js-confuser 1.6.0 → 1.7.1

package/dist/options.js

@@ -12,7 +12,7 @@ var _presets = _interopRequireDefault(require("./presets"));
 
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
-const validProperties = new Set(["preset", "target", "indent", "compact", "hexadecimalNumbers", "minify", "es5", "renameVariables", "renameGlobals", "identifierGenerator", "nameRecycling", "controlFlowFlattening", "globalConcealing", "stringCompression", "stringConcealing", "stringEncoding", "stringSplitting", "duplicateLiteralsRemoval", "dispatcher", "eval", "rgf", "objectExtraction", "flatten", "deadCode", "calculator", "lock", "movedDeclarations", "opaquePredicates", "shuffle", "stack", "verbose", "globalVariables", "debugComments"]);
+const validProperties = new Set(["preset", "target", "indent", "compact", "hexadecimalNumbers", "minify", "es5", "renameVariables", "renameGlobals", "identifierGenerator", "controlFlowFlattening", "globalConcealing", "stringCompression", "stringConcealing", "stringEncoding", "stringSplitting", "duplicateLiteralsRemoval", "dispatcher", "rgf", "objectExtraction", "flatten", "deadCode", "calculator", "lock", "movedDeclarations", "opaquePredicates", "shuffle", "stack", "verbose", "globalVariables", "debugComments"]);
 const validOses = new Set(["windows", "linux", "osx", "ios", "android"]);
 const validBrowsers = new Set(["firefox", "chrome", "iexplorer", "edge", "safari", "opera"]);
 
@@ -117,13 +117,13 @@ async function correctOptions(options) {
 
     if (options.target == "browser") {
       // browser
-      ["window", "document", "postMessage", "alert", "confirm", "location"].forEach(x => options.globalVariables.add(x));
+      ["window", "document", "postMessage", "alert", "confirm", "location", "btoa", "atob", "unescape", "encodeURIComponent"].forEach(x => options.globalVariables.add(x));
     } else {
       // node
-      ["global", "Buffer", "require", "process", "__dirname", "__filename"].forEach(x => options.globalVariables.add(x));
+      ["global", "Buffer", "require", "process", "exports", "module", "__dirname", "__filename"].forEach(x => options.globalVariables.add(x));
     }
 
-    ["globalThis", "console", "parseInt", "parseFloat", "Math", "Promise", "String", "Boolean", "Function", "Object", "Array", "Proxy", "Error", "TypeError", "ReferenceError", "RangeError", "EvalError", "setTimeout", "clearTimeout", "setInterval", "clearInterval", "setImmediate", "clearImmediate", "queueMicrotask", "exports", "module", "isNaN", "isFinite", "Set", "Map", "WeakSet", "WeakMap", "Symbol"].forEach(x => options.globalVariables.add(x));
+    ["globalThis", "console", "parseInt", "parseFloat", "Math", "JSON", "Promise", "String", "Boolean", "Function", "Object", "Array", "Proxy", "Error", "TypeError", "ReferenceError", "RangeError", "EvalError", "setTimeout", "clearTimeout", "setInterval", "clearInterval", "setImmediate", "clearImmediate", "queueMicrotask", "isNaN", "isFinite", "Set", "Map", "WeakSet", "WeakMap", "Symbol"].forEach(x => options.globalVariables.add(x));
   }
 
   return options;

package/dist/presets.js

@@ -22,7 +22,7 @@ exports.default = void 0;
  * 10. Minified output
  *
  * ## **`Disabled features`**
- * - `eval` Use at your own risk!
+ * - `rgf` Use at your own risk!
  *
  * ### Potential Issues
  * 1. *String Encoding* can corrupt files. Disable `stringEncoding` manually if this happens.
@@ -57,7 +57,6 @@ const highPreset = {
   stringEncoding: true,
   stringSplitting: 0.75,
   // Use at own risk
-  eval: false,
   rgf: false
 };
 /**
@@ -71,9 +70,9 @@ const mediumPreset = {
   calculator: true,
   compact: true,
   hexadecimalNumbers: true,
-  controlFlowFlattening: 0.5,
+  controlFlowFlattening: 0.25,
   deadCode: 0.025,
-  dispatcher: 0.75,
+  dispatcher: 0.5,
   duplicateLiteralsRemoval: 0.5,
   globalConcealing: true,
   identifierGenerator: "randomized",
@@ -99,10 +98,10 @@ const lowPreset = {
   calculator: true,
   compact: true,
   hexadecimalNumbers: true,
-  controlFlowFlattening: 0.25,
+  controlFlowFlattening: 0.1,
   deadCode: 0.01,
-  dispatcher: 0.5,
-  duplicateLiteralsRemoval: true,
+  dispatcher: 0.25,
+  duplicateLiteralsRemoval: 0.5,
   identifierGenerator: "randomized",
   minify: true,
   movedDeclarations: true,

package/dist/templates/crash.js

@@ -9,9 +9,9 @@ var _template = _interopRequireDefault(require("./template"));
 
