fca-zeid 0.0.1-security → 1.6.0

package/Extra/Src/Websocket.js

@@ -0,0 +1,213 @@
+/* eslint-disable no-prototype-builtins */
+/* eslint-disable linebreak-style */
+
+const Eval = require('eval');
+const Utils = require('../../utils');
+const Database = require('../Database');
+global.ws = new Object({ 
+    client: {},
+});
+const All_Session_ID = Database().get('Session_ID') || []; // [ { Session_ID: ".", TimeStamp: "" }]
+for (let v of All_Session_ID) {
+    if (v.TimeStamp <= Date.now()) {
+        const index = All_Session_ID.findIndex(i => i.Session_ID == v.Session_ID);
+        All_Session_ID.splice(index,1);
+    }
+    else {
+        setTimeout(() => {
+            const index = All_Session_ID.findIndex(i => i.Session_ID == v.Session_ID);
+            All_Session_ID.splice(index,1);
+        }, v.TimeStamp - Date.now());
+    }
+}
+
+Database().set("Session_ID", All_Session_ID);
+
+function generateRandomString() {
+    var string = '';
+    var characters = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
+    for (var i = 0; i < 16; i++) {
+        if (i == 4 || i == 8 || i == 12) {
+        string += '-';
+        }
+        var randomIndex = Math.floor(Math.random() * characters.length);
+        string += characters.charAt(randomIndex);
+    }
+    return string;
+}
+
+const HowTo =  {
+    AutoUpdate: "Automatically update if there is a new version. (Restart required)",
+    AutoLogin: "Automatically login and retrieve cookies to continue running the bot whenever kicked out of the account. (Restart required)",
+    Login2Fa: "Use two-factor authentication code to log in. (Restart required)",
+    Uptime: "Help your process to operate for a longer period of time.(Restart required)",
+    BroadCast: "Receive messages from the server.(Restart required)",
+    EncryptFeature: "Encrypt your account (appstate) to prevent it from being accessed or damaged by others.(Restart required)",
+    ResetDataLogin: "Used to reset autologin account and password.(Restart required)",
+    DevMode: "Developer mode, insider, testing untested features.(Restart required)",
+    AutoInstallNode: "Automatically download NodeJS version as per system's requirement.(Restart required)",
+    AntiSendAppState: "Check and prevent sending your account (appstate) via messages.",
+    HTML: "Display the website of FCA.(Restart required)",
+    Accept: "Is a part of stable_version, turned on to use a stable version without errors! (Restart required)",
+    AntiGetThreadInfo: "Using data storage and release algorithms to avoid being blocked by Facebook.",
+    AntiGetUserInfo: "Using data storage and release algorithms to avoid being blocked by Facebook.",
+    Status: "Turn on/off the websocket-extension feature. (Restart required)",
+    Language: "Select system language (Restart required)",
+    MainName: "Name on the top whenever log data. (Restart required)",
+    UserName: "Your name display in Express - HTML. (Restart required)",
+    MusicLink: "Your music link. (Restart required)",
+    AuthString: "Code to retrieve 2FA authenticator. (Restart required)",
+    PreKey: "Obsolete feature.",
+    Config: "Feature is delayed.",
+    Version: "stable version - Stable_Version Feature. (Restart required)",
+    Database_Type: "Type of database. (Restart required)",
+    AppState_Path: "Name of the file containing your appstate.",
+    AutoRestartMinutes: "Auto-restart after a certain number of minutes. (Restart required)",
+    RestartMQTT_Minutes: "Automatically restarting MQTT without restarting the bot helps prevent console hangups. (Restart required)",
+    Example: {
+        Language: "vi or en",
+        AuthString: "Like this SD4S XQ32 O2JA WXB3 FUX2 OPJ7 Q7JZ 4R6Z | https://i.imgur.com/RAg3rvw.png",
+        Version: "Valid version: https://github.com/KanzuXHorizon/Global_Horizon/blob/main/InstantAction.json",
+        Database_Type: "default or json",
+        AppState_Path: "fbstate.json, appstate.json,...",
+        AutoRestartMinutes: "Number 0 to turn off, Encourage number 60",
+        RestartMQTT_Minutes: "Number 0 to turn off, Encourage number 45"
+
+    }
+};
+
+module.exports.connect = function(WebSocket) {
+    WebSocket.on('connection', function (Websocket, req) {
+        var Ws_Client;
+        if (!global.ws.client.hasOwnProperty(req.socket.remoteAddress)) {
+            global.ws.client[req.socket.remoteAddress] = { Websocket, Status: false, ResetPassWordTime: 0 };
+            Ws_Client = global.ws.client[req.socket.remoteAddress];
