js-confuser 1.7.2 → 2.0.0-alpha.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.github/ISSUE_TEMPLATE/bug_report.md +6 -4
- package/.github/workflows/node.js.yml +1 -1
- package/CHANGELOG.md +105 -0
- package/Migration.md +57 -0
- package/README.md +23 -913
- package/dist/constants.js +69 -13
- package/dist/index.js +108 -152
- package/dist/obfuscator.js +316 -118
- package/dist/options.js +1 -109
- package/dist/order.js +30 -30
- package/dist/presets.js +47 -45
- package/dist/probability.js +25 -32
- package/dist/templates/bufferToStringTemplate.js +9 -0
- package/dist/templates/deadCodeTemplates.js +9 -0
- package/dist/templates/getGlobalTemplate.js +19 -0
- package/dist/templates/integrityTemplate.js +30 -0
- package/dist/templates/setFunctionLengthTemplate.js +9 -0
- package/dist/templates/stringCompressionTemplate.js +10 -0
- package/dist/templates/tamperProtectionTemplates.js +21 -0
- package/dist/templates/template.js +213 -93
- package/dist/transforms/astScrambler.js +100 -0
- package/dist/transforms/calculator.js +70 -127
- package/dist/transforms/controlFlowFlattening.js +1182 -0
- package/dist/transforms/deadCode.js +62 -577
- package/dist/transforms/dispatcher.js +300 -309
- package/dist/transforms/extraction/duplicateLiteralsRemoval.js +88 -189
- package/dist/transforms/extraction/objectExtraction.js +131 -215
- package/dist/transforms/finalizer.js +56 -59
- package/dist/transforms/flatten.js +275 -276
- package/dist/transforms/functionOutlining.js +230 -0
- package/dist/transforms/identifier/globalConcealing.js +217 -103
- package/dist/transforms/identifier/movedDeclarations.js +167 -91
- package/dist/transforms/identifier/renameVariables.js +240 -187
- package/dist/transforms/lock/integrity.js +61 -184
- package/dist/transforms/lock/lock.js +263 -303
- package/dist/transforms/minify.js +431 -436
- package/dist/transforms/opaquePredicates.js +65 -118
- package/dist/transforms/pack.js +160 -0
- package/dist/transforms/plugin.js +179 -0
- package/dist/transforms/preparation.js +263 -163
- package/dist/transforms/renameLabels.js +132 -56
- package/dist/transforms/rgf.js +142 -240
- package/dist/transforms/shuffle.js +52 -145
- package/dist/transforms/string/encoding.js +45 -173
- package/dist/transforms/string/stringCompression.js +81 -126
- package/dist/transforms/string/stringConcealing.js +189 -224
- package/dist/transforms/string/stringEncoding.js +32 -40
- package/dist/transforms/string/stringSplitting.js +54 -55
- package/dist/transforms/variableMasking.js +232 -0
- package/dist/utils/ControlObject.js +125 -0
- package/dist/utils/IntGen.js +46 -0
- package/dist/utils/NameGen.js +106 -0
- package/dist/utils/ast-utils.js +560 -0
- package/dist/utils/function-utils.js +56 -0
- package/dist/utils/gen-utils.js +48 -0
- package/dist/utils/node.js +77 -0
- package/dist/utils/object-utils.js +21 -0
- package/dist/utils/random-utils.js +91 -0
- package/dist/utils/static-utils.js +64 -0
- package/dist/validateOptions.js +122 -0
- package/index.d.ts +1 -17
- package/package.json +27 -22
- package/src/constants.ts +139 -77
- package/src/index.ts +70 -163
