js-confuser 1.7.1 → 1.7.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.github/workflows/node.js.yml +1 -1
- package/CHANGELOG.md +73 -0
- package/README.md +32 -31
- package/dist/compiler.js +2 -8
- package/dist/constants.js +22 -10
- package/dist/index.js +15 -30
- package/dist/obfuscator.js +15 -62
- package/dist/options.js +33 -40
- package/dist/order.js +4 -7
- package/dist/parser.js +5 -13
- package/dist/precedence.js +6 -8
- package/dist/presets.js +4 -6
- package/dist/probability.js +13 -24
- package/dist/templates/bufferToString.js +121 -5
- package/dist/templates/core.js +35 -0
- package/dist/templates/crash.js +22 -11
- package/dist/templates/es5.js +125 -6
- package/dist/templates/functionLength.js +24 -6
- package/dist/templates/globals.js +9 -0
- package/dist/templates/template.js +189 -43
- package/dist/transforms/antiTooling.js +26 -22
- package/dist/transforms/calculator.js +19 -55
- package/dist/transforms/controlFlowFlattening/controlFlowFlattening.js +242 -333
- package/dist/transforms/controlFlowFlattening/expressionObfuscation.js +46 -25
- package/dist/transforms/deadCode.js +542 -31
- package/dist/transforms/dispatcher.js +112 -112
- package/dist/transforms/es5/antiClass.js +70 -44
- package/dist/transforms/es5/antiDestructuring.js +14 -38
- package/dist/transforms/es5/antiES6Object.js +39 -48
- package/dist/transforms/es5/antiSpreadOperator.js +5 -14
- package/dist/transforms/es5/antiTemplate.js +10 -19
- package/dist/transforms/es5/es5.js +7 -40
- package/dist/transforms/extraction/classExtraction.js +83 -0
- package/dist/transforms/extraction/duplicateLiteralsRemoval.js +41 -80
- package/dist/transforms/extraction/objectExtraction.js +24 -56
- package/dist/transforms/finalizer.js +6 -20
- package/dist/transforms/flatten.js +51 -99
- package/dist/transforms/identifier/globalAnalysis.js +21 -26
- package/dist/transforms/identifier/globalConcealing.js +72 -56
- package/dist/transforms/identifier/movedDeclarations.js +66 -38
- package/dist/transforms/identifier/renameVariables.js +36 -68
- package/dist/transforms/identifier/variableAnalysis.js +21 -48
- package/dist/transforms/lock/antiDebug.js +20 -25
- package/dist/transforms/lock/integrity.js +53 -52
- package/dist/transforms/lock/lock.js +161 -126
- package/dist/transforms/minify.js +77 -108
- package/dist/transforms/opaquePredicates.js +12 -49
- package/dist/transforms/preparation.js +28 -49
- package/dist/transforms/renameLabels.js +5 -22
- package/dist/transforms/rgf.js +125 -72
- package/dist/transforms/shuffle.js +42 -47
- package/dist/transforms/stack.js +41 -98
- package/dist/transforms/string/encoding.js +76 -27
- package/dist/transforms/string/stringCompression.js +75 -68
- package/dist/transforms/string/stringConcealing.js +127 -135
- package/dist/transforms/string/stringEncoding.js +6 -26
- package/dist/transforms/string/stringSplitting.js +5 -30
- package/dist/transforms/transform.js +76 -104
- package/dist/traverse.js +11 -18
- package/dist/util/compare.js +27 -29
- package/dist/util/gen.js +32 -86
- package/dist/util/guard.js +5 -1
- package/dist/util/identifiers.js +9 -72
- package/dist/util/insert.js +27 -77
- package/dist/util/math.js +0 -3
- package/dist/util/object.js +3 -7
- package/dist/util/random.js +31 -36
- package/dist/util/scope.js +6 -3
- package/docs/Countermeasures.md +13 -6
- package/docs/Integrity.md +35 -28
- package/docs/RGF.md +6 -1
- package/docs/RenameVariables.md +116 -0
- package/docs/TamperProtection.md +100 -0
- package/docs/Template.md +117 -0
- package/package.json +3 -3
- package/src/constants.ts +17 -0
- package/src/index.ts +7 -5
- package/src/options.ts +60 -7
- package/src/order.ts +2 -2
- package/src/templates/bufferToString.ts +79 -11
- package/src/templates/core.ts +29 -0
- package/src/templates/crash.ts +6 -38
- package/src/templates/es5.ts +1 -1
- package/src/templates/functionLength.ts +21 -3
- package/src/templates/globals.ts +3 -0
- package/src/templates/template.ts +205 -46
- package/src/transforms/antiTooling.ts +33 -11
- package/src/transforms/calculator.ts +4 -2
- package/src/transforms/controlFlowFlattening/controlFlowFlattening.ts +12 -5
- package/src/transforms/controlFlowFlattening/expressionObfuscation.ts +46 -10
- package/src/transforms/deadCode.ts +74 -42
- package/src/transforms/dispatcher.ts +99 -73
- package/src/transforms/es5/antiClass.ts +25 -12
- package/src/transforms/es5/antiDestructuring.ts +1 -1
- package/src/transforms/es5/antiES6Object.ts +2 -2
- package/src/transforms/es5/antiTemplate.ts +1 -1
- package/src/transforms/extraction/classExtraction.ts +168 -0
- package/src/transforms/extraction/duplicateLiteralsRemoval.ts +11 -16
- package/src/transforms/extraction/objectExtraction.ts +4 -15
- package/src/transforms/flatten.ts +20 -5
- package/src/transforms/identifier/globalAnalysis.ts +18 -1
- package/src/transforms/identifier/globalConcealing.ts +119 -72
