js-confuser 1.5.9 → 1.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (122) hide show
  1. package/.github/workflows/node.js.yml +2 -2
  2. package/CHANGELOG.md +32 -0
  3. package/README.md +143 -7
  4. package/dist/index.js +9 -21
  5. package/dist/obfuscator.js +21 -27
  6. package/dist/options.js +2 -2
  7. package/dist/order.js +1 -3
  8. package/dist/probability.js +2 -4
  9. package/dist/templates/bufferToString.js +13 -0
  10. package/dist/templates/crash.js +2 -2
  11. package/dist/templates/es5.js +18 -0
  12. package/dist/transforms/calculator.js +77 -21
  13. package/dist/transforms/controlFlowFlattening/controlFlowFlattening.js +980 -367
  14. package/dist/transforms/controlFlowFlattening/expressionObfuscation.js +4 -1
  15. package/dist/transforms/controlFlowFlattening/switchCaseObfuscation.js +25 -26
  16. package/dist/transforms/deadCode.js +33 -25
  17. package/dist/transforms/dispatcher.js +4 -3
  18. package/dist/transforms/es5/antiDestructuring.js +2 -0
  19. package/dist/transforms/es5/es5.js +31 -34
  20. package/dist/transforms/extraction/duplicateLiteralsRemoval.js +4 -1
  21. package/dist/transforms/finalizer.js +82 -0
  22. package/dist/transforms/flatten.js +21 -17
  23. package/dist/transforms/identifier/globalAnalysis.js +88 -0
  24. package/dist/transforms/identifier/globalConcealing.js +10 -83
  25. package/dist/transforms/identifier/movedDeclarations.js +1 -7
  26. package/dist/transforms/identifier/renameVariables.js +39 -27
  27. package/dist/transforms/identifier/variableAnalysis.js +58 -62
  28. package/dist/transforms/minify.js +58 -55
  29. package/dist/transforms/opaquePredicates.js +1 -1
  30. package/dist/transforms/preparation/preparation.js +2 -2
  31. package/dist/transforms/preparation.js +231 -0
  32. package/dist/transforms/renameLabels.js +1 -1
  33. package/dist/transforms/rgf.js +2 -3
  34. package/dist/transforms/stack.js +86 -25
  35. package/dist/transforms/string/encoding.js +150 -179
  36. package/dist/transforms/string/stringCompression.js +14 -15
  37. package/dist/transforms/string/stringConcealing.js +25 -8
  38. package/dist/transforms/string/stringEncoding.js +13 -24
  39. package/dist/transforms/transform.js +11 -18
  40. package/dist/traverse.js +24 -10
  41. package/dist/util/gen.js +15 -0
  42. package/dist/util/insert.js +11 -1
  43. package/dist/util/random.js +15 -0
  44. package/package.json +5 -5
  45. package/src/index.ts +2 -2
  46. package/src/obfuscator.ts +21 -29
  47. package/src/options.ts +7 -19
  48. package/src/order.ts +1 -5
  49. package/src/probability.ts +2 -3
  50. package/src/templates/bufferToString.ts +68 -0
  51. package/src/templates/crash.ts +5 -9
  52. package/src/templates/es5.ts +131 -0
  53. package/src/transforms/calculator.ts +122 -59
  54. package/src/transforms/controlFlowFlattening/controlFlowFlattening.ts +1583 -571
  55. package/src/transforms/controlFlowFlattening/expressionObfuscation.ts +4 -1
  56. package/src/transforms/deadCode.ts +383 -26
  57. package/src/transforms/dispatcher.ts +4 -3
  58. package/src/transforms/es5/antiDestructuring.ts +2 -0
  59. package/src/transforms/es5/es5.ts +32 -77
  60. package/src/transforms/extraction/duplicateLiteralsRemoval.ts +4 -1
  61. package/src/transforms/{hexadecimalNumbers.ts → finalizer.ts} +29 -13
  62. package/src/transforms/flatten.ts +24 -34
  63. package/src/transforms/identifier/globalAnalysis.ts +85 -0
  64. package/src/transforms/identifier/globalConcealing.ts +14 -103