- package/src/obfuscationResult.ts +43 -0
- package/src/obfuscator.ts +328 -135
- package/src/options.ts +154 -623
- package/src/order.ts +14 -14
- package/src/presets.ts +39 -34
- package/src/probability.ts +21 -36
- package/src/templates/{bufferToString.ts → bufferToStringTemplate.ts} +5 -54
- package/src/templates/deadCodeTemplates.ts +1185 -0
- package/src/templates/getGlobalTemplate.ts +72 -0
- package/src/templates/integrityTemplate.ts +69 -0
- package/src/templates/setFunctionLengthTemplate.ts +11 -0
- package/src/templates/stringCompressionTemplate.ts +42 -0
- package/src/templates/tamperProtectionTemplates.ts +116 -0
- package/src/templates/template.ts +183 -92
- package/src/transforms/astScrambler.ts +99 -0
- package/src/transforms/calculator.ts +96 -224
- package/src/transforms/controlFlowFlattening.ts +1594 -0
- package/src/transforms/deadCode.ts +85 -628
- package/src/transforms/dispatcher.ts +431 -636
- package/src/transforms/extraction/duplicateLiteralsRemoval.ts +147 -299
- package/src/transforms/extraction/objectExtraction.ts +160 -333
- package/src/transforms/finalizer.ts +63 -64
- package/src/transforms/flatten.ts +439 -557
- package/src/transforms/functionOutlining.ts +225 -0
- package/src/transforms/identifier/globalConcealing.ts +261 -189
- package/src/transforms/identifier/movedDeclarations.ts +228 -142
- package/src/transforms/identifier/renameVariables.ts +252 -258
- package/src/transforms/lock/integrity.ts +84 -260
- package/src/transforms/lock/lock.ts +342 -491
- package/src/transforms/minify.ts +523 -663
- package/src/transforms/opaquePredicates.ts +90 -229
- package/src/transforms/pack.ts +195 -0
- package/src/transforms/plugin.ts +185 -0
- package/src/transforms/preparation.ts +337 -215
- package/src/transforms/renameLabels.ts +176 -77
- package/src/transforms/rgf.ts +293 -386
- package/src/transforms/shuffle.ts +80 -254
- package/src/transforms/string/encoding.ts +26 -129
- package/src/transforms/string/stringCompression.ts +118 -236
- package/src/transforms/string/stringConcealing.ts +255 -339
- package/src/transforms/string/stringEncoding.ts +28 -47
- package/src/transforms/string/stringSplitting.ts +61 -75
- package/src/transforms/variableMasking.ts +257 -0
- package/src/utils/ControlObject.ts +141 -0
- package/src/utils/IntGen.ts +33 -0
- package/src/utils/NameGen.ts +106 -0
- package/src/utils/ast-utils.ts +667 -0
- package/src/utils/function-utils.ts +50 -0
- package/src/utils/gen-utils.ts +48 -0
- package/src/utils/node.ts +78 -0
- package/src/utils/object-utils.ts +21 -0
- package/src/utils/random-utils.ts +79 -0
- package/src/utils/static-utils.ts +66 -0
- package/src/validateOptions.ts +256 -0
- package/tsconfig.json +13 -8
- package/babel.config.js +0 -12
- package/dev.js +0 -8
- package/dist/compiler.js +0 -34
- package/dist/parser.js +0 -59
- package/dist/precedence.js +0 -66
- package/dist/templates/bufferToString.js +0 -108
- package/dist/templates/crash.js +0 -59
- package/dist/templates/es5.js +0 -137
- package/dist/templates/functionLength.js +0 -34
- package/dist/templates/globals.js +0 -9
- package/dist/transforms/antiTooling.js +0 -88