- package/src/transforms/identifier/movedDeclarations.ts +90 -24
- package/src/transforms/identifier/renameVariables.ts +16 -1
- package/src/transforms/lock/antiDebug.ts +2 -2
- package/src/transforms/lock/integrity.ts +13 -11
- package/src/transforms/lock/lock.ts +122 -30
- package/src/transforms/minify.ts +28 -13
- package/src/transforms/opaquePredicates.ts +2 -2
- package/src/transforms/preparation.ts +16 -0
- package/src/transforms/rgf.ts +139 -12
- package/src/transforms/shuffle.ts +3 -3
- package/src/transforms/stack.ts +19 -4
- package/src/transforms/string/encoding.ts +88 -51
- package/src/transforms/string/stringCompression.ts +86 -17
- package/src/transforms/string/stringConcealing.ts +148 -118
- package/src/transforms/string/stringEncoding.ts +1 -2
- package/src/transforms/string/stringSplitting.ts +1 -2
- package/src/transforms/transform.ts +63 -46
- package/src/types.ts +2 -0
- package/src/util/compare.ts +39 -5
- package/src/util/gen.ts +10 -3
- package/src/util/guard.ts +10 -0
- package/src/util/insert.ts +17 -0
- package/src/util/random.ts +81 -1
- package/src/util/scope.ts +14 -2
- package/test/code/Cash.test.ts +94 -5
- package/test/code/StrictMode.src.js +65 -0
- package/test/code/StrictMode.test.js +37 -0
- package/test/compare.test.ts +62 -2
- package/test/options.test.ts +129 -55
- package/test/templates/template.test.ts +211 -1
- package/test/transforms/controlFlowFlattening/expressionObfuscation.test.ts +37 -18
- package/test/transforms/dispatcher.test.ts +55 -0
- package/test/transforms/extraction/classExtraction.test.ts +86 -0
- package/test/transforms/extraction/duplicateLiteralsRemoval.test.ts +8 -0
- package/test/transforms/extraction/objectExtraction.test.ts +2 -0
- package/test/transforms/identifier/globalConcealing.test.ts +89 -0
- package/test/transforms/identifier/movedDeclarations.test.ts +61 -0
- package/test/transforms/identifier/renameVariables.test.ts +75 -1
- package/test/transforms/lock/tamperProtection.test.ts +336 -0
- package/test/transforms/minify.test.ts +37 -0
- package/test/transforms/rgf.test.ts +50 -0
- package/dist/transforms/controlFlowFlattening/choiceFlowObfuscation.js +0 -62
- package/dist/transforms/controlFlowFlattening/controlFlowObfuscation.js +0 -159
- package/dist/transforms/controlFlowFlattening/switchCaseObfuscation.js +0 -106
- package/dist/transforms/eval.js +0 -84
- package/dist/transforms/hexadecimalNumbers.js +0 -63
- package/dist/transforms/hideInitializingCode.js +0 -270
- package/dist/transforms/identifier/nameRecycling.js +0 -218
- package/dist/transforms/label.js +0 -67
- package/dist/transforms/preparation/nameConflicts.js +0 -116
- package/dist/transforms/preparation/preparation.js +0 -188
package/dist/options.js
CHANGED
|
@@ -5,116 +5,111 @@ Object.defineProperty(exports, "__esModule", {
|
|
|
5
5
|
});
|
|
6
6
|
exports.correctOptions = correctOptions;
|
|
7
7
|
exports.validateOptions = validateOptions;
|
|
8
|
-
|
|
9
8
|
var _assert = require("assert");
|
|
10
|
-
|
|
11
9
|
var _presets = _interopRequireDefault(require("./presets"));
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
const validProperties = new Set(["preset", "target", "indent", "compact", "hexadecimalNumbers", "minify", "es5", "renameVariables", "renameGlobals", "identifierGenerator", "controlFlowFlattening", "globalConcealing", "stringCompression", "stringConcealing", "stringEncoding", "stringSplitting", "duplicateLiteralsRemoval", "dispatcher", "rgf", "objectExtraction", "flatten", "deadCode", "calculator", "lock", "movedDeclarations", "opaquePredicates", "shuffle", "stack", "verbose", "globalVariables", "debugComments"]);
|
|
10
|
+
function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
|
|
11
|
+
const validProperties = new Set(["preset", "target", "indent", "compact", "hexadecimalNumbers", "minify", "es5", "renameVariables", "renameGlobals", "identifierGenerator", "controlFlowFlattening", "globalConcealing", "stringCompression", "stringConcealing", "stringEncoding", "stringSplitting", "duplicateLiteralsRemoval", "dispatcher", "rgf", "objectExtraction", "flatten", "deadCode", "calculator", "lock", "movedDeclarations", "opaquePredicates", "shuffle", "stack", "verbose", "globalVariables", "debugComments", "preserveFunctionLength"]);
|
|
12
|
+
const validLockProperties = new Set(["selfDefending", "antiDebug", "context", "tamperProtection", "startDate", "endDate", "domainLock", "osLock", "browserLock", "integrity", "countermeasures"]);
|
|
16
13
|
const validOses = new Set(["windows", "linux", "osx", "ios", "android"]);
|
|
17
14
|
const validBrowsers = new Set(["firefox", "chrome", "iexplorer", "edge", "safari", "opera"]);
|
|
18
|
-
|
|
19
15
|
function validateOptions(options) {
|
|
20
16
|
if (!options || Object.keys(options).length <= 1) {
|
|
21
17
|
/**
|
|
22
18
|
* Give a welcoming introduction to those who skipped the documentation.