  65. package/src/transforms/identifier/movedDeclarations.ts +3 -10
  66. package/src/transforms/identifier/renameVariables.ts +37 -30
  67. package/src/transforms/identifier/variableAnalysis.ts +66 -73
  68. package/src/transforms/minify.ts +80 -73
  69. package/src/transforms/opaquePredicates.ts +2 -2
  70. package/src/transforms/preparation.ts +238 -0
  71. package/src/transforms/renameLabels.ts +2 -2
  72. package/src/transforms/rgf.ts +2 -4
  73. package/src/transforms/stack.ts +94 -36
  74. package/src/transforms/string/encoding.ts +115 -212
  75. package/src/transforms/string/stringCompression.ts +27 -18
  76. package/src/transforms/string/stringConcealing.ts +39 -9
  77. package/src/transforms/string/stringEncoding.ts +18 -18
  78. package/src/transforms/transform.ts +15 -21
  79. package/src/traverse.ts +23 -4
  80. package/src/types.ts +2 -1
  81. package/src/util/gen.ts +21 -1
  82. package/src/util/insert.ts +12 -1
  83. package/src/util/random.ts +13 -0
  84. package/test/code/Cash.test.ts +1 -1
  85. package/test/code/Dynamic.test.ts +12 -10
  86. package/test/code/ES6.src.js +122 -0
  87. package/test/code/ES6.test.ts +28 -2
  88. package/test/index.test.ts +2 -1
  89. package/test/probability.test.ts +44 -0
  90. package/test/templates/template.test.ts +1 -1
  91. package/test/transforms/antiTooling.test.ts +22 -0
  92. package/test/transforms/calculator.test.ts +40 -0
  93. package/test/transforms/controlFlowFlattening/controlFlowFlattening.test.ts +702 -160
  94. package/test/transforms/controlFlowFlattening/expressionObfuscation.test.ts +173 -0
  95. package/test/transforms/deadCode.test.ts +66 -15
  96. package/test/transforms/dispatcher.test.ts +20 -1
  97. package/test/transforms/es5/antiDestructuring.test.ts +16 -0
  98. package/test/transforms/flatten.test.ts +49 -0
  99. package/test/transforms/identifier/movedDeclarations.test.ts +27 -0
  100. package/test/transforms/identifier/renameVariables.test.ts +82 -0
  101. package/test/transforms/lock/antiDebug.test.ts +2 -2
  102. package/test/transforms/minify.test.ts +85 -0
  103. package/test/transforms/preparation.test.ts +157 -0
  104. package/test/transforms/rgf.test.ts +0 -29
  105. package/test/transforms/stack.test.ts +91 -21
  106. package/test/transforms/string/stringCompression.test.ts +39 -0
  107. package/test/transforms/string/stringConcealing.test.ts +82 -0
  108. package/test/transforms/string/stringEncoding.test.ts +53 -2
  109. package/test/transforms/transform.test.ts +66 -0
  110. package/test/traverse.test.ts +139 -0
  111. package/src/transforms/controlFlowFlattening/choiceFlowObfuscation.ts +0 -87
  112. package/src/transforms/controlFlowFlattening/controlFlowObfuscation.ts +0 -203
  113. package/src/transforms/controlFlowFlattening/switchCaseObfuscation.ts +0 -130
  114. package/src/transforms/hideInitializingCode.ts +0 -432
  115. package/src/transforms/label.ts +0 -64
  116. package/src/transforms/preparation/nameConflicts.ts +0 -102
  117. package/src/transforms/preparation/preparation.ts +0 -176
  118. package/test/transforms/controlFlowFlattening/controlFlowObfuscation.test.ts +0 -101
  119. package/test/transforms/controlFlowFlattening/switchCaseObfuscation.test.ts +0 -120
  120. package/test/transforms/hideInitializingCode.test.ts +0 -336
  121. package/test/transforms/preparation/nameConflicts.test.ts +0 -52
  122. package/test/transforms/preparation/preparation.test.ts +0 -62
@@ -21,10 +21,15 @@ var _precedence = require("../precedence");
21
21
 