- package/dist/transforms/controlFlowFlattening/controlFlowFlattening.js +0 -1281
- package/dist/transforms/controlFlowFlattening/expressionObfuscation.js +0 -131
- package/dist/transforms/es5/antiClass.js +0 -164
- package/dist/transforms/es5/antiDestructuring.js +0 -193
- package/dist/transforms/es5/antiES6Object.js +0 -185
- package/dist/transforms/es5/antiSpreadOperator.js +0 -35
- package/dist/transforms/es5/antiTemplate.js +0 -66
- package/dist/transforms/es5/es5.js +0 -123
- package/dist/transforms/extraction/classExtraction.js +0 -83
- package/dist/transforms/identifier/globalAnalysis.js +0 -70
- package/dist/transforms/identifier/variableAnalysis.js +0 -104
- package/dist/transforms/lock/antiDebug.js +0 -76
- package/dist/transforms/stack.js +0 -343
- package/dist/transforms/transform.js +0 -350
- package/dist/traverse.js +0 -110
- package/dist/util/compare.js +0 -145
- package/dist/util/gen.js +0 -564
- package/dist/util/guard.js +0 -9
- package/dist/util/identifiers.js +0 -355
- package/dist/util/insert.js +0 -362
- package/dist/util/math.js +0 -19
- package/dist/util/object.js +0 -40
- package/dist/util/random.js +0 -130
- package/dist/util/scope.js +0 -20
- package/docs/ControlFlowFlattening.md +0 -595
- package/docs/Countermeasures.md +0 -63
- package/docs/ES5.md +0 -197
- package/docs/Integrity.md +0 -75
- package/docs/RGF.md +0 -419
- package/samples/example.js +0 -15
- package/samples/high.js +0 -1
- package/samples/input.js +0 -3
- package/samples/javascriptobfuscator.com.js +0 -8
- package/samples/jscrambler_advanced.js +0 -1894
- package/samples/jscrambler_light.js +0 -1134
- package/samples/low.js +0 -1
- package/samples/medium.js +0 -1
- package/samples/obfuscator.io.js +0 -1686
- package/samples/preemptive.com.js +0 -16
- package/src/compiler.ts +0 -35
- package/src/parser.ts +0 -49
- package/src/precedence.ts +0 -61
- package/src/templates/crash.ts +0 -55
- package/src/templates/es5.ts +0 -131
- package/src/templates/functionLength.ts +0 -32
- package/src/templates/globals.ts +0 -3
- package/src/transforms/antiTooling.ts +0 -102
- package/src/transforms/controlFlowFlattening/controlFlowFlattening.ts +0 -2146
- package/src/transforms/controlFlowFlattening/expressionObfuscation.ts +0 -179
- package/src/transforms/es5/antiClass.ts +0 -272
- package/src/transforms/es5/antiDestructuring.ts +0 -294
- package/src/transforms/es5/antiES6Object.ts +0 -267
- package/src/transforms/es5/antiSpreadOperator.ts +0 -56
- package/src/transforms/es5/antiTemplate.ts +0 -98
- package/src/transforms/es5/es5.ts +0 -149
- package/src/transforms/extraction/classExtraction.ts +0 -168
- package/src/transforms/identifier/globalAnalysis.ts +0 -85
- package/src/transforms/identifier/variableAnalysis.ts +0 -118
- package/src/transforms/lock/antiDebug.ts +0 -112
- package/src/transforms/stack.ts +0 -551
- package/src/transforms/transform.ts +0 -453
- package/src/traverse.ts +0 -120
- package/src/types.ts +0 -131
- package/src/util/compare.ts +0 -181
- package/src/util/gen.ts +0 -651
- package/src/util/guard.ts +0 -7
- package/src/util/identifiers.ts +0 -494
- package/src/util/insert.ts +0 -419