|
|
23
19
|
*/
|
|
24
|
-
var line =
|
|
25
|
-
throw new Error(
|
|
20
|
+
var line = `You provided zero obfuscation options. By default everything is disabled.\nYou can use a preset with:\n\n> {target: '${options.target || "node"}', preset: 'high' | 'medium' | 'low'}.\n\n\nView all settings here:\nhttps://github.com/MichaelXF/js-confuser#options`;
|
|
21
|
+
throw new Error(`\n\n` + line.split("\n").map(x => `\t${x}`).join("\n") + `\n\n`);
|
|
26
22
|
}
|
|
27
|
-
|
|
28
23
|
(0, _assert.ok)(options, "options cannot be null");
|
|
29
24
|
(0, _assert.ok)(options.target, "Missing options.target option (required, must one the following: 'browser' or 'node')");
|
|
30
|
-
(0, _assert.ok)(["browser", "node"].includes(options.target),
|
|
25
|
+
(0, _assert.ok)(["browser", "node"].includes(options.target), `'${options.target}' is not a valid target mode`);
|
|
31
26
|
Object.keys(options).forEach(key => {
|
|
32
27
|
if (!validProperties.has(key)) {
|
|
33
28
|
throw new TypeError("Invalid option: '" + key + "'");
|
|
34
29
|
}
|
|
35
30
|
});
|
|
36
|
-
|
|
37
31
|
if (options.target === "node" && options.lock && options.lock.browserLock && options.lock.browserLock.length) {
|
|
38
32
|
throw new TypeError('browserLock can only be used when target="browser"');
|
|
39
33
|
}
|
|
40
|
-
|
|
41
34
|
if (options.lock) {
|
|
35
|
+
(0, _assert.ok)(typeof options.lock === "object", "options.lock must be an object");
|
|
36
|
+
Object.keys(options.lock).forEach(key => {
|
|
37
|
+
if (!validLockProperties.has(key)) {
|
|
38
|
+
throw new TypeError("Invalid lock option: '" + key + "'");
|
|
39
|
+
}
|
|
40
|
+
});
|
|
41
|
+
|
|
42
42
|
// Validate browser-lock option
|
|
43
43
|
if (options.lock.browserLock && typeof options.lock.browserLock !== "undefined") {
|
|
44
44
|
(0, _assert.ok)(Array.isArray(options.lock.browserLock), "browserLock must be an array");
|
|
45
45
|
(0, _assert.ok)(!options.lock.browserLock.find(browserName => !validBrowsers.has(browserName)), 'Invalid browser name. Allowed: "firefox", "chrome", "iexplorer", "edge", "safari", "opera"');
|
|
46
|
-
}
|
|
47
|
-
|
|
48
|
-
|
|
46
|
+
}
|
|
47
|
+
// Validate os-lock option
|
|
49
48
|
if (options.lock.osLock && typeof options.lock.osLock !== "undefined") {
|
|
50
49
|
(0, _assert.ok)(Array.isArray(options.lock.osLock), "osLock must be an array");
|
|
51
50
|
(0, _assert.ok)(!options.lock.osLock.find(osName => !validOses.has(osName)), 'Invalid OS name. Allowed: "windows", "linux", "osx", "ios", "android"');
|
|
52
|
-
}
|
|
53
|
-
|
|
54
|
-
|
|
51
|
+
}
|
|
52
|
+
// Validate domain-lock option
|
|
55
53
|
if (options.lock.domainLock && typeof options.lock.domainLock !== "undefined") {
|
|
56
54
|
(0, _assert.ok)(Array.isArray(options.lock.domainLock), "domainLock must be an array");
|
|
57
|
-
}
|
|
58
|
-
|
|
55
|
+
}
|
|
59
56
|
|
|
57
|
+
// Validate context option
|
|
60
58
|
if (options.lock.context && typeof options.lock.context !== "undefined") {
|
|
61
59
|
(0, _assert.ok)(Array.isArray(options.lock.context), "context must be an array");
|
|
62
|
-
}
|
|
63
|
-
|
|
60
|
+
}
|
|
64
61
|
|
|
62
|
+
// Validate start-date option
|
|
65
63
|
if (typeof options.lock.startDate !== "undefined" && options.lock.startDate) {
|
|
66
64
|
(0, _assert.ok)(typeof options.lock.startDate === "number" || options.lock.startDate instanceof Date, "startDate must be Date object or number");
|
|
67
|
-
}
|
|
68
|
-
|
|
65
|
+
}
|
|
69
66
|
|
|
67
|
+
// Validate end-date option
|
|
70
68
|
if (typeof options.lock.endDate !== "undefined" && options.lock.endDate) {
|
|
71
69
|
(0, _assert.ok)(typeof options.lock.endDate === "number" || options.lock.endDate instanceof Date, "endDate must be Date object or number");
|
|
72
70
|
}
|
|
73
71
|
}
|
|
74
|
-
|
|
75
72
|
if (options.preset) {
|
|
76
73
|
if (!_presets.default[options.preset]) {
|
|
77
74
|
throw new TypeError("Unknown preset of '" + options.preset + "'");
|
|
78
75
|
}
|
|
79
76
|
}
|
|
80
77
|
}
|
|
78
|
+
|
|
81
79
|
/**
|
|
82
80
|
* Corrects the user's options. Sets the default values and validates the configuration.
