaScript found in page',
+                    hint: 'Try using execute_js or player_api_hook for dynamically loaded content',
+                };
+            }
+        }
+        catch (e) {
+            decoded = { source: 'decodePackedJs', error: String(e) };
+        }
+    }
+    // ============================================================
+    // 6. ORIGINAL JSON EXTRACTION (preserved)
     // ============================================================
     // Extract from script tags with type="application/json" or type="application/ld+json"
     const scriptData = await page.evaluate((selector) => {

package/dist/tool-definitions.js

@@ -2,7 +2,7 @@
 // Server metadata
 export const SERVER_INFO = {
     name: 'brave-real-browser-mcp-server',
-    version: '2.24.0',
+    version: '2.25.0',
 };
 // MCP capabilities with LSP-compatible streaming support
 export const CAPABILITIES = {
@@ -470,7 +470,7 @@ export const TOOLS = [
     },
     {
         name: 'extract_json',
-        description: 'Extract embedded JSON/API data from page (LD+JSON, __NEXT_DATA__, etc.) + Advanced Decode capabilities for complex websites (base64, URL, hex, rot13, multi-layer)',
+        description: 'Extract embedded JSON/API data from page (LD+JSON, __NEXT_DATA__, etc.) + Advanced Decode capabilities for complex websites (base64, URL, hex, rot13, multi-layer) + Packed JavaScript decoder (eval/function(p,a,c,k,e,d) unpacker)',
         inputSchema: {
             type: 'object',
             additionalProperties: false,
@@ -484,15 +484,17 @@ export const TOOLS = [
                 decodeFromUrl: { type: 'string', description: 'URL to extract and decode encoded parameter from (e.g., gadgetsweb.xyz/?id=xxx)' },
                 decodeUrlParam: { type: 'string', description: 'URL parameter name to decode (default: id)', default: 'id' },
                 decodePattern: { type: 'string', description: 'Regex pattern to find and decode base64 strings in page content' },
+                // NEW: Packed JavaScript decoder
+                decodePackedJs: { type: 'boolean', description: 'Auto-detect and decode packed JavaScript (eval/function(p,a,c,k,e,d)) in page scripts. Extracts m3u8/stream URLs automatically.', default: false },
                 advancedDecode: {
                     type: 'object',
-                    description: 'Multi-layer decode for complex obfuscation (supports base64, url, hex, rot13, reverse)',
+                    description: 'Multi-layer decode for complex obfuscation (supports base64, url, hex, rot13, reverse, unpackJs)',
                     properties: {
                         input: { type: 'string', description: 'Input string to decode (if not using page content)' },
                         layers: {
                             type: 'array',
-                            items: { type: 'string', enum: ['base64', 'url', 'hex', 'rot13', 'reverse'] },
-                            description: 'Decode layers to apply in order (e.g., ["base64", "url"])'
+                            items: { type: 'string', enum: ['base64', 'url', 'hex', 'rot13', 'reverse', 'unpackJs'] },
+                            description: 'Decode layers to apply in order (e.g., ["base64", "url", "unpackJs"])'
                         },
                         extractFromPage: { type: 'boolean', description: 'Extract input from current page content', default: false },
                         pageSelector: { type: 'string', description: 'CSS selector to extract from (for extractFromPage)' },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brave-real-browser-mcp-server",
-  "version": "2.27.13",
+  "version": "2.27.14",
   "description": "🦁 MCP server for Brave Real Browser - NPM Workspaces Monorepo with anti-detection features, SSE streaming, and LSP compatibility",
   "type": "module",
   "main": "dist/index.js",
@@ -50,7 +50,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "latest",
     "@types/turndown": "latest",
-    "brave-real-browser": "^2.8.13",
+    "brave-real-browser": "^2.8.14",
     "puppeteer-core": "^24.35.0",
     "turndown": "latest",
     "vscode-languageserver": "^9.0.1",