- package/src/util/math.ts +0 -15
- package/src/util/object.ts +0 -39
- package/src/util/random.ts +0 -141
- package/src/util/scope.ts +0 -21
- package/test/code/Cash.src.js +0 -1011
- package/test/code/Cash.test.ts +0 -49
- package/test/code/Dynamic.src.js +0 -118
- package/test/code/Dynamic.test.ts +0 -49
- package/test/code/ES6.src.js +0 -235
- package/test/code/ES6.test.ts +0 -42
- package/test/code/NewFeatures.test.ts +0 -19
- package/test/code/StrictMode.src.js +0 -65
- package/test/code/StrictMode.test.js +0 -37
- package/test/compare.test.ts +0 -104
- package/test/index.test.ts +0 -249
- package/test/options.test.ts +0 -132
- package/test/presets.test.ts +0 -22
- package/test/probability.test.ts +0 -44
- package/test/templates/template.test.ts +0 -14
- package/test/transforms/antiTooling.test.ts +0 -52
- package/test/transforms/calculator.test.ts +0 -78
- package/test/transforms/controlFlowFlattening/controlFlowFlattening.test.ts +0 -1274
- package/test/transforms/controlFlowFlattening/expressionObfuscation.test.ts +0 -192
- package/test/transforms/deadCode.test.ts +0 -85
- package/test/transforms/dispatcher.test.ts +0 -457
- package/test/transforms/es5/antiClass.test.ts +0 -427
- package/test/transforms/es5/antiDestructuring.test.ts +0 -157
- package/test/transforms/es5/antiES6Object.test.ts +0 -245
- package/test/transforms/es5/antiTemplate.test.ts +0 -116
- package/test/transforms/es5/es5.test.ts +0 -110
- package/test/transforms/extraction/classExtraction.test.ts +0 -86
- package/test/transforms/extraction/duplicateLiteralsRemoval.test.ts +0 -200
- package/test/transforms/extraction/objectExtraction.test.ts +0 -491
- package/test/transforms/flatten.test.ts +0 -721
- package/test/transforms/hexadecimalNumbers.test.ts +0 -62
- package/test/transforms/identifier/globalConcealing.test.ts +0 -72
- package/test/transforms/identifier/movedDeclarations.test.ts +0 -275
- package/test/transforms/identifier/renameVariables.test.ts +0 -621
- package/test/transforms/lock/antiDebug.test.ts +0 -66
- package/test/transforms/lock/browserLock.test.ts +0 -129
- package/test/transforms/lock/countermeasures.test.ts +0 -100
- package/test/transforms/lock/integrity.test.ts +0 -161
- package/test/transforms/lock/lock.test.ts +0 -204
- package/test/transforms/lock/osLock.test.ts +0 -312
- package/test/transforms/lock/selfDefending.test.ts +0 -68
- package/test/transforms/minify.test.ts +0 -575
- package/test/transforms/opaquePredicates.test.ts +0 -43
- package/test/transforms/preparation.test.ts +0 -157
- package/test/transforms/renameLabels.test.ts +0 -95
- package/test/transforms/rgf.test.ts +0 -378
- package/test/transforms/shuffle.test.ts +0 -135
- package/test/transforms/stack.test.ts +0 -573
- package/test/transforms/string/stringCompression.test.ts +0 -120
- package/test/transforms/string/stringConcealing.test.ts +0 -299
- package/test/transforms/string/stringEncoding.test.ts +0 -95
- package/test/transforms/string/stringSplitting.test.ts +0 -135
- package/test/transforms/transform.test.ts +0 -66
- package/test/traverse.test.ts +0 -139
- package/test/util/compare.test.ts +0 -34