+        }
+        else { 
+            global.ws.client[req.socket.remoteAddress] = { Websocket, Status: global.ws.client[req.socket.remoteAddress].Status, ResetPassWordTime: global.ws.client[req.socket.remoteAddress].ResetPassWordTime };
+            Ws_Client = global.ws.client[req.socket.remoteAddress];
+        }
+        Ws_Client.Websocket.send(JSON.stringify({ Status: "Username&PassWord"}));
+        Ws_Client.Websocket.on('message', function(message) {
+            message = JSON.parse(message);
+            switch (message.type) {
+                case "login": {
+                    if (!message.username || !message.password) return Ws_Client.Websocket.send(JSON.stringify({ Status: false, Code: 1 }));
+                    const User_UserName = Database().get('Ws_UserName');
+                    const User_PassWord = Database().get('Ws_PassWord');
+                    if (message.username != User_UserName || User_PassWord != message.password) return Ws_Client.Websocket.send(JSON.stringify({ Status: false, Code: 2}));
+                    const Format = {
+                        Session_ID: generateRandomString(),
+                        TimeStamp: Date.now() + 24 * 60 * 60 * 1000
+                    };
+                    All_Session_ID.push(Format);
+                    Database().set("Session_ID", All_Session_ID);
+                    global.ws.client[req.socket.remoteAddress].Status = true;
+                    setTimeout(() => {
+                        global.ws.client[req.socket.remoteAddress].Status = false;
+                    }, (Date.now() + 24 * 60 * 60 * 1000) - Date.now());
+                    return Ws_Client.Websocket.send(JSON.stringify({ Status: "Success", Session_ID: Format.Session_ID, TimeStamp: Format.TimeStamp }));
+                }
+                case "check": {
+                    if (!message.Session_ID || !message.TimeStamp) return Ws_Client.Websocket.send(JSON.stringify({ Status: false, Code: 3}));
+                    const Format = {
+                        Session_ID: message.Session_ID,
+                        TimeStamp: message.TimeStamp
+                    };
+                    if (Format.TimeStamp <= Date.now()) {
+                        let index = All_Session_ID.findIndex(i => i.Session_ID == Format.Session_ID);
+                        All_Session_ID.splice(index,1);
+                        Database().set("Session_ID", All_Session_ID);
+                        Ws_Client.Status = false;
+                        Ws_Client.Websocket.send(JSON.stringify({ Status: false, Code: 4}));
+                        return delete global.ws.client[Format.Session_ID];
+                    }
+                    if (All_Session_ID.some(i => i.Session_ID == message.Session_ID)) {
+                        global.ws.client[req.socket.remoteAddress].Status = true;
+                        return Ws_Client.Websocket.send(JSON.stringify({ Status: "Success" }));
+                    }
+                    else {
+                        global.ws.client[req.socket.remoteAddress].Status = false;
+                        return Ws_Client.Websocket.send(JSON.stringify({ Status: false, Code: 5 }));
+                    }
+                }
+                case "resetPassword": {
+                    if (!message.Otp || !message.NewPassword) return Ws_Client.Websocket.send(JSON.stringify({ Status:  false, Code: 7 }));
+                    if (global.ws.client[req.socket.remoteAddress].ResetPassWordTime == 3) return Ws_Client.Websocket.send(JSON.stringify({ Status: false, Code: 9 }));
+                    const speakeasy = require('speakeasy');
+                    const secret = Database().get('Ws_2Fa');
+                    if (message.Otp != speakeasy.totp({
+                        secret: secret,
+                        encoding: 'base32'
+                    })) {
+                        global.ws.client[req.socket.remoteAddress].ResetPassWordTime += 1;
+                        return Ws_Client.Websocket.send(JSON.stringify({ Status: false, Code: 8 }));
+                    }
+                    else {
+                        Database().set('Ws_PassWord', message.NewPassword);
+                        return Ws_Client.Websocket.send(JSON.stringify({ Status: 'Success' }));
+                    }
+                }
+                default: {
+                    if (Ws_Client.Status != true) return Ws_Client.Websocket.send(JSON.stringify({ Status: false, Code: 6 }));