|
|
83
81
|
* @param options
|
|
84
82
|
* @returns
|
|
85
83
|
*/
|
|
86
|
-
|
|
87
|
-
|
|
88
84
|
async function correctOptions(options) {
|
|
89
85
|
if (options.preset) {
|
|
90
86
|
// Clone and allow overriding
|
|
91
87
|
options = Object.assign({}, _presets.default[options.preset], options);
|
|
92
88
|
}
|
|
93
|
-
|
|
94
89
|
if (!options.hasOwnProperty("debugComments")) {
|
|
95
90
|
options.debugComments = false; // debugComments is off by default
|
|
96
91
|
}
|
|
97
|
-
|
|
98
92
|
if (!options.hasOwnProperty("compact")) {
|
|
99
93
|
options.compact = true; // Compact is on by default
|
|
100
94
|
}
|
|
101
|
-
|
|
102
95
|
if (!options.hasOwnProperty("renameGlobals")) {
|
|
103
96
|
options.renameGlobals = true; // RenameGlobals is on by default
|
|
104
97
|
}
|
|
105
|
-
|
|
98
|
+
if (!options.hasOwnProperty("preserveFunctionLength")) {
|
|
99
|
+
options.preserveFunctionLength = true; // preserveFunctionLength is on by default
|
|
100
|
+
}
|
|
106
101
|
if (options.globalVariables && !(options.globalVariables instanceof Set)) {
|
|
107
102
|
options.globalVariables = new Set(Object.keys(options.globalVariables));
|
|
108
103
|
}
|
|
104
|
+
if (options.lock) {
|
|
105
|
+
if (options.lock.selfDefending) {
|
|
106
|
+
options.compact = true; // self defending forcibly enables this
|
|
107
|
+
}
|
|
108
|
+
}
|
|
109
109
|
|
|
110
|
-
|
|
111
|
-
options.compact = true; // self defending forcibly enables this
|
|
112
|
-
} // options.globalVariables outlines generic globals that should be present in the execution context
|
|
113
|
-
|
|
114
|
-
|
|
110
|
+
// options.globalVariables outlines generic globals that should be present in the execution context
|
|
115
111
|
if (!options.hasOwnProperty("globalVariables")) {
|
|
116
112
|
options.globalVariables = new Set([]);
|
|
117
|
-
|
|
118
113
|
if (options.target == "browser") {
|
|
119
114
|
// browser
|
|
120
115
|
["window", "document", "postMessage", "alert", "confirm", "location", "btoa", "atob", "unescape", "encodeURIComponent"].forEach(x => options.globalVariables.add(x));
|
|
@@ -122,9 +117,7 @@ async function correctOptions(options) {
|
|
|
122
117
|
// node
|
|
123
118
|
["global", "Buffer", "require", "process", "exports", "module", "__dirname", "__filename"].forEach(x => options.globalVariables.add(x));
|
|
124
119
|
}
|
|
125
|
-
|
|
126
120
|
["globalThis", "console", "parseInt", "parseFloat", "Math", "JSON", "Promise", "String", "Boolean", "Function", "Object", "Array", "Proxy", "Error", "TypeError", "ReferenceError", "RangeError", "EvalError", "setTimeout", "clearTimeout", "setInterval", "clearInterval", "setImmediate", "clearImmediate", "queueMicrotask", "isNaN", "isFinite", "Set", "Map", "WeakSet", "WeakMap", "Symbol"].forEach(x => options.globalVariables.add(x));
|
|
127
121
|
}
|
|
128
|
-
|
|
129
122
|
return options;
|
|
130
123
|
}
|
package/dist/order.js
CHANGED
|
@@ -4,14 +4,10 @@ Object.defineProperty(exports, "__esModule", {
|
|
|
4
4
|
value: true
|
|
5
5
|
});
|
|
6
6
|
exports.ObfuscateOrder = void 0;
|
|
7
|
-
|
|
8
7
|
/**
|
|
9
8
|
* Describes the order of transformations.
|
|
10
9
|
*/
|
|
11
|
-
let ObfuscateOrder
|
|
12
|
-
exports.ObfuscateOrder = ObfuscateOrder;
|
|
13
|
-
|
|
14
|
-
(function (ObfuscateOrder) {
|
|
10
|
+
let ObfuscateOrder = exports.ObfuscateOrder = /*#__PURE__*/function (ObfuscateOrder) {
|
|
15
11
|
ObfuscateOrder[ObfuscateOrder["Preparation"] = 0] = "Preparation";
|
|
16
12
|
ObfuscateOrder[ObfuscateOrder["ObjectExtraction"] = 1] = "ObjectExtraction";
|
|
17
13
|
ObfuscateOrder[ObfuscateOrder["Flatten"] = 2] = "Flatten";
|
|
@@ -34,8 +30,9 @@ exports.ObfuscateOrder = ObfuscateOrder;
|
|
|
34
30
|
ObfuscateOrder[ObfuscateOrder["MovedDeclarations"] = 26] = "MovedDeclarations";
|
|
35
31
|
ObfuscateOrder[ObfuscateOrder["RenameLabels"] = 27] = "RenameLabels";
|
|
36
32
|
ObfuscateOrder[ObfuscateOrder["Minify"] = 28] = "Minify";
|
|
33
|
+
ObfuscateOrder[ObfuscateOrder["AntiTooling"] = 29] = "AntiTooling";
|
|
37
34
|
ObfuscateOrder[ObfuscateOrder["RenameVariables"] = 30] = "RenameVariables";
|
|
38
35
|
ObfuscateOrder[ObfuscateOrder["ES5"] = 31] = "ES5";
|
|
39
|
-
ObfuscateOrder[ObfuscateOrder["AntiTooling"] = 34] = "AntiTooling";
|
|
40
36
|
ObfuscateOrder[ObfuscateOrder["Finalizer"] = 35] = "Finalizer";
|
|
41
|
-
|
|
37
|
+
return ObfuscateOrder;
|
|
38
|
+
}({});
|
package/dist/parser.js
CHANGED
|
@@ -6,24 +6,18 @@ Object.defineProperty(exports, "__esModule", {
|
|
|
6
6
|
exports.default = parseJS;
|
|
7
7
|
exports.parseSnippet = parseSnippet;
|
|
8
8
|
exports.parseSync = parseSync;
|
|
9
|
-
|
|
10
9
|
var assert = _interopRequireWildcard(require("assert"));
|
|
11
|
-
|
|
12
|
-
function
|
|
13
|
-
|
|
14
|
-
function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
|
|
15
|
-
|
|
10
|
+
function _getRequireWildcardCache(e) { if ("function" != typeof WeakMap) return null; var r = new WeakMap(), t = new WeakMap(); return (_getRequireWildcardCache = function (e) { return e ? t : r; })(e); }
|
|
11
|
+
function _interopRequireWildcard(e, r) { if (!r && e && e.__esModule) return e; if (null === e || "object" != typeof e && "function" != typeof e) return { default: e }; var t = _getRequireWildcardCache(r); if (t && t.has(e)) return t.get(e); var n = { __proto__: null }, a = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var u in e) if ("default" !== u && {}.hasOwnProperty.call(e, u)) { var i = a ? Object.getOwnPropertyDescriptor(e, u) : null; i && (i.get || i.set) ? Object.defineProperty(n, u, i) : n[u] = e[u]; } return n.default = e, t && t.set(e, n), n; }
|
|
16
12
|
const acorn = require("acorn");
|
|
13
|
+
|
|
17
14
|
/**
|
|
18
15
|
* Uses `acorn` to parse Javascript Code. Returns an AST tree.