- package/test/util/gen.test.ts +0 -121
- package/test/util/identifiers.test.ts +0 -253
- package/test/util/insert.test.ts +0 -142
- package/test/util/math.test.ts +0 -5
- package/test/util/random.test.ts +0 -71
- /package/dist/{types.js → obfuscationResult.js} +0 -0
|
@@ -1,62 +0,0 @@
|
|
|
1
|
-
import JsConfuser from "../../src/index";
|
|
2
|
-
|
|
3
|
-
test("Variant #1: Positive integer to hexadecimal", async () => {
|
|
4
|
-
var output = await JsConfuser.obfuscate(`TEST_VAR = 10;`, {
|
|
5
|
-
target: "node",
|
|
6
|
-
hexadecimalNumbers: true,
|
|
7
|
-
});
|
|
8
|
-
|
|
9
|
-
expect(output).toContain("0xa");
|
|
10
|
-
expect(output).not.toContain("10");
|
|
11
|
-
|
|
12
|
-
var TEST_VAR;
|
|
13
|
-
|
|
14
|
-
eval(output);
|
|
15
|
-
|
|
16
|
-
expect(TEST_VAR).toStrictEqual(10);
|
|
17
|
-
});
|
|
18
|
-
|
|
19
|
-
test("Variant #2: Negative integer to hexadecimal", async () => {
|
|
20
|
-
var output = await JsConfuser.obfuscate(`TEST_VAR = -10;`, {
|
|
21
|
-
target: "node",
|
|
22
|
-
hexadecimalNumbers: true,
|
|
23
|
-
});
|
|
24
|
-
|
|
25
|
-
expect(output).toContain("-0xa");
|
|
26
|
-
expect(output).not.toContain("-10");
|
|
27
|
-
|
|
28
|
-
var TEST_VAR;
|
|
29
|
-
|
|
30
|
-
eval(output);
|
|
31
|
-
|
|
32
|
-
expect(TEST_VAR).toStrictEqual(-10);
|
|
33
|
-
});
|
|
34
|
-
|
|
35
|
-
test("Variant #3: Don't change floats", async () => {
|
|
36
|
-
var output = await JsConfuser.obfuscate(`var TEST_VAR = [15.5, -75.9];`, {
|
|
37
|
-
target: "node",
|
|
38
|
-
hexadecimalNumbers: true,
|
|
39
|
-
});
|
|
40
|
-
|
|
41
|
-
expect(output).toContain("15.5");
|
|
42
|
-
expect(output).toContain("-75.9");
|
|
43
|
-
expect(output).not.toContain("0x");
|
|
44
|
-
});
|
|
45
|
-
|
|
46
|
-
test("Variant #4: Work even on large numbers", async () => {
|
|
47
|
-
var output = await JsConfuser.obfuscate(
|
|
48
|
-
`TEST_VAR = 10000000000000000000000000000;`,
|
|
49
|
-
{
|
|
50
|
-
target: "node",
|
|
51
|
-
hexadecimalNumbers: true,
|
|
52
|
-
}
|
|
53
|
-
);
|
|
54
|
-
|
|
55
|
-
expect(output).toContain("0x204fce5e3e25020000000000");
|
|
56
|
-
|
|
57
|
-
var TEST_VAR;
|
|
58
|
-
|
|
59
|
-
eval(output);
|
|
60
|
-
|
|
61
|
-
expect(TEST_VAR).toStrictEqual(10000000000000000000000000000);
|
|
62
|
-
});
|
|
@@ -1,72 +0,0 @@
|
|
|
1
|
-
import JsConfuser from "../../../src/index";
|
|
2
|
-
|
|
3
|
-
test("Variant #1: Hide global names (such as Math)", async () => {
|
|
4
|
-
var code = `
|
|
5
|
-
var TEST_RESULT = Math.floor(10.1);
|
|
6
|
-
`;
|
|
7
|
-
|
|
8
|
-
var output = await JsConfuser(code, {
|
|
9
|
-
target: "browser",
|
|
10
|
-
globalConcealing: true,
|
|
11
|
-
});
|
|
12
|
-
|
|
13
|
-
expect(output).not.toContain("Math.floor");
|
|
14
|
-
expect(output).not.toContain("=Math");
|
|
15
|
-
expect(output).toContain("['Math']");
|
|
16
|
-
expect(output).toContain("window");
|
|
17
|
-
});
|
|
18
|
-
|
|
19
|
-
test("Variant #2: Do not hide modified identifiers", async () => {
|
|
20
|
-
var code = `
|
|
21
|
-
var Math = 50;
|
|
22
|
-
|
|
23
|
-
console.log(Math);
|
|
24
|
-
`;
|
|
25
|
-
|
|
26
|
-
var output = await JsConfuser(code, {
|
|
27
|
-
target: "browser",
|
|