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
-const CrashTemplate1 = (0, _template.default)("\nvar {var} = \"a\";\nwhile(1){\n    {var} = {var} += \"a\";    //add as much as the browser can handle\n}\n");
+const CrashTemplate1 = (0, _template.default)("\nvar {var} = \"a\";\nwhile(1){\n    {var} = {var} += \"a\";\n}\n");
 exports.CrashTemplate1 = CrashTemplate1;
 const CrashTemplate2 = (0, _template.default)("\nwhile(true) {\n    var {var} = 99;\n    for({var} = 99; {var} == {var}; {var} *= {var}) {\n        !{var} && console.log({var});\n        if ({var} <= 10){\n            break;\n        }\n    };\n    if({var} === 100) {\n        {var}--\n    }\n };");
 exports.CrashTemplate2 = CrashTemplate2;
-const CrashTemplate3 = (0, _template.default)("\ntry {\n    function {$2}(y, x){\n        return x;\n      }\n      \n      var {$1} = {$2}(this, function () {\n        var {$3} = function () {\n            var regExp = {$3}\n                .constructor('return /\" + this + \"/')()\n                .constructor('^([^ ]+( +[^ ]+)+)+[^ ]}');\n            \n            return !regExp.call({$1});\n        };\n        \n        return {$3}();\n      });\n      \n      {$1}();\n} catch ( e ) {\n    while(e ? e : !e){\n        var b;\n        var c = 0;\n        (e ? !e : e) ? (function(e){\n            c = e ? 0 : !e ? 1 : 0;\n        })(e) : b = 1;\n\n        if(b&&c){break;}\n        if(b){continue;}\n    }\n}\n");
+const CrashTemplate3 = (0, _template.default)("\ntry {\n    function {$2}(y, x){\n        return x;\n      }\n      \n      var {$1} = {$2}(this, function () {\n        var {$3} = function () {\n            var regExp = {$3}\n                .constructor('return /\" + this + \"/')()\n                .constructor('^([^ ]+( +[^ ]+)+)+[^ ]}');\n            \n            return !regExp.call({$1});\n        };\n        \n        return {$3}();\n      });\n      \n      {$1}();\n} catch ( {$1}e ) {\n    while({$1}e ? {$1}e : !{$1}e){\n        var {$1}b;\n        var {$1}c = 0;\n        ({$1}e ? !{$1}e : {$1}e) ? (function({$1}e){\n            {$1}c = {$1}e ? 0 : !{$1}e ? 1 : 0;\n        })({$1}e) : {$1}b = 1;\n\n        if({$1}b&&{$1}c){break;}\n        if({$1}b){continue;}\n    }\n}\n");
 exports.CrashTemplate3 = CrashTemplate3;

package/dist/templates/functionLength.js

@@ -0,0 +1,16 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.FunctionLengthTemplate = void 0;
+
+var _template = _interopRequireDefault(require("./template"));
+
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+/**
+ * Helper function to set `function.length` property.
+ */
+const FunctionLengthTemplate = (0, _template.default)("\nfunction {name}(functionObject, functionLength){\n  Object[\"defineProperty\"](functionObject, \"length\", {\n    \"value\": functionLength,\n    \"configurable\": true\n  });\n  return functionObject;\n}\n");
+exports.FunctionLengthTemplate = FunctionLengthTemplate;

package/dist/transforms/dispatcher.js

@@ -56,9 +56,12 @@ function _defineProperty(obj, key, value) { if (key in obj) { Object.definePrope
  * 3. using `this`
  */
 class Dispatcher extends _transform.default {
+  // Debug mode preserves function names
   constructor(o) {
     super(o, _order.ObfuscateOrder.Dispatcher);
 