|
|
19
16
|
* @param code
|
|
20
17
|
* @returns
|
|
21
18
|
*/
|
|
22
|
-
|
|
23
|
-
|
|
24
19
|
async function parseJS(code) {
|
|
25
20
|
assert.ok(typeof code === "string", "code must be a string");
|
|
26
|
-
|
|
27
21
|
try {
|
|
28
22
|
var parsed = parseSync(code);
|
|
29
23
|
return parsed;
|
|
@@ -31,13 +25,12 @@ async function parseJS(code) {
|
|
|
31
25
|
throw e;
|
|
32
26
|
}
|
|
33
27
|
}
|
|
28
|
+
|
|
34
29
|
/**
|
|
35
30
|
* Parses a snippet code. Returns an AST Tree.
|
|
36
31
|
* @param code
|
|
37
32
|
* @returns
|
|
38
33
|
*/
|
|
39
|
-
|
|
40
|
-
|
|
41
34
|
function parseSnippet(code) {
|
|
42
35
|
return acorn.parse(code, {
|
|
43
36
|
ecmaVersion: "latest",
|
|
@@ -45,13 +38,12 @@ function parseSnippet(code) {
|
|
|
45
38
|
sourceType: "module"
|
|
46
39
|
});
|
|
47
40
|
}
|
|
41
|
+
|
|
48
42
|
/**
|
|
49
43
|
* Parses synchronously. Attempts to parse as a es-module, then fallbacks to a script.
|
|
50
44
|
* @param code
|
|
51
45
|
* @returns
|
|
52
46
|
*/
|
|
53
|
-
|
|
54
|
-
|
|
55
47
|
function parseSync(code) {
|
|
56
48
|
try {
|
|
57
49
|
return acorn.parse(code, {
|
package/dist/precedence.js
CHANGED
|
@@ -4,7 +4,7 @@ Object.defineProperty(exports, "__esModule", {
|
|
|
4
4
|
value: true
|
|
5
5
|
});
|
|
6
6
|
exports.OPERATOR_PRECEDENCE = exports.NEEDS_PARENTHESES = exports.EXPRESSIONS_PRECEDENCE = void 0;
|
|
7
|
-
const OPERATOR_PRECEDENCE = {
|
|
7
|
+
const OPERATOR_PRECEDENCE = exports.OPERATOR_PRECEDENCE = {
|
|
8
8
|
"||": 3,
|
|
9
9
|
"&&": 4,
|
|
10
10
|
"|": 5,
|
|
@@ -29,12 +29,11 @@ const OPERATOR_PRECEDENCE = {
|
|
|
29
29
|
"%": 12,
|
|
30
30
|
"/": 12,
|
|
31
31
|
"**": 13
|
|
32
|
-
};
|
|
32
|
+
};
|
|
33
33
|
|
|
34
|
-
|
|
35
|
-
const NEEDS_PARENTHESES = 17;
|
|
36
|
-
exports.
|
|
37
|
-
const EXPRESSIONS_PRECEDENCE = {
|
|
34
|
+
// Enables parenthesis regardless of precedence
|
|
35
|
+
const NEEDS_PARENTHESES = exports.NEEDS_PARENTHESES = 17;
|
|
36
|
+
const EXPRESSIONS_PRECEDENCE = exports.EXPRESSIONS_PRECEDENCE = {
|
|
38
37
|
// Definitions
|
|
39
38
|
ArrayExpression: 20,
|
|
40
39
|
TaggedTemplateExpression: 20,
|
|
@@ -64,5 +63,4 @@ const EXPRESSIONS_PRECEDENCE = {
|
|
|
64
63
|
AssignmentExpression: 3,
|
|
65
64
|
YieldExpression: 2,
|
|
66
65
|
RestElement: 1
|
|
67
|
-
};
|
|
68
|
-
exports.EXPRESSIONS_PRECEDENCE = EXPRESSIONS_PRECEDENCE;
|
|
66
|
+
};
|
package/dist/presets.js
CHANGED
|
@@ -4,7 +4,6 @@ Object.defineProperty(exports, "__esModule", {
|
|
|
4
4
|
value: true
|
|
5
5
|
});
|
|
6
6
|
exports.default = void 0;
|
|
7
|
-
|
|
8
7
|
/**
|
|
9
8
|
* - High Obfuscation preset.
|
|
10
9
|
* - **Average 90% performance reduction.**
|
|
@@ -59,11 +58,11 @@ const highPreset = {
|
|
|
59
58
|
// Use at own risk
|
|
60
59
|
rgf: false
|
|
61
60
|
};
|
|
61
|
+
|
|
62
62
|
/**
|
|
63
63
|
* - Medium Obfuscation preset.
|
|
64
64
|
* - Average 50% performance reduction.
|
|
65
65
|
*/
|
|
66
|
-
|
|
67
66
|
const mediumPreset = {
|
|
68
67
|
target: "node",
|
|
69
68
|
preset: "medium",
|
|
@@ -87,11 +86,11 @@ const mediumPreset = {
|
|
|
87
86
|
stringConcealing: true,
|
|
88
87
|
stringSplitting: 0.25
|
|
89
88
|
};
|
|
89
|
+
|
|
90
90
|
/**
|
|
91
91
|
* - Low Obfuscation preset.
|
|
92
92
|
* - Average 30% performance reduction.
|
|
93
93
|
*/
|
|
94
|
-
|
|
95
94
|
const lowPreset = {
|
|
96
95
|
target: "node",
|
|
97
96
|
preset: "low",
|
|
@@ -111,14 +110,13 @@ const lowPreset = {
|
|
|
111
110
|
renameGlobals: true,
|
|
112
111
|
stringConcealing: true
|
|
113
112
|
};
|
|
113
|
+
|
|
114
114
|
/**
|
|
115
115
|
* Built-in obfuscator presets.