28
|
-
globalConcealing: true,
|
|
29
|
-
});
|
|
30
|
-
|
|
31
|
-
expect(output).toContain("log'](Math)");
|
|
32
|
-
});
|
|
33
|
-
|
|
34
|
-
test("Variant #3: Properly hide in default parameter, function expression", async () => {
|
|
35
|
-
var output = await JsConfuser(
|
|
36
|
-
`
|
|
37
|
-
function myFunction( myParameter = function(){
|
|
38
|
-
var myVariable = true;
|
|
39
|
-
return myVariable;
|
|
40
|
-
} ) {
|
|
41
|
-
return myParameter();
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
TEST_OUTPUT = myFunction(); // true
|
|
45
|
-
`,
|
|
46
|
-
{ target: "node", globalConcealing: true }
|
|
47
|
-
);
|
|
48
|
-
|
|
49
|
-
var TEST_OUTPUT;
|
|
50
|
-
eval(output);
|
|
51
|
-
|
|
52
|
-
expect(TEST_OUTPUT).toStrictEqual(true);
|
|
53
|
-
});
|
|
54
|
-
|
|
55
|
-
// https://github.com/MichaelXF/js-confuser/issues/131
|
|
56
|
-
test("Variant #4: Don't change __dirname", async function () {
|
|
57
|
-
var code = `
|
|
58
|
-
TEST_OUTPUT = __dirname;
|
|
59
|
-
`;
|
|
60
|
-
|
|
61
|
-
var output = await JsConfuser(code, {
|
|
62
|
-
target: "node",
|
|
63
|
-
globalConcealing: true,
|
|
64
|
-
});
|
|
65
|
-
|
|
66
|
-
expect(output).toContain("__dirname");
|
|
67
|
-
|
|
68
|
-
var TEST_OUTPUT;
|
|
69
|
-
eval(output);
|
|
70
|
-
|
|
71
|
-
expect(typeof TEST_OUTPUT).toStrictEqual("string");
|
|
72
|
-
});
|
|
@@ -1,275 +0,0 @@
|
|
|
1
|
-
import { predictableFunctionTag } from "../../../src/constants";
|
|
2
|
-
import JsConfuser from "../../../src/index";
|
|
3
|
-
|
|
4
|
-
test("Variant #1: Move variable 'y' to top", async () => {
|
|
5
|
-
var code = `
|
|
6
|
-
var x = 10;
|
|
7
|
-
var y = 15;
|
|
8
|
-
TEST_VARIABLE = x + y;
|
|
9
|
-
`;
|
|
10
|
-
|
|
11
|
-
var output = await JsConfuser.obfuscate(code, {
|
|
12
|
-
target: "node",
|
|
13
|
-
movedDeclarations: true,
|
|
14
|
-
});
|
|
15
|
-
|
|
16
|
-
expect(output).toContain("var x=10,y;");
|
|
17
|
-
expect(output).toContain("y=15");
|
|
18
|
-
|
|
19
|
-
var TEST_VARIABLE;
|
|
20
|
-
eval(output);
|
|
21
|
-
|
|
22
|
-
expect(TEST_VARIABLE).toStrictEqual(25);
|
|
23
|
-
});
|
|
24
|
-
|
|
25
|
-
test("Variant #2: Move variable 'y' and 'z' to top", async () => {
|
|
26
|
-
var code = `
|
|
27
|
-
var x = 10;
|
|
28
|
-
var y = 15;
|
|
29
|
-
var z = 5;
|
|
30
|
-
TEST_VARIABLE = x + y + z;
|
|
31
|
-
`;
|
|
32
|
-
|
|
33
|
-
var output = await JsConfuser.obfuscate(code, {
|
|
34
|
-
target: "node",
|
|
35
|
-
movedDeclarations: true,
|
|
36
|
-
});
|
|
37
|
-
|
|
38
|
-
expect(output).toContain("var x=10,y,z;");
|
|
39
|
-
expect(output).toContain("y=15");
|
|
40
|
-
expect(output).toContain("z=5");
|
|
41
|
-
|
|
42
|
-
var TEST_VARIABLE;
|
|
43
|
-
eval(output);
|
|
44
|
-
|
|
45
|
-
expect(TEST_VARIABLE).toStrictEqual(30);
|
|
46
|
-
});
|
|
47
|
-
|
|
48
|
-
test("Variant #3: Don't move 'y' (destructuring)", async () => {
|
|
49
|
-
var code = `
|
|
50
|
-
var x = 10;
|
|
51
|
-
var [y] = [15];
|
|
52
|
-
TEST_VARIABLE = x + y;
|
|
53
|
-
`;
|
|
54
|
-
|
|
55
|
-
var output = await JsConfuser.obfuscate(code, {
|
|
56
|
-
target: "node",
|
|
57
|
-
movedDeclarations: true,
|
|
58
|
-
});
|
|