+    _defineProperty(this, "isDebug", false);
+
     _defineProperty(this, "count", void 0);
 
     this.count = 0;
@@ -120,6 +123,12 @@ class Dispatcher extends _transform.default {
                     illegalFnNames.add(name);
                     return "EXIT";
                   }
+                } // Avoid functions with function expressions as they have a different scope
+
+
+                if ((oo.type === "FunctionExpression" || oo.type === "ArrowFunctionExpression") && pp.find(x => x == o.params)) {
+                  illegalFnNames.add(name);
+                  return "EXIT";
                 }
               });
               functionDeclarations[name] = [o, p];
@@ -158,7 +167,7 @@ class Dispatcher extends _transform.default {
 
         var gen = this.getGenerator();
         Object.keys(functionDeclarations).forEach(name => {
-          newFnNames[name] = gen.generate();
+          newFnNames[name] = this.isDebug ? "_dispatcher_" + this.count + "_" + name : gen.generate();
         }); // set containing new name
 
         var set = new Set(Object.keys(newFnNames)); // Only make a dispatcher function if it caught any functions

package/dist/transforms/extraction/duplicateLiteralsRemoval.js

@@ -23,6 +23,10 @@ var _assert = require("assert");
 
 var _random = require("../../util/random");
 
+var _traverse = require("../../traverse");
+
+var _identifiers = require("../../util/identifiers");
+
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
 function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
@@ -46,12 +50,19 @@ function _defineProperty(obj, key, value) { if (key in obj) { Object.definePrope
  * ```
  */
 class DuplicateLiteralsRemoval extends _transform.default {
+  // The array holding all the duplicate literals
+  // The array expression node to be inserted into the program
+
+  /**
+   * Literals in the array
+   */
+
   /**
-   * getter fn name -> accumulative shift
+   * Literals are saved here the first time they are seen.
    */
 
   /**
-   * lex context -> getter fn name
+   * Block -> { functionName, indexShift }
    */
   constructor(o) {
     super(o, _order.ObfuscateOrder.DuplicateLiteralsRemoval);
@@ -64,23 +75,45 @@ class DuplicateLiteralsRemoval extends _transform.default {
 
     _defineProperty(this, "first", void 0);
 
-    _defineProperty(this, "fnShifts", void 0);
-
-    _defineProperty(this, "fnGetters", void 0);
+    _defineProperty(this, "functions", void 0);
 
     this.map = new Map();
     this.first = new Map();
-    this.fnShifts = new Map();
-    this.fnGetters = new Map();
+    this.functions = new Map();
   }
 
   apply(tree) {
     super.apply(tree);
 
-    if (this.arrayName && this.arrayExpression.elements.length) {
+    if (this.arrayName && this.arrayExpression.elements.length > 0) {
+      // This function simply returns the array
       var getArrayFn = this.getPlaceholder();
-      (0, _insert.append)(tree, (0, _gen.FunctionDeclaration)(getArrayFn, [], [(0, _gen.ReturnStatement)(this.arrayExpression)]));
-      (0, _insert.prepend)(tree, (0, _gen.VariableDeclaration)((0, _gen.VariableDeclarator)(this.arrayName, (0, _gen.CallExpression)((0, _gen.MemberExpression)((0, _gen.Identifier)(getArrayFn), (0, _gen.Identifier)("call"), false), [(0, _gen.ThisExpression)()]))));
+      (0, _insert.append)(tree, (0, _gen.FunctionDeclaration)(getArrayFn, [], [(0, _gen.ReturnStatement)(this.arrayExpression)])); // This variable holds the array
+
+      (0, _insert.prepend)(tree, (0, _gen.VariableDeclaration)((0, _gen.VariableDeclarator)(this.arrayName, (0, _gen.CallExpression)((0, _gen.MemberExpression)((0, _gen.Identifier)(getArrayFn), (0, _gen.Literal)("call"), true), [(0, _gen.ThisExpression)()])))); // Create all the functions needed
+
+      for (var blockNode of this.functions.keys()) {
+        var {
+          functionName,
+          indexShift
+        } = this.functions.get(blockNode);
+        var propertyNode = (0, _gen.BinaryExpression)("-", (0, _gen.Identifier)("index_param"), (0, _gen.Literal)(indexShift));
+        var indexRangeInclusive = [0 + indexShift - 1, this.map.size + indexShift]; // The function uses mangling to hide the index being accessed
+
+        var mangleCount = (0, _random.getRandomInteger)(1, 10);
+
+        for (var i = 0; i < mangleCount; i++) {
+          var operator = (0, _random.choice)([">", "<"]);
+          var compareValue = (0, _random.choice)(indexRangeInclusive);