|
|
116
116
|
*/
|
|
117
|
-
|
|
118
117
|
const presets = {
|
|
119
118
|
high: highPreset,
|
|
120
119
|
medium: mediumPreset,
|
|
121
120
|
low: lowPreset
|
|
122
121
|
};
|
|
123
|
-
var _default = presets;
|
|
124
|
-
exports.default = _default;
|
|
122
|
+
var _default = exports.default = presets;
|
package/dist/probability.js
CHANGED
|
@@ -5,10 +5,19 @@ Object.defineProperty(exports, "__esModule", {
|
|
|
5
5
|
});
|
|
6
6
|
exports.ComputeProbabilityMap = ComputeProbabilityMap;
|
|
7
7
|
exports.isProbabilityMapProbable = isProbabilityMapProbable;
|
|
8
|
-
|
|
9
8
|
var _assert = require("assert");
|
|
10
|
-
|
|
11
9
|
var _object = require("./util/object");
|
|
10
|
+
/**
|
|
11
|
+
* Configurable probabilities for obfuscator options.
|
|
12
|
+
* - **`false`** = this feature is disabled
|
|
13
|
+
* - **`true`** = this feature is enabled, use default mode
|
|
14
|
+
* - **`0.5`** = 50% chance
|
|
15
|
+
* - **`"mode"`** = enabled, use specified mode
|
|
16
|
+
* - **`["mode1", "mode2"]`** - enabled, choose random mode each occurrence
|
|
17
|
+
* - **`{"mode1": 0.5, "mode2": 0.5}`** - enabled, choose based on specified probabilities
|
|
18
|
+
* - **`{"mode1": 50, "mode2": 50}`** - enabled, each is divided based on total
|
|
19
|
+
* - **`function(x){ return "custom_implementation" }`** - enabled, use specified function
|
|
20
|
+
*/
|
|
12
21
|
|
|
13
22
|
/**
|
|
14
23
|
* Evaluates a ProbabilityMap.
|
|
@@ -18,33 +27,25 @@ var _object = require("./util/object");
|
|
|
18
27
|
*/
|
|
19
28
|
function ComputeProbabilityMap(map) {
|
|
20
29
|
let runner = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : x => x;
|
|
21
|
-
|
|
22
30
|
if (!map) {
|
|
23
31
|
return runner();
|
|
24
32
|
}
|
|
25
|
-
|
|
26
33
|
if (map === true || map === 1) {
|
|
27
34
|
return runner(true);
|
|
28
35
|
}
|
|
29
|
-
|
|
30
36
|
if (typeof map === "number") {
|
|
31
37
|
return runner(Math.random() < map);
|
|
32
38
|
}
|
|
33
|
-
|
|
34
39
|
if (typeof map === "function") {
|
|
35
40
|
for (var _len = arguments.length, customFnArgs = new Array(_len > 2 ? _len - 2 : 0), _key = 2; _key < _len; _key++) {
|
|
36
41
|
customFnArgs[_key - 2] = arguments[_key];
|
|
37
42
|
}
|
|
38
|
-
|
|
39
43
|
return map(...customFnArgs);
|
|
40
44
|
}
|
|
41
|
-
|
|
42
45
|
if (typeof map === "string") {
|
|
43
46
|
return runner(map);
|
|
44
47
|
}
|
|
45
|
-
|
|
46
48
|
var asObject = {};
|
|
47
|
-
|
|
48
49
|
if (Array.isArray(map)) {
|
|
49
50
|
map.forEach(x => {
|
|
50
51
|
asObject[x.toString()] = 1;
|
|
@@ -52,7 +53,6 @@ function ComputeProbabilityMap(map) {
|
|
|
52
53
|
} else {
|
|
53
54
|
asObject = map;
|
|
54
55
|
}
|
|
55
|
-
|
|
56
56
|
var total = Object.values(asObject).reduce((a, b) => a + b);
|
|
57
57
|
var percentages = (0, _object.createObject)(Object.keys(asObject), Object.values(asObject).map(x => x / total));
|
|
58
58
|
var ticket = Math.random();
|
|
@@ -60,55 +60,44 @@ function ComputeProbabilityMap(map) {
|
|
|
60
60
|
var winner = null;
|
|
61
61
|
Object.keys(percentages).forEach(key => {
|
|
62
62
|
var x = parseFloat(percentages[key]);
|
|
63
|
-
|
|
64
63
|
if (ticket >= count && ticket < count + x) {
|
|
65
64
|
winner = key;
|
|
66
65
|
}
|
|
67
|
-
|
|
68
66
|
count += x;
|
|
69
67
|
});
|
|
70
68
|
return runner(winner);
|
|
71
69
|
}
|
|
70
|
+
|
|
72
71
|
/**
|
|
73
72
|
* Determines if a probability map can return a positive result (true, or some string mode).
|
|
74
73
|
* - Negative probability maps are used to remove transformations from running entirely.