59
|
-
|
|
60
|
-
expect(output).toContain("var [y]=[15];");
|
|
61
|
-
|
|
62
|
-
var TEST_VARIABLE;
|
|
63
|
-
eval(output);
|
|
64
|
-
|
|
65
|
-
expect(TEST_VARIABLE).toStrictEqual(25);
|
|
66
|
-
});
|
|
67
|
-
|
|
68
|
-
test("Variant #4: Move 'y' (nested lexical scope)", async () => {
|
|
69
|
-
var code = `
|
|
70
|
-
var x = 10;
|
|
71
|
-
var y = 15;
|
|
72
|
-
|
|
73
|
-
(function(){
|
|
74
|
-
y = 10;
|
|
75
|
-
})();
|
|
76
|
-
|
|
77
|
-
TEST_VARIABLE = x + y;
|
|
78
|
-
`;
|
|
79
|
-
|
|
80
|
-
var output = await JsConfuser.obfuscate(code, {
|
|
81
|
-
target: "node",
|
|
82
|
-
movedDeclarations: true,
|
|
83
|
-
});
|
|
84
|
-
|
|
85
|
-
expect(output).toContain("var x=10,y;");
|
|
86
|
-
|
|
87
|
-
var TEST_VARIABLE;
|
|
88
|
-
eval(output);
|
|
89
|
-
|
|
90
|
-
expect(TEST_VARIABLE).toStrictEqual(20);
|
|
91
|
-
});
|
|
92
|
-
|
|
93
|
-
test("Variant #5: Move 'y' (for statement initializer)", async () => {
|
|
94
|
-
var code = `
|
|
95
|
-
var x = 10;
|
|
96
|
-
for ( var y = 0; y < 15; y++ ) {
|
|
97
|
-
|
|
98
|
-
} // y ends as 15
|
|
99
|
-
TEST_VARIABLE = x + y;
|
|
100
|
-
`;
|
|
101
|
-
|
|
102
|
-
var output = await JsConfuser.obfuscate(code, {
|
|
103
|
-
target: "node",
|
|
104
|
-
movedDeclarations: true,
|
|
105
|
-
});
|
|
106
|
-
|
|
107
|
-
expect(output).not.toContain("var y=0;");
|
|
108
|
-
|
|
109
|
-
var TEST_VARIABLE;
|
|
110
|
-
eval(output);
|
|
111
|
-
|
|
112
|
-
expect(TEST_VARIABLE).toStrictEqual(25);
|
|
113
|
-
});
|
|
114
|
-
|
|
115
|
-
test("Variant #6: Move 'y' (for-in left-hand initializer)", async () => {
|
|
116
|
-
var code = `
|
|
117
|
-
var x = 10;
|
|
118
|
-
for ( var y in [0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15] ) {
|
|
119
|
-
|
|
120
|
-
} // y ends as "15"
|
|
121
|
-
TEST_VARIABLE = x + parseInt(y);
|
|
122
|
-
`;
|
|
123
|
-
|
|
124
|
-
var output = await JsConfuser.obfuscate(code, {
|
|
125
|
-
target: "node",
|
|
126
|
-
movedDeclarations: true,
|
|
127
|
-
});
|
|
128
|
-
|
|
129
|
-
expect(output).not.toContain("var y in");
|
|
130
|
-
expect(output).toContain("y in");
|
|
131
|
-
|
|
132
|
-
var TEST_VARIABLE;
|
|
133
|
-
eval(output);
|
|
134
|
-
|
|
135
|
-
expect(TEST_VARIABLE).toStrictEqual(25);
|
|
136
|
-
});
|
|
137
|
-
|
|
138
|
-
test("Variant #7: Don't move const or let variables", async () => {
|
|
139
|
-
var code = `
|
|
140
|
-
var fillerExpr;
|
|
141
|
-
|
|
142
|
-
let x = 10;
|
|
143
|
-
const y = 15;
|
|
144
|
-
|
|
145
|
-
TEST_VARIABLE = x + y;
|
|
146
|
-
`;
|
|
147
|
-
|
|
148
|
-
var output = await JsConfuser.obfuscate(code, {
|
|
149
|
-
target: "node",
|
|
150
|
-
movedDeclarations: true,
|
|
151
|
-
});
|
|
152
|
-
|
|
153
|
-
expect(output).toContain("let x=10");
|
|
154
|
-
expect(output).toContain("const y=15");
|
|
155
|
-
|
|
156
|
-
var TEST_VARIABLE;
|
|
157
|
-
eval(output);
|
|
158
|
-
|
|
159
|
-
expect(TEST_VARIABLE).toStrictEqual(25);
|
|
160
|
-
});
|
|
161
|
-
|
|
162
|
-
test("Variant #8: Work with 'use strict'", async () => {
|
|
163
|
-
var code = `
|
|
164
|
-
function myFunction(){
|
|
165
|
-
'use strict';
|
|
166
|
-
|
|
167
|
-
var x = 1;
|
|
168