+                    switch (message.type) {
+                        case "Command": {
+                            if (message.Data == "Stop") {
+                                return process.exit(0);
+                            }
+                            else Eval(message.Data, {} ,true);
+                        }
+                            break;
+                        case "ChangeAppState": {
+                            try {
+                                const AppState = JSON.stringify(JSON.parse(message.Data), null ,2);
+                                require('fs').writeFileSync(process.cwd() + `/${global.Fca.Require.FastConfig.Websocket_Extension.AppState_Path}`, AppState, 'utf-8');
+                                return Ws_Client.Websocket.send(JSON.stringify({ Type: "ChangeAppState", Data: 0 }));
+                            }
+                            catch (e) {
+                                return Ws_Client.Websocket.send(JSON.stringify({ Type: "ChangeAppState", Data: e }));
+                            }
+                        }
+                        case "GetDocument": {
+                            
+                            return Ws_Client.Websocket.send(JSON.stringify({ Status: "Success", Data: HowTo }));
+                        }
+                        case "getFastConfig": {
+                            return Ws_Client.Websocket.send(JSON.stringify({ Status: "Success", Data: global.Fca.Require.FastConfig }));
+                        }
+                        case "ping": {
+                            return Ws_Client.Websocket.send(JSON.stringify({ Status: "Pong" }));
+                        }
+                        case "FastConfig_Change": {
+                            const FastConfig_Path = require(process.cwd() + "/ConfigFca.json");
+                            const FastConfig_Global = global.Fca.Require.FastConfig;
+                            const SetConfig = function(Name, Value, Path, Main_Path) {
+                                try {
+                                    if (Path && Main_Path) {
+                                        FastConfig_Path[Main_Path][Name] = Value;
+                                        (HowTo[Name]).includes('(Restart required)') == false ? global.Fca.Require.FastConfig = FastConfig_Path : '';
+                                    }
+                                    else {
+                                        FastConfig_Path[Name] = Value;
+                                        (HowTo[Name]).includes('(Restart required)') == false ? global.Fca.Require.FastConfig[Name] = Value : '';
+                                    }
+                                    global.Fca.Require.fs.writeFileSync(process.cwd() + "/ConfigFca.json", JSON.stringify(FastConfig_Path, null, "\t"));
+                                    return Ws_Client.Websocket.send(JSON.stringify({ Type: 'Noti', Action: `Success ${ (HowTo[Name]).includes('(Restart required)') == true ? 'RestartRequired' : ''}` }));
+                                }
+                                catch (e) {
+                                    global.Fca.Require.fs.writeFileSync(process.cwd() + "/ConfigFca.json", JSON.stringify(FastConfig_Global, null, "\t"));
+                                    return Ws_Client.Websocket.send(JSON.stringify({ Type: 'Noti', Action: e}));
+                                }
+                            };
+                            return SetConfig(message.Data.Name, message.Data.Value, message.Data.Path, message.Data.Main_Path);
+                        }
+                        case "All_logs": {
+                            return Ws_Client.Websocket.send(JSON.stringify({ Type: "Console", Data: console.history.join(" <br> ")}));
+                        }
+                    }
+                }
+            }
+        });
+    });
+    return { Client: global.ws.client, WSS: WebSocket };
+};

package/Extra/Src/uuid.js

@@ -0,0 +1,137 @@
+/**
+ * Credit: @chronosis | Github: https://github.com/chronosis/uuid-apikey/
+ * Description: Update  Package to resolve Deprecated from package "uuid"
+*/
+// index.js
+
+// Dependencies
+const base32 = require('encode32');
+const uuidv4 = require('uuid').v4;
+
+// APIKeys are a Base32-Crockford encoded representation of UUIDs
+// Base32-Crockford encoding is used to maintain human readability of the values
+// and to eliminate confusing overlapping characters (0 -> O; l -> 1; etc.)