|
|
75
74
|
* @param map
|
|
76
75
|
*/
|
|
77
|
-
|
|
78
|
-
|
|
79
76
|
function isProbabilityMapProbable(map) {
|
|
80
77
|
(0, _assert.ok)(!Number.isNaN(map), "Numbers cannot be NaN");
|
|
81
|
-
|
|
82
78
|
if (!map || typeof map === "undefined") {
|
|
83
79
|
return false;
|
|
84
80
|
}
|
|
85
|
-
|
|
86
81
|
if (typeof map === "function") {
|
|
87
82
|
return true;
|
|
88
83
|
}
|
|
89
|
-
|
|
90
84
|
if (typeof map === "number") {
|
|
91
85
|
if (map > 1 || map < 0) {
|
|
92
|
-
throw new Error(
|
|
86
|
+
throw new Error(`Numbers must be between 0 and 1 for 0% - 100%`);
|
|
93
87
|
}
|
|
94
88
|
}
|
|
95
|
-
|
|
96
89
|
if (Array.isArray(map)) {
|
|
97
90
|
(0, _assert.ok)(map.length != 0, "Empty arrays are not allowed for options. Use false instead.");
|
|
98
|
-
|
|
99
91
|
if (map.length == 1) {
|
|
100
92
|
return !!map[0];
|
|
101
93
|
}
|
|
102
94
|
}
|
|
103
|
-
|
|
104
95
|
if (typeof map === "object") {
|
|
105
96
|
var keys = Object.keys(map);
|
|
106
97
|
(0, _assert.ok)(keys.length != 0, "Empty objects are not allowed for options. Use false instead.");
|
|
107
|
-
|
|
108
98
|
if (keys.length == 1) {
|
|
109
99
|
return !!keys[0];
|
|
110
100
|
}
|
|
111
101
|
}
|
|
112
|
-
|
|
113
102
|
return true;
|
|
114
103
|
}
|
|
@@ -3,11 +3,127 @@
|
|
|
3
3
|
Object.defineProperty(exports, "__esModule", {
|
|
4
4
|
value: true
|
|
5
5
|
});
|
|
6
|
-
exports.BufferToStringTemplate = void 0;
|
|
7
|
-
|
|
6
|
+
exports.createGetGlobalTemplate = exports.BufferToStringTemplate = void 0;
|
|
7
|
+
var _constants = require("../constants");
|
|
8
8
|
var _template = _interopRequireDefault(require("./template"));
|
|
9
|
+
function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
|
|
10
|
+
const createGetGlobalTemplate = (transform, object, parents) => {
|
|
11
|
+
var _options$lock;
|
|
12
|
+
var options = transform.options;
|
|
13
|
+
if ((_options$lock = options.lock) !== null && _options$lock !== void 0 && _options$lock.tamperProtection) {
|
|
14
|
+
return new _template.default(`
|
|
15
|
+
function {getGlobalFnName}(){
|
|
16
|
+
var localVar = false;
|
|
17
|
+
eval(${transform.jsConfuserVar("localVar")} + " = true")
|
|
18
|
+
if (!localVar) {
|
|
19
|
+
{countermeasures}
|
|
20
|
+
}
|
|
21
|
+
|
|
22
|
+
const root = eval("this");
|
|
23
|
+
return root;
|
|
24
|
+
}
|
|
25
|
+
`).setDefaultVariables({
|
|
26
|
+
countermeasures: transform.lockTransform.getCounterMeasuresCode(object, parents)
|
|
27
|
+
});
|
|
28
|
+
}
|
|
29
|
+
return GetGlobalTemplate;
|
|
30
|
+
};
|
|
31
|
+
exports.createGetGlobalTemplate = createGetGlobalTemplate;
|
|
32
|
+
const GetGlobalTemplate = new _template.default(`
|
|
33
|
+
function ${_constants.placeholderVariablePrefix}CFG__getGlobalThis${_constants.predictableFunctionTag}(){
|
|
34
|
+
return globalThis
|
|
35
|
+
}
|
|
36
|
+
|
|
37
|
+
function ${_constants.placeholderVariablePrefix}CFG__getGlobal${_constants.predictableFunctionTag}(){
|
|
38
|
+
return global
|
|
39
|
+
}
|
|
40
|
+
|
|
41
|
+
function ${_constants.placeholderVariablePrefix}CFG__getWindow${_constants.predictableFunctionTag}(){
|
|
42
|
+
return window
|
|
43
|
+
}
|
|
44
|
+
|
|
45
|
+
function ${_constants.placeholderVariablePrefix}CFG__getThisFunction${_constants.predictableFunctionTag}(){
|
|
46
|
+
return new Function("return this")()
|
|
47
|
+
}
|
|
48
|
+
|
|
49
|
+
function {getGlobalFnName}(array = [
|
|
50
|
+
${_constants.placeholderVariablePrefix}CFG__getGlobalThis${_constants.predictableFunctionTag},
|
|
51
|
+
${_constants.placeholderVariablePrefix}CFG__getGlobal${_constants.predictableFunctionTag},
|
|
52
|
+
${_constants.placeholderVariablePrefix}CFG__getWindow${_constants.predictableFunctionTag},
|
|
53
|
+
${_constants.placeholderVariablePrefix}CFG__getThisFunction${_constants.predictableFunctionTag}
|
|
54
|
+
]){
|
|
55
|
+
var bestMatch
|
|
56
|
+
var itemsToSearch = []
|
|
57
|
+
try {
|
|
58
|
+
bestMatch = Object
|
|
59
|
+
itemsToSearch["push"](("")["__proto__"]["constructor"]["name"])
|
|
60
|
+
} catch(e) {
|
|
61
|
+
|
|
62
|
+
}
|
|
63
|
+
A: for(var i = 0; i < array["length"]; i++) {
|
|
64
|
+
try {
|
|
65
|
+
bestMatch = array[i]()
|
|
66
|
+
for(var j = 0; j < itemsToSearch["length"]; j++) {
|
|
67
|
+
if(typeof bestMatch[itemsToSearch[j]] === "undefined") continue A;
|
|
68
|
+
}
|
|
69
|
+
return bestMatch
|
|
70
|
+
} catch(e) {}
|
|
71
|
+
}
|
|
72
|
+
|
|
73
|
+
return bestMatch || this;
|
|
74
|
+
}
|
|
75
|
+
`);
|
|
76
|
+