22
22
  var _template = _interopRequireDefault(require("../templates/template"));
23
23
 
24
+ var _probability = require("../probability");
25
+
24
26
  function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
25
27
 
26
28
  function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
27
29
 
30
+ const allowedBinaryOperators = new Set(["+", "-", "*", "/"]);
31
+ const allowedUnaryOperators = new Set(["!", "void", "typeof", "-", "~", "+"]);
32
+
28
33
  class Calculator extends _transform.default {
29
34
  constructor(o) {
30
35
  super(o, _order.ObfuscateOrder.Calculator);
@@ -43,7 +48,7 @@ class Calculator extends _transform.default {
43
48
 
44
49
  this.ops = Object.create(null);
45
50
  this.statesUsed = new Set();
46
- this.calculatorFn = this.getPlaceholder();
51
+ this.calculatorFn = this.getPlaceholder() + "_calc";
47
52
  this.calculatorOpVar = this.getPlaceholder();
48
53
  this.calculatorSetOpFn = this.getPlaceholder();
49
54
  this.gen = this.getGenerator();
@@ -59,10 +64,19 @@ class Calculator extends _transform.default {
59
64
  var leftArg = this.getPlaceholder();
60
65
  var rightArg = this.getPlaceholder();
61
66
  var switchCases = [];
62
- Object.keys(this.ops).forEach(operator => {
63
- var code = this.ops[operator];
64
- var factory = operator == "&&" || operator == "||" ? _gen.LogicalExpression : _gen.BinaryExpression;
65
- var body = [(0, _gen.ReturnStatement)(factory(operator, (0, _gen.Identifier)(leftArg), (0, _gen.Identifier)(rightArg)))];
67
+ Object.keys(this.ops).forEach(opKey => {
68
+ var [type, operator] = opKey.split("_");
69
+ var code = this.ops[opKey];
70
+ var body = [];
71
+
72
+ if (type === "Binary") {
73
+ body = [(0, _gen.ReturnStatement)((0, _gen.BinaryExpression)(operator, (0, _gen.Identifier)(leftArg), (0, _gen.Identifier)(rightArg)))];
74
+ } else if (type === "Unary") {
75
+ body = [(0, _gen.ReturnStatement)((0, _gen.UnaryExpression)(operator, (0, _gen.Identifier)(leftArg)))];
76
+ } else {
77
+ throw new Error("Unknown type: " + type);
78
+ }
79
+
66
80
  switchCases.push((0, _gen.SwitchCase)((0, _gen.Literal)(code), body));
67
81
  });
68
82
  var func = (0, _gen.FunctionDeclaration)(this.calculatorFn, [leftArg, rightArg].map(x => (0, _gen.Identifier)(x)), [(0, _gen.SwitchStatement)((0, _gen.Identifier)(this.calculatorOpVar), switchCases)]);
@@ -75,43 +89,85 @@ class Calculator extends _transform.default {
75
89
  }
76
90
 
77
91
  match(object, parents) {
78
- return object.type == "BinaryExpression";
92
+ return object.type === "BinaryExpression" || object.type === "UnaryExpression";
79
93
  }
80
94
 
81
95
  transform(object, parents) {
82
- var operator = object.operator;
83
- var allowedOperators = new Set(["+", "-", "*", "/"]);
84
-
85
- if (!allowedOperators.has(operator)) {
96
+ // Allow percentage
97
+ if (!(0, _probability.ComputeProbabilityMap)(this.options.calculator)) {
86
98
  return;
87
99
  }
88
100
 
89
- var myPrecedence = _precedence.OPERATOR_PRECEDENCE[operator] + Object.keys(_precedence.OPERATOR_PRECEDENCE).indexOf(operator) / 100;
90
- var precedences = parents.map(x => x.type == "BinaryExpression" && _precedence.OPERATOR_PRECEDENCE[x.operator] + Object.keys(_precedence.OPERATOR_PRECEDENCE).indexOf(x.operator) / 100); // corrupt AST
101
+ var operator = object.operator;
102
+ var type;
91
103
 