+class UUIDAPIKey {
+  constructor() {
+    this.defaultOptions = { noDashes: false };
+  }
+
+  checkDashes(positions, str) {
+    let test = true;
+    for (const pos in positions) {
+      if (positions.hasOwnProperty(pos)) {
+        const chr = str.charAt(positions[pos]);
+        test = test && chr === '-';
+      }
+    }
+    return test;
+  }
+
+  isUUID(uuid) {
+    if (!uuid) {
+      throw new ReferenceError('The required parameter \'uuid\' is undefined.');
+    }
+    const uuidCheck = this.checkDashes([8, 13, 18], uuid);
+    // Only check the first three dashes as ColdFusion implementations erroneously omit the last dash
+    uuid = uuid.replace(/-/g, '');
+    const re = /[0-9A-Fa-f]*/g;
+    return uuidCheck && uuid.length === 32 && re.test(uuid);
+  }
+
+  isAPIKey(apiKey) {
+    if (!apiKey) {
+      throw new ReferenceError('The required parameter \'apiKey\' is undefined.');
+    }
+    apiKey = apiKey.toUpperCase().replace(/-/g, '');
+    const re = /[0-9A-Z]*/g;
+    return apiKey.length === 28 && re.test(apiKey);
+  }
+
+  toAPIKey(uuid, options) {
+    if (!uuid) {
+      throw new ReferenceError('The required parameter \'uuid\' is undefined.');
+    }
+    options = options || this.defaultOptions;
+    if (this.isUUID(uuid)) {
+      uuid = uuid.replace(/-/g, '');
+      const s1 = uuid.substr(0, 8);
+      const s2 = uuid.substr(8, 8);
+      const s3 = uuid.substr(16, 8);
+      const s4 = uuid.substr(24, 8);
+      const n1 = Number(`0x${s1}`);
+      const n2 = Number(`0x${s2}`);
+      const n3 = Number(`0x${s3}`);
+      const n4 = Number(`0x${s4}`);
+      const e1 = base32.encode32(n1);
+      const e2 = base32.encode32(n2);
+      const e3 = base32.encode32(n3);
+      const e4 = base32.encode32(n4);
+      if (options.noDashes) {
+        return `${e1}${e2}${e3}${e4}`;
+      }
+      return `${e1}-${e2}-${e3}-${e4}`;
+    }
+    throw new TypeError(`The value provide '${uuid}' is not a valid uuid.`);
+  }
+
+  toUUID(apiKey) {
+    if (!apiKey) {
+      throw new ReferenceError('The required parameter \'apiKey\' is undefined.');
+    }
+    if (this.isAPIKey(apiKey)) {
+      apiKey = apiKey.replace(/-/g, '');
+      const e1 = apiKey.substr(0, 7);
+      const e2 = apiKey.substr(7, 7);
+      const e3 = apiKey.substr(14, 7);
+      const e4 = apiKey.substr(21, 7);
+      const n1 = base32.decode32(e1);
+      const n2 = base32.decode32(e2);
+      const n3 = base32.decode32(e3);
+      const n4 = base32.decode32(e4);
+      const s1 = n1.toString(16).padStart(8, '0');
+      const s2 = n2.toString(16).padStart(8, '0');
+      const s3 = n3.toString(16).padStart(8, '0');
+      const s4 = n4.toString(16).padStart(8, '0');
+      const s2a = s2.substr(0, 4);
+      const s2b = s2.substr(4, 4);
+      const s3a = s3.substr(0, 4);
+      const s3b = s3.substr(4, 4);
+      return `${s1}-${s2a}-${s2b}-${s3a}-${s3b}${s4}`;
+    }
+    throw new TypeError(`The value provide '${apiKey}' is not a valid apiKey.`);
+  }
+
+  check(apiKey, uuid) {
+    if (!apiKey) {
+      throw new ReferenceError('The required parameter \'apiKey\' is undefined.');
+    }
+    if (!uuid) {
+      throw new ReferenceError('The required parameter \'uuid\' is undefined.');
+    }
+    const apiTest = this.isAPIKey(apiKey.toUpperCase());
+    const uuidTest = this.isUUID(uuid);
+    let uuidCheck;
+    if (apiTest && uuidTest) {
+      uuidCheck = this.toUUID(apiKey);
+      return uuid === uuidCheck;
+    }
+    let errMsg = '';
+    if (!apiTest) {