+          var test = (0, _gen.BinaryExpression)(operator, (0, _gen.Identifier)("index_param"), (0, _gen.Literal)(compareValue));
+          var alternate = (0, _gen.BinaryExpression)("-", (0, _gen.Identifier)("index_param"), (0, _gen.Literal)((0, _random.getRandomInteger)(-100, 100)));
+          var testValue = operator === ">" && compareValue === indexRangeInclusive[0] || operator === "<" && compareValue === indexRangeInclusive[1];
+          propertyNode = (0, _gen.ConditionalExpression)(test, testValue ? propertyNode : alternate, !testValue ? propertyNode : alternate);
+        }
+
+        var returnArgument = (0, _gen.MemberExpression)((0, _gen.Identifier)(this.arrayName), propertyNode, true);
+        (0, _insert.prepend)(blockNode, (0, _gen.FunctionDeclaration)(functionName, [(0, _gen.Identifier)("index_param")], [(0, _gen.ReturnStatement)(returnArgument)]));
+      }
     }
   }
 
@@ -95,48 +128,47 @@ class DuplicateLiteralsRemoval extends _transform.default {
    */
 
 
-  toCaller(object, parents, index) {
-    // get all the getters defined here or higher
-    var getterNames = [object, ...parents].map(x => this.fnGetters.get(x)).filter(x => x); // use random getter function
-
-    var getterName = (0, _random.choice)(getterNames); // get this literals context
+  transformLiteral(object, parents, index) {
+    var blockNode = (0, _random.choice)(parents.filter(x => this.functions.has(x))); // Create initial function if none exist
 
-    var lexContext = (0, _insert.getLexContext)(object, parents);
-    var hasGetterHere = this.fnGetters.has(lexContext); // create one if none are available (or by random chance if none are here locally)
+    if (this.functions.size === 0) {
+      var root = parents[parents.length - 1];
+      var rootFunctionName = this.getPlaceholder() + "_dLR_0";
+      this.functions.set(root, {
+        functionName: rootFunctionName,
+        indexShift: (0, _random.getRandomInteger)(-100, 100)
+      });
+      blockNode = root;
+    } // If no function here exist, possibly create new chained function
 
-    var shouldCreateNew = !getterName || !hasGetterHere && Math.random() > 0.9;
 
-    if (shouldCreateNew) {
-      (0, _assert.ok)(!this.fnGetters.has(lexContext));
-      var lexContextIndex = parents.findIndex(x => x !== lexContext && (0, _insert.isLexContext)(x));
-      var basedOn = lexContextIndex !== -1 ? (0, _random.choice)(parents.slice(lexContextIndex + 1).map(x => this.fnGetters.get(x)).filter(x => x)) : null;
-      var body = [];
-      var thisShift = (0, _random.getRandomInteger)(-250, 250); // the name of the getter
+    var block = (0, _traverse.getBlock)(object, parents);
 
-      getterName = this.getPlaceholder() + "_dLR_" + this.fnGetters.size;
+    if (!this.functions.has(block) && (0, _random.chance)(50 - this.functions.size)) {
+      var newFunctionName = this.getPlaceholder() + "_dLR_" + this.functions.size;
+      this.functions.set(block, {
+        functionName: newFunctionName,
+        indexShift: (0, _random.getRandomInteger)(-100, 100)
+      });
+      blockNode = block;
+    } // Derive the function to call from the selected blockNode
 
-      if (basedOn) {
-        var shift = this.fnShifts.get(basedOn);
-        (0, _assert.ok)(typeof shift === "number");
-        body = [(0, _gen.ReturnStatement)((0, _gen.CallExpression)((0, _gen.Identifier)(basedOn), [(0, _gen.BinaryExpression)("+", (0, _gen.Identifier)("index"), (0, _gen.Literal)(thisShift))]))];
-        this.fnShifts.set(getterName, shift + thisShift);
-      } else {
-        // from scratch
-        body = [(0, _gen.ReturnStatement)((0, _gen.MemberExpression)((0, _gen.Identifier)(this.arrayName), (0, _gen.BinaryExpression)("+", (0, _gen.Identifier)("index"), (0, _gen.Literal)(thisShift)), true))];
-        this.fnShifts.set(getterName, thisShift);
-      }
 
-      this.fnGetters.set(lexContext, getterName);
-      (0, _insert.prepend)(lexContext, (0, _gen.VariableDeclaration)((0, _gen.VariableDeclarator)(getterName, (0, _gen.CallExpression)((0, _gen.FunctionExpression)([], [(0, _gen.ReturnStatement)((0, _gen.FunctionExpression)([(0, _gen.Identifier)("index")], body))]), []))));
-    }
+    var {
+      functionName,
+      indexShift
+    } = this.functions.get(blockNode); // Call the function given it's indexShift
 
-    var theShift = this.fnShifts.get(getterName);
