js-confuser 1.7.2 → 2.0.0-alpha.0

package/dist/transforms/lock/integrity.js

@@ -1,198 +1,75 @@
 "use strict";
 
+function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.default = void 0;
-var _transform = _interopRequireDefault(require("../transform"));
+exports["default"] = exports.INTEGRITY = void 0;
+var _order = require("../../order");
+var _randomUtils = require("../../utils/random-utils");
+var _integrityTemplate = require("../../templates/integrityTemplate");
+var t = _interopRequireWildcard(require("@babel/types"));
 var _template = _interopRequireDefault(require("../../templates/template"));
-var _gen = require("../../util/gen");
-var _insert = require("../../util/insert");
-var _random = require("../../util/random");
-var _assert = require("assert");
-var _compiler = require("../../compiler");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
-function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == typeof i ? i : i + ""; }
-function _toPrimitive(t, r) { if ("object" != typeof t || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != typeof i) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
+function _getRequireWildcardCache(e) { if ("function" != typeof WeakMap) return null; var r = new WeakMap(), t = new WeakMap(); return (_getRequireWildcardCache = function _getRequireWildcardCache(e) { return e ? t : r; })(e); }
+function _interopRequireWildcard(e, r) { if (!r && e && e.__esModule) return e; if (null === e || "object" != _typeof(e) && "function" != typeof e) return { "default": e }; var t = _getRequireWildcardCache(r); if (t && t.has(e)) return t.get(e); var n = { __proto__: null }, a = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var u in e) if ("default" !== u && {}.hasOwnProperty.call(e, u)) { var i = a ? Object.getOwnPropertyDescriptor(e, u) : null; i && (i.get || i.set) ? Object.defineProperty(n, u, i) : n[u] = e[u]; } return n["default"] = e, t && t.set(e, n), n; }
+var INTEGRITY = exports.INTEGRITY = Symbol("Integrity");
 /**
- * Hashing Algorithm for function integrity
- * @param str
- * @param seed
- */
-function cyrb53(str) {
-  let seed = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : 0;
-  let h1 = 0xdeadbeef ^ seed,
-    h2 = 0x41c6ce57 ^ seed;
-  for (let i = 0, ch; i < str.length; i++) {
-    ch = str.charCodeAt(i);
-    h1 = Math.imul(h1 ^ ch, 2654435761);
-    h2 = Math.imul(h2 ^ ch, 1597334677);
-  }
-  h1 = Math.imul(h1 ^ h1 >>> 16, 2246822507) ^ Math.imul(h2 ^ h2 >>> 13, 3266489909);
-  h2 = Math.imul(h2 ^ h2 >>> 16, 2246822507) ^ Math.imul(h1 ^ h1 >>> 13, 3266489909);
-  return 4294967296 * (2097151 & h2) + (h1 >>> 0);
-}
-
-// In template form to be inserted into code
-const HashTemplate = (0, _template.default)(`
-function {name}(str, seed) {
-  var h1 = 0xdeadbeef ^ seed;
-  var h2 = 0x41c6ce57 ^ seed;
-  for (var i = 0, ch; i < str.length; i++) {
-      ch = str.charCodeAt(i);
-      h1 = {imul}(h1 ^ ch, 2654435761);
-      h2 = {imul}(h2 ^ ch, 1597334677);
-  }
-  h1 = {imul}(h1 ^ (h1>>>16), 2246822507) ^ {imul}(h2 ^ (h2>>>13), 3266489909);
-  h2 = {imul}(h2 ^ (h2>>>16), 2246822507) ^ {imul}(h1 ^ (h1>>>13), 3266489909);
-  return 4294967296 * (2097151 & h2) + (h1>>>0);
-};`);
-
-// Math.imul polyfill for ES5
-const ImulTemplate = (0, _template.default)(`
-var {name} = Math.imul || function(opA, opB){
-  opB |= 0; // ensure that opB is an integer. opA will automatically be coerced.
-  // floating points give us 53 bits of precision to work with plus 1 sign bit
-  // automatically handled for our convienence:
-  // 1. 0x003fffff /*opA & 0x000fffff*/ * 0x7fffffff /*opB*/ = 0x1fffff7fc00001
-  //    0x1fffff7fc00001 < Number.MAX_SAFE_INTEGER /*0x1fffffffffffff*/
-  var result = (opA & 0x003fffff) * opB;
-  // 2. We can remove an integer coersion from the statement above because:
-  //    0x1fffff7fc00001 + 0xffc00000 = 0x1fffffff800001
-  //    0x1fffffff800001 < Number.MAX_SAFE_INTEGER /*0x1fffffffffffff*/
-  if (opA & 0xffc00000 /*!== 0*/) result += (opA & 0xffc00000) * opB |0;
-  return result |0;
-};`);
-
-// Simple function that returns .toString() value with spaces replaced out
-const StringTemplate = (0, _template.default)(`
-  function {name}(x){
-    return x.toString().replace(/ |\\n|;|,|\\{|\\}|\\(|\\)|\\.|\\[|\\]/g, "");
-  }
-`);
-
-/**
- * Integrity protects functions by using checksum techniques to verify their code has not changed.