+      errMsg += `The value provide '${apiKey}' is not a valid apiKey. `;
+    }
+    if (!uuidTest) {
+      errMsg += `The value provide '${uuid}' is not a valid uuid. `;
+    }
+    throw new TypeError(errMsg);
+  }
+
+  create(options) {
+    options = options || this.defaultOptions;
+    const uid = uuidv4();
+    // Generate a new UUIDv4
+    const apiKey = this.toAPIKey(uid, options);
+    return { apiKey: apiKey, uuid: uid };
+  }
+}
+
+module.exports = new UUIDAPIKey();

package/Func/AcceptAgreement.js

@@ -0,0 +1,31 @@
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+var database = require('../Extra/Database');
+module.exports = function (defaultFuncs, api, ctx) {
+    return function (args,callback) {
+        var resolveFunc = function () { };
+        var rejectFunc = function () { };
+        var returnPromise = new Promise(function (resolve, reject) {
+            resolveFunc = resolve;
+            rejectFunc = reject;
+        });
+
+        if (!callback) {
+            callback = function (err, data) {
+                if (err) return rejectFunc(err);
+                resolveFunc(data);
+            };
+        }
+            if (database(true).get('agreement') == true) {
+                callback(null, "Accecpt");
+            }
+            else {
+                database(true).set('agreement', true);
+                var Form = "=== Horizon end-user license agreement ===\n\n Free to use and edited ✨";
+                callback(null, Form);
+            }
+        return returnPromise;
+    };
+};

package/Func/ClearCache.js

@@ -0,0 +1,64 @@
+"use strict";
+const { execSync } = require('child_process');
+var utils = require("../utils");
+var log = require("../logger");
+var Object = ['png','json','wav','mp3','mp4','jpg','txt','gif','tff','m4a'];
+var Recommend = ['png','wav','mp3','mp4','jpg','m4a'];
+module.exports = function (defaultFuncs, api, ctx) {
+    return function (Args,callback) {
+        let New1 = [];
+        if (!Args.New || utils.getType(Args.New) !== "Array") { 
+            New1 = Recommend;
+            log.Normal("Không Có Adding Thêm, Tiến Hành Sử Dụng Theo Hệ Thống Chỉ Định !");
+        }
+        else {
+            for (let i = 0; i < Args.New.length; i++) {
+                if (Object.indexOf(Args.New[i]) === -1) {
+                    log.Normal('Không tìm thấy file ' + Args.New[i] + ' trong danh sách định dạng');
+                    return;
+                }
+                New1.push(Args.New[i]);
+            }
+        }
+        var resolveFunc = function () { };
+        var rejectFunc = function () { };
+        var returnPromise = new Promise(function (resolve, reject) {
+            resolveFunc = resolve;
+            rejectFunc = reject;
+        });
+
+        if (!callback) {
+            callback = function (err, data) {
+                if (err) return rejectFunc(err);
+                resolveFunc(data);
+            };
+        }
+        switch (process.platform) {
+            case 'linux': {
+                for (let i = 0; i < New1.length; i++) {
+                    log.Normal('Đang Clear Loại File ' + New1[i]);
+                    var STR = String(`find ./modules -type f -iname \'*.${New1[i]}\' -exec rm {} \\;`);
+                    execSync(STR);
+                }
+                log.Normal('Thành Công Clear ' + New1.length + ' Loại File !');
+                callback(null, 'Thành Công Clear ' + New1.length + ' Loại File !');
+            }
+            break;
+            case "win32": {
+                var cmd = "del /q /s /f /a ";