-    this.replaceIdentifierOrLiteral(object, (0, _gen.CallExpression)((0, _gen.Identifier)(getterName), [(0, _gen.Literal)(index - theShift)]), parents);
+    var callExpression = (0, _gen.CallExpression)((0, _gen.Identifier)(functionName), [(0, _gen.Literal)(index + indexShift)]);
+    this.replaceIdentifierOrLiteral(object, callExpression, parents);
   }
 
   transform(object, parents) {
     return () => {
-      var value = object.value;
+      if (object.type === "Identifier") {
+        var info = (0, _identifiers.getIdentifierInfo)(object, parents);
+        if (info.isLabel || info.spec.isDefined) return;
+      }
 
       if (object.regex) {
         return;
@@ -147,19 +179,19 @@ class DuplicateLiteralsRemoval extends _transform.default {
       } // HARD CODED LIMIT of 10,000 (after 1,000 elements)
 
 
-      if (this.map.size > 1000 && !(0, _random.chance)(this.map.size / 100)) return;
+      if (this.map.size > 1000 && (0, _random.chance)(this.map.size / 100)) return;
 
       if (this.arrayName && parents[0].object && parents[0].object.name == this.arrayName) {
         return;
       }
 
-      var value;
+      var stringValue;
 
       if (object.type == "Literal") {
-        value = typeof object.value + ":" + object.value;
+        stringValue = typeof object.value + ":" + object.value;
 
         if (object.value === null) {
-          value = "null:null";
+          stringValue = "null:null";
         } else {
           // Skip empty strings
           if (typeof object.value === "string" && !object.value) {
@@ -167,38 +199,42 @@ class DuplicateLiteralsRemoval extends _transform.default {
           }
         }
       } else if (object.type == "Identifier") {
-        value = "identifier:" + object.name;
+        stringValue = "identifier:" + object.name;
       } else {
         throw new Error("Unsupported primitive type: " + object.type);
       }
 
-      (0, _assert.ok)(value);
+      (0, _assert.ok)(stringValue);
 
-      if (!this.first.has(value) && !this.map.has(value)) {
-        this.first.set(value, [object, parents]);
-      } else {
+      if (this.map.has(stringValue) || this.first.has(stringValue)) {
+        // Create the array if not already made
         if (!this.arrayName) {
           this.arrayName = this.getPlaceholder();
           this.arrayExpression = (0, _gen.ArrayExpression)([]);
-        }
+        } // Delete with first location
 
-        var firstLocation = this.first.get(value);
+
+        var firstLocation = this.first.get(stringValue);
 
         if (firstLocation) {
-          this.first.set(value, null);
           var index = this.map.size;
-          (0, _assert.ok)(!this.map.has(value));
-          this.map.set(value, index);
+          (0, _assert.ok)(!this.map.has(stringValue));
+          this.map.set(stringValue, index);
+          this.first.delete(stringValue);
           var pushing = (0, _insert.clone)(object);
           this.arrayExpression.elements.push(pushing);
           (0, _assert.ok)(this.arrayExpression.elements[index] === pushing);
-          this.toCaller(firstLocation[0], firstLocation[1], index);
+          this.transformLiteral(firstLocation[0], firstLocation[1], index);
         }
 
-        var index = this.map.get(value);
+        var index = this.map.get(stringValue);
         (0, _assert.ok)(typeof index === "number");
-        this.toCaller(object, parents, index);
-      }
+        this.transformLiteral(object, parents, index);
+        return;
+      } // Save this, maybe a duplicate will be found.
+
+
+      this.first.set(stringValue, [object, parents]);
     };
   }
 

package/dist/transforms/extraction/objectExtraction.js

@@ -236,7 +236,12 @@ class ObjectExtraction extends _transform.default {
             var v = property.value;
             variableDeclarators.push((0, _gen.VariableDeclarator)(nn, this.addComment(v, "".concat(name, ".").concat(keyName))));
           });
-          declaration.declarations.splice(declaration.declarations.indexOf(declarator), 1, ...variableDeclarators); // update all identifiers that pointed to the old object
+          declaration.declarations.splice(declaration.declarations.indexOf(declarator), 1, ...variableDeclarators);
+
+          if (declaration.kind === "const") {
+            declaration.kind = "var";
+          } // update all identifiers that pointed to the old object
+
 
           objectDefChanges[name] && objectDefChanges[name].forEach(change => {
             if (!change.key) {