- *
- * If an attacker modifies a function, the modified function will not execute.
- *
- * How it works:
- *
- * - By using `.toString()` JavaScript will expose a function's source code.
- * - We can hash it and use an if statement in the code to ensure the function's code is unchanged.
+ * Integrity has two passes:
  *
- * This is the most complicated Transformation for JSConfuser so here I'll explain:
- * - The Program is wrapped in an IIFE (Function Expression that is called instantly)
- * - Every function including ^ are generated out and evaluated for their .toString() value
- * - Hashed using cyrb53's hashing algorithm
- * - Check the checksum before running the code.
+ * - First in the 'lock' plugin to select functions and prepare them for Integrity
+ * - Secondly here to apply the integrity check
  *
- * - The hashing function is placed during this transformation,
- * - A hidden identifier is placed to keep track of the name.
+ * This transformation must run last as any changes to the code will break the hash
  */
-class Integrity extends _transform.default {
-  constructor(o, lock) {
-    super(o);
-    _defineProperty(this, "hashFn", void 0);
-    _defineProperty(this, "imulFn", void 0);
-    _defineProperty(this, "stringFn", void 0);
-    _defineProperty(this, "seed", void 0);
-    _defineProperty(this, "lock", void 0);
-    this.lock = lock;
-    this.seed = (0, _random.getRandomInteger)(0, 1000);
-  }
-  match(object, parents) {
-    // ArrowFunctions are excluded!
-    return object.type == "Program" || (0, _insert.isFunction)(object) && object.type !== "ArrowFunctionExpression";
-  }
-  transform(object, parents) {
-    if (object.type == "Program") {
-      return () => {
-        var hashingUtils = [];
-        var imulName = this.getPlaceholder();
-        var imulVariableDeclaration = ImulTemplate.single({
-          name: imulName
-        });
-        imulVariableDeclaration.$dispatcherSkip = true;
-        this.imulFn = imulVariableDeclaration._hiddenId = (0, _gen.Identifier)(imulName);
-        hashingUtils.push(imulVariableDeclaration);
-        var hashName = this.getPlaceholder();
-        var hashFunctionDeclaration = HashTemplate.single({
-          name: hashName,
-          imul: imulName
-        });
-        this.hashFn = hashFunctionDeclaration._hiddenId = (0, _gen.Identifier)(hashName);
-        hashingUtils.push(hashFunctionDeclaration);
-        hashFunctionDeclaration.$dispatcherSkip = true;
-        var stringName = this.getPlaceholder();
-        var stringFunctionDeclaration = StringTemplate.single({
-          name: stringName
-        });
-        this.stringFn = stringFunctionDeclaration._hiddenId = (0, _gen.Identifier)(stringName);
-        hashingUtils.push(stringFunctionDeclaration);
-        stringFunctionDeclaration.$dispatcherSkip = true;
-        var functionExpression = (0, _gen.FunctionExpression)([], (0, _insert.clone)(object.body));
-        object.body = [(0, _gen.ExpressionStatement)((0, _gen.CallExpression)(functionExpression, []))];
-        object.$dispatcherSkip = true;
-        object._hiddenHashingUtils = hashingUtils;
-        var ok = this.transform(functionExpression, [object.body[0], object.body, object]);
-        if (ok) {
-          ok();
-        }
-        object.$eval = () => {
-          if ((0, _insert.isFunction)(functionExpression) && functionExpression.body.type == "BlockStatement") {
-            if (this.lock.counterMeasuresNode) {
-              functionExpression.body.body.unshift((0, _insert.clone)(this.lock.counterMeasuresNode[0]));
-            }
-            functionExpression.body.body.unshift(...hashingUtils);
-          }
-        };
-      };
+var _default = exports["default"] = function _default(_ref) {
+  var Plugin = _ref.Plugin;
+  var me = Plugin(_order.Order.Integrity, {
+    changeData: {
+      functions: 0
     }
-    (0, _assert.ok)((0, _insert.isFunction)(object));
-    if (object.generator || object.async) {
-      return;
-    }
-    return () => {
-      object.__hiddenCountermeasures = this.lock.getCounterMeasuresCode(object, parents);
-      object.$eval = () => {
-        var functionName = this.generateIdentifier();