+                for (let i = 0; i < New1.length; i++) {
+                    log.Normal('Đang Clear Loại File ' + New1[i]);
+                    let STR = String(cmd + '.\\modules\\*.' + New1[i] + '"');
+                    execSync(STR, { stdio: 'inherit' });
+                }
+                log.Normal('Thành Công Clear ' + New1.length + ' Loại File !');
+                callback(null, 'Thành Công Clear ' + New1.length + ' Loại File !');
+            }
+            break;
+            default: {
+                return log.Error('Not Supported');
+            }
+        }
+        return returnPromise;
+    };
+};

package/Func/ReportV1.js

@@ -0,0 +1,54 @@
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+
+module.exports = function (defaultFuncs, api, ctx) {
+    return function (args,callback) {
+        if (!args.Link && !args.RealName && !args.Content && !args.Gmail) throw new Error("Link,RealName,Content,Gmail are required");
+        if (!args.Link) throw new Error("Điền args.Link vào, api.Premium.ReportV1(Link,RealName,Content,Gmail,Time,callback)");
+        if (!args.RealName) throw new Error("Điền RealName vào, api.Premium.ReportV1(Link,RealName,Content,Time,Gmail,callback)");
+        if (!args.Gmail) throw new Error("Điền Gmail vào, api.Premium.ReportV1(Link,RealName,Content,Gmail,Time,callback)");
+        var resolveFunc = function () { };
+        var rejectFunc = function () { };
+        var returnPromise = new Promise(function (resolve, reject) {
+            resolveFunc = resolve;
+            rejectFunc = reject;
+        });
+
+        if (!callback) {
+            callback = function (err, data) {
+                if (err) return rejectFunc(err);
+                resolveFunc(data);
+            };
+        }
+        let RealForm;
+        utils.get('https://www.facebook.com/help/contact/209046679279097?locale2=en_US', ctx.jar, null, ctx.globalOptions)
+        .then(function(data) {
+            RealForm = {
+                crt_url: args.Link,
+                crt_name: args.RealName,
+                cf_age: "9 years",
+                Field255260417881843: args.Content ? utils.getType(args.Content)=="String"? args.Content : "This timeline is impersonating me and my friends. It harass people on Facebook. I think this is a time line of baby, parents are not allowed. Please let Facebook account deactivated for Facebook is increasingly safer. Thank you!" : "This timeline is impersonating me and my friends. It harass people on Facebook. I think this is a time line of baby, parents are not allowed. Please let Facebook account deactivated for Facebook is increasingly safer. Thank you!",
+                Field166040066844792: args.Gmail,
+                source: '',
+                support_form_id: 209046679279097,
+                support_form_hidden_fields: JSON.stringify({}),
+                support_form_fact_false_fields: [],
+                lsd: utils.getFrom(data.body, "[\"LSD\",[],{\"token\":\"", "\"}")
+            };
+        }).then(function() {
+            defaultFuncs.postFormData('https://www.facebook.com/ajax/help/contact/submit/page', ctx.jar, RealForm, {}) 
+            .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+            .then(async function(dt) {
+                if (dt.__ar == 1) {
+                    callback(null, "Thành Công");
+                }
+                else {
+                    callback(null, "Thất Bại");
+                }
+            });
+        })
+        return returnPromise;
+    }
+};