const BufferToStringTemplate = exports.BufferToStringTemplate = new _template.default(`
|
|
77
|
+
{GetGlobalTemplate}
|
|
78
|
+
|
|
79
|
+
var __globalObject = {getGlobalFnName}() || {};
|
|
80
|
+
var __TextDecoder = __globalObject["TextDecoder"];
|
|
81
|
+
var __Uint8Array = __globalObject["Uint8Array"];
|
|
82
|
+
var __Buffer = __globalObject["Buffer"];
|
|
83
|
+
var __String = __globalObject["String"] || String;
|
|
84
|
+
var __Array = __globalObject["Array"] || Array;
|
|
85
|
+
|
|
86
|
+
var utf8ArrayToStr = (function () {
|
|
87
|
+
var charCache = new __Array(128); // Preallocate the cache for the common single byte chars
|
|
88
|
+
var charFromCodePt = __String["fromCodePoint"] || __String["fromCharCode"];
|
|
89
|
+
var result = [];
|
|
90
|
+
|
|
91
|
+
return function (array) {
|
|
92
|
+
var codePt, byte1;
|
|
93
|
+
var buffLen = array["length"];
|
|
94
|
+
|
|
95
|
+
result["length"] = 0;
|
|
96
|
+
|
|
97
|
+
for (var i = 0; i < buffLen;) {
|
|
98
|
+
byte1 = array[i++];
|
|
99
|
+
|
|
100
|
+
if (byte1 <= 0x7F) {
|
|
101
|
+
codePt = byte1;
|
|
102
|
+
} else if (byte1 <= 0xDF) {
|
|
103
|
+
codePt = ((byte1 & 0x1F) << 6) | (array[i++] & 0x3F);
|
|
104
|
+
} else if (byte1 <= 0xEF) {
|
|
105
|
+
codePt = ((byte1 & 0x0F) << 12) | ((array[i++] & 0x3F) << 6) | (array[i++] & 0x3F);
|
|
106
|
+
} else if (__String["fromCodePoint"]) {
|
|
107
|
+
codePt = ((byte1 & 0x07) << 18) | ((array[i++] & 0x3F) << 12) | ((array[i++] & 0x3F) << 6) | (array[i++] & 0x3F);
|
|
108
|
+
} else {
|
|
109
|
+
codePt = 63; // Cannot convert four byte code points, so use "?" instead
|
|
110
|
+
i += 3;
|
|
111
|
+
}
|
|
112
|
+
|
|
113
|
+
result["push"](charCache[codePt] || (charCache[codePt] = charFromCodePt(codePt)));
|
|
114
|
+
}
|
|
9
115
|
|
|
10
|
-
|
|
116
|
+
return result["join"]('');
|
|
117
|
+
};
|
|
118
|
+
})();
|
|
11
119
|
|
|
12
|
-
|
|
13
|
-
|
|
120
|
+
function {name}(buffer){
|
|
121
|
+
if(typeof __TextDecoder !== "undefined" && __TextDecoder) {
|
|
122
|
+
return new __TextDecoder()["decode"](new __Uint8Array(buffer));
|
|
123
|
+
} else if(typeof __Buffer !== "undefined" && __Buffer) {
|
|
124
|
+
return __Buffer["from"](buffer)["toString"]("utf-8");
|
|
125
|
+
} else {
|
|
126
|
+
return utf8ArrayToStr(buffer);
|
|
127
|
+
}
|
|
128
|
+
}
|
|
129
|
+
`);
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
|
|
3
|
+
Object.defineProperty(exports, "__esModule", {
|
|
4
|
+
value: true
|
|
5
|
+
});
|
|
6
|
+
exports.IndexOfTemplate = void 0;
|
|
7
|
+
var _template = _interopRequireDefault(require("./template"));
|
|
8
|
+
function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
|
|
9
|
+
const IndexOfTemplate = exports.IndexOfTemplate = new _template.default(`
|
|
10
|
+
function indexOf(str, substr) {
|
|
11
|
+
const len = str.length;
|
|
12
|
+
const sublen = substr.length;
|
|
13
|
+
let count = 0;
|
|
14
|
+
|
|
15
|
+
if (sublen > len) {
|
|
16
|
+
return -1;
|
|
17
|
+
}
|
|
18
|
+
|
|
19
|
+
for (let i = 0; i <= len - sublen; i++) {
|
|
20
|
+
for (let j = 0; j < sublen; j++) {
|
|
21
|
+
if (str[i + j] === substr[j]) {
|
|
22
|
+
count++;
|
|
23
|
+
if (count === sublen) {
|
|
24
|
+
return i;
|
|
25
|
+
}
|
|
26
|
+
} else {
|
|
27
|
+
count = 0;
|
|
28
|
+
break;
|
|
29
|
+
}
|
|
30
|
+
}
|
|
31
|
+
}
|
|
32
|
+
|
|
33
|
+
return -1;
|
|
34
|
+
}
|
|
35
|
+
`);
|
package/dist/templates/crash.js
CHANGED
|
@@ -3,15 +3,26 @@
|
|
|
3
3
|
Object.defineProperty(exports, "__esModule", {
|
|
4
4
|
value: true
|
|
5
5
|
});
|
|
6
|
-
exports.
|
|
7
|
-
|
|
6
|
+
exports.CrashTemplate2 = exports.CrashTemplate1 = void 0;
|
|
8
7
|
var _template = _interopRequireDefault(require("./template"));
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
exports.
|
|
8
|
+
function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
|
|
9
|
+
const CrashTemplate1 = exports.CrashTemplate1 = new _template.default(`
|
|
10
|
+
var {var} = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789!#$%&()*+,./:;<=>?@[]^_\`{|}~"';
|
|
11
|
+
while(true){
|
|
12
|
+
{var} = {var};
|
|
13
|
+
if(!{var}) break;
|
|
14
|
+
}
|
|
15
|
+
`);
|
|
16
|
+
const CrashTemplate2 = exports.CrashTemplate2 = new _template.default(`
|
|
17
|
+
while(true) {
|
|
18
|
+
var {var} = 99;
|
|
19
|
+
for({var} = 99; {var} == {var}; {var} *= {var}) {
|
|
20
|
+
!{var} && console.log({var});
|
|
21
|
+
if ({var} <= 10){
|
|
22
|
+
break;
|
|
23
|
+
}
|
|
24
|
+
};
|
|
25
|
+
if({var} === 100) {
|
|
26
|
+
{var}--
|
|
27
|
+
}
|
|
28
|
+
};`);
|