-        var hashName = this.generateIdentifier();
-        var functionDeclaration = {
-          ...(0, _insert.clone)(object),
-          type: "FunctionDeclaration",
-          id: (0, _gen.Identifier)(functionName),
-          params: object.params || [],
-          body: object.body || (0, _gen.BlockStatement)([]),
-          expression: false,
-          $dispatcherSkip: true
-        };
-        var toString = (0, _compiler.compileJsSync)(functionDeclaration, this.options);
-        if (!toString) {
-          return;
-        }
-        var minified = toString.replace(/ |\n|;|,|\{|\}|\(|\)|\.|\[|\]/g, "");
-        var hash = cyrb53(minified, this.seed);
-        this.log((object.id ? object.id.name : "function") + " -> " + hash, minified);
-        var ifStatement = (0, _gen.IfStatement)((0, _gen.BinaryExpression)("==", (0, _gen.Identifier)(hashName), (0, _gen.Literal)(hash)), [(0, _template.default)(`return {functionName}.apply(this, arguments)`).single({
-          functionName: functionName
-        })]);
-        if (object.__hiddenCountermeasures && object.__hiddenCountermeasures.length) {
-          ifStatement.alternate = (0, _gen.BlockStatement)(object.__hiddenCountermeasures);
+  });
+  return {
+    visitor: {
+      Program: {
+        enter: function enter(path) {
+          path.scope.crawl();
         }
-        object.body = (0, _gen.BlockStatement)([functionDeclaration, (0, _gen.VariableDeclaration)((0, _gen.VariableDeclarator)(hashName, (0, _gen.CallExpression)((0, _insert.clone)(this.hashFn), [(0, _gen.CallExpression)((0, _insert.clone)(this.stringFn), [(0, _gen.Identifier)(functionName)]), (0, _gen.Literal)(this.seed)]))), ifStatement]);
+      },
+      FunctionDeclaration: {
+        exit: function exit(funcDecPath) {
+          var integrityInterface = funcDecPath.node[INTEGRITY];
+          if (!integrityInterface) return;
+          var newFnPath = integrityInterface.fnPath;
+          if (newFnPath.removed) return;
+          var newFunctionDeclaration = newFnPath.node;
+          if (!newFunctionDeclaration || !t.isFunctionDeclaration(newFunctionDeclaration)) return;
+          var hashFnName = me.globalState.internals.integrityHashName;
+          var obfuscatedHashFnName = me.obfuscator.getObfuscatedVariableName(hashFnName, funcDecPath.find(function (p) {
+            return p.isProgram();
+          }).node);
+          var newFnName = newFunctionDeclaration.id.name;
+          var binding = newFnPath.scope.getBinding(newFnName);
 
-        // Make sure the countermeasures activation variable is present
-        if (this.lock.counterMeasuresActivated) {
-          object.body.body.unshift((0, _gen.VariableDeclaration)((0, _gen.VariableDeclarator)(this.lock.counterMeasuresActivated)));
-        }
-        if (object.type == "ArrowFunctionExpression") {
-          object.type = "FunctionExpression";
-          object.expression = false;
+          // Function is redefined, do not apply integrity
+          if (!binding || binding.constantViolations.length > 0) return;
+          var code = me.obfuscator.generateCode(newFunctionDeclaration);
+          var codeTrimmed = code.replace(me.globalState.lock.integrity.sensitivityRegex, "");
+          var seed = (0, _randomUtils.getRandomInteger)(0, 10000000);
+          var hashCode = (0, _integrityTemplate.HashFunction)(codeTrimmed, seed);
+
+          // me.log(codeTrimmed, hashCode);
+          me.changeData.functions++;
+          funcDecPath.node.body = t.blockStatement(new _template["default"]("\n              var hash = ".concat(obfuscatedHashFnName, "(").concat(newFunctionDeclaration.id.name, ", ").concat(seed, ");\n          if(hash === ").concat(hashCode, ") {\n            {originalBody}\n          } else {\n            {countermeasures}  \n          }\n          ")).compile({
+            originalBody: funcDecPath.node.body.body,
+            countermeasures: function countermeasures() {
+              return me.globalState.lock.createCountermeasuresCode();
+            }
+          }),
+          // Preserve directives
+          funcDecPath.node.body.directives);
         }
-      };
-    };
-  }
-}
-exports.default = Integrity;
+      }
+    }
+  };
+};