92
- if (precedences.find(x => x >= myPrecedence)) {
93
- return;
104
+ if (object.type === "BinaryExpression") {
105
+ type = "Binary";
106
+
107
+ if (!allowedBinaryOperators.has(operator)) {
108
+ return;
109
+ } // Additional checks to ensure complex expressions still work
110
+
111
+
112
+ var myPrecedence = _precedence.OPERATOR_PRECEDENCE[operator] + Object.keys(_precedence.OPERATOR_PRECEDENCE).indexOf(operator) / 100;
113
+ var precedences = parents.map(x => x.type == "BinaryExpression" && _precedence.OPERATOR_PRECEDENCE[x.operator] + Object.keys(_precedence.OPERATOR_PRECEDENCE).indexOf(x.operator) / 100); // corrupt AST
114
+
115
+ if (precedences.find(x => x >= myPrecedence)) {
116
+ return;
117
+ }
118
+
119
+ if (parents.find(x => x.$dispatcherSkip || x.type == "BinaryExpression")) {
120
+ return;
121
+ }
94
122
  }
95
123
 
96
- if (parents.find(x => x.$dispatcherSkip || x.type == "BinaryExpression")) {
97
- return;
124
+ if (object.type === "UnaryExpression") {
125
+ type = "Unary";
126
+
127
+ if (!allowedUnaryOperators.has(operator)) {
128
+ return;
129
+ } // Typeof expression fix
130
+
131
+
132
+ if (operator === "typeof" && object.argument.type === "Identifier") {
133
+ // `typeof name` is special because it can reference the variable `name` without
134
+ // throwing any errors. If changed, an error could be thrown, breaking the users code
135
+ return;
136
+ }
98
137
  }
99
138
 
100
139
  return () => {
101
- if (typeof this.ops[operator] !== "number") {
140
+ const opKey = type + "_" + operator;
141
+
142
+ if (typeof this.ops[opKey] !== "number") {
102
143
  var newState;
103
144
 
104
145
  do {
105
- newState = (0, _random.getRandomInteger)(-1000, 1000 + Object.keys(this.ops).length * 5);
146
+ newState = (0, _random.getRandomInteger)(-50, 50 + Object.keys(this.ops).length * 5);
106
147
  } while (this.statesUsed.has(newState));
107
148
 
108
149
  (0, _assert.ok)(!isNaN(newState));
109
150
  this.statesUsed.add(newState);
110
- this.ops[operator] = newState;
111
- this.log(operator, "calc(".concat(newState, ", left, right)"));
151
+ this.ops[opKey] = newState;
152
+
153
+ if (type === "Binary") {
154
+ this.log("left ".concat(operator, " right ->"), "".concat(this.calculatorFn, "((").concat(newState, ", left, right)"));
155
+ } else if (type === "Unary") {
156
+ this.log("".concat(operator, "(argument) ->"), "".concat(this.calculatorFn, "(").concat(newState, ", argument)"));
157
+ }
158
+ } // The operator expression sets the operator to be used
159
+
160
+
161
+ var operatorExpression = (0, _random.choice)([(0, _gen.AssignmentExpression)("=", (0, _gen.Identifier)(this.calculatorOpVar), (0, _gen.Literal)(this.ops[opKey])), (0, _gen.CallExpression)((0, _gen.Identifier)(this.calculatorSetOpFn), [(0, _gen.Literal)(this.ops[opKey])])]);
162
+ var newExpression;
163
+
164
+ if (type === "Binary") {
165
+ newExpression = (0, _gen.CallExpression)((0, _gen.Identifier)(this.calculatorFn), [object.left, object.right, operatorExpression]);
166
+ } else {
167
+ newExpression = (0, _gen.CallExpression)((0, _gen.Identifier)(this.calculatorFn), [object.argument, operatorExpression]);
112
168
  }
113
169
 
114
- this.replace(object, (0, _gen.CallExpression)((0, _gen.Identifier)(this.calculatorFn), [object.left, object.right, (0, _random.choice)([(0, _gen.AssignmentExpression)("=", (0, _gen.Identifier)(this.calculatorOpVar), (0, _gen.Literal)(this.ops[operator])), (0, _gen.CallExpression)((0, _gen.Identifier)(this.calculatorSetOpFn), [(0, _gen.Literal)(this.ops[operator])])])]));
170
+ this.replace(object, newExpression);
115
171
  };
116
172
  }
117
173