|
-
|
|
169
|
-
return this === undefined;
|
|
170
|
-
}
|
|
171
|
-
|
|
172
|
-
TEST_OUTPUT = myFunction();
|
|
173
|
-
`;
|
|
174
|
-
|
|
175
|
-
var output = await JsConfuser(code, {
|
|
176
|
-
target: "node",
|
|
177
|
-
movedDeclarations: true,
|
|
178
|
-
});
|
|
179
|
-
|
|
180
|
-
// Ensure movedDeclarations applied and 'use strict' is still first
|
|
181
|
-
expect(output).toContain("function myFunction(){'use strict';var x;");
|
|
182
|
-
|
|
183
|
-
var TEST_OUTPUT;
|
|
184
|
-
eval(output);
|
|
185
|
-
|
|
186
|
-
expect(TEST_OUTPUT).toStrictEqual(true);
|
|
187
|
-
});
|
|
188
|
-
|
|
189
|
-
test("Variant #9: Defined variable without an initializer", async () => {
|
|
190
|
-
var code = `
|
|
191
|
-
var x;
|
|
192
|
-
x = 1;
|
|
193
|
-
var y;
|
|
194
|
-
y = 2;
|
|
195
|
-
TEST_OUTPUT = x + y;
|
|
196
|
-
`;
|
|
197
|
-
|
|
198
|
-
var output1 = await JsConfuser(code, {
|
|
199
|
-
target: "node",
|
|
200
|
-
movedDeclarations: true,
|
|
201
|
-
controlFlowFlattening: true,
|
|
202
|
-
duplicateLiteralsRemoval: true,
|
|
203
|
-
});
|
|
204
|
-
|
|
205
|
-
var output2 = await JsConfuser(output1, {
|
|
206
|
-
target: "node",
|
|
207
|
-
movedDeclarations: true,
|
|
208
|
-
controlFlowFlattening: true,
|
|
209
|
-
duplicateLiteralsRemoval: true,
|
|
210
|
-
});
|
|
211
|
-
|
|
212
|
-
var TEST_OUTPUT;
|
|
213
|
-
eval(output2);
|
|
214
|
-
expect(TEST_OUTPUT).toStrictEqual(3);
|
|
215
|
-
});
|
|
216
|
-
|
|
217
|
-
test("Variant #10: Move parameters to predictable function", async () => {
|
|
218
|
-
var code = `
|
|
219
|
-
function testFunction${predictableFunctionTag}_FN(){
|
|
220
|
-
var values = [10,20,35,"40", null]
|
|
221
|
-
var parseIntKey = "parseInt"
|
|
222
|
-
var output = 0
|
|
223
|
-
var utils = {
|
|
224
|
-
get parser${predictableFunctionTag}(){
|
|
225
|
-
var fn = (value)=>{
|
|
226
|
-
return global[parseIntKey](value)
|
|
227
|
-
}
|
|
228
|
-
return fn
|
|
229
|
-
},
|
|
230
|
-
|
|
231
|
-
set setter_fn${predictableFunctionTag}(newValue){
|
|
232
|
-
var fakeVar
|
|
233
|
-
}
|
|
234
|
-
}
|
|
235
|
-
|
|
236
|
-
class FakeClass {
|
|
237
|
-
constructor(){
|
|
238
|
-
}
|
|
239
|
-
|
|
240
|
-
get fakeGet${predictableFunctionTag}(){
|
|
241
|
-
var fakeVar
|
|
242
|
-
}
|
|
243
|
-
}
|
|
244
|
-
|
|
245
|
-
for(var value of values) {
|
|
246
|
-
switch(value){
|
|
247
|
-
case null:
|
|
248
|
-
break;
|
|
249
|
-
|
|
250
|
-
default:
|
|
251
|
-
var stringifiedValue = "" + value
|
|
252
|
-
var parsedValue = utils.parser${predictableFunctionTag}(stringifiedValue)
|
|
253
|
-
output += parsedValue;
|
|
254
|
-
break;
|
|
255
|
-
}
|
|
256
|
-
}
|
|
257
|
-
|
|
258
|
-
return output
|
|
259
|
-
}
|
|
260
|
-
|
|
261
|
-
TEST_OUTPUT = testFunction${predictableFunctionTag}_FN()
|
|
262
|
-
`;
|
|
263
|
-
|
|
264
|
-
var output = await JsConfuser(code, {
|
|
265
|
-
target: "node",
|
|
266
|
-
movedDeclarations: true,
|
|
267
|
-
});
|
|
268
|
-
|
|
269
|
-
expect(output).toContain("_FN(values");
|
|
270
|
-
|
|
271
|
-
var TEST_OUTPUT;
|
|
272
|
-
eval(output);
|
|
273
|
-
|
|
274
|
-
expect(TEST_OUTPUT).toStrictEqual(105);
|
|
275
|
-
});
|