js-confuser 1.7.2 → 2.0.0-alpha.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.github/ISSUE_TEMPLATE/bug_report.md +6 -4
- package/.github/workflows/node.js.yml +1 -1
- package/CHANGELOG.md +105 -0
- package/Migration.md +57 -0
- package/README.md +23 -913
- package/dist/constants.js +69 -13
- package/dist/index.js +108 -152
- package/dist/obfuscator.js +316 -118
- package/dist/options.js +1 -109
- package/dist/order.js +30 -30
- package/dist/presets.js +47 -45
- package/dist/probability.js +25 -32
- package/dist/templates/bufferToStringTemplate.js +9 -0
- package/dist/templates/deadCodeTemplates.js +9 -0
- package/dist/templates/getGlobalTemplate.js +19 -0
- package/dist/templates/integrityTemplate.js +30 -0
- package/dist/templates/setFunctionLengthTemplate.js +9 -0
- package/dist/templates/stringCompressionTemplate.js +10 -0
- package/dist/templates/tamperProtectionTemplates.js +21 -0
- package/dist/templates/template.js +213 -93
- package/dist/transforms/astScrambler.js +100 -0
- package/dist/transforms/calculator.js +70 -127
- package/dist/transforms/controlFlowFlattening.js +1182 -0
- package/dist/transforms/deadCode.js +62 -577
- package/dist/transforms/dispatcher.js +300 -309
- package/dist/transforms/extraction/duplicateLiteralsRemoval.js +88 -189
- package/dist/transforms/extraction/objectExtraction.js +131 -215
- package/dist/transforms/finalizer.js +56 -59
- package/dist/transforms/flatten.js +275 -276
- package/dist/transforms/functionOutlining.js +230 -0
- package/dist/transforms/identifier/globalConcealing.js +217 -103
- package/dist/transforms/identifier/movedDeclarations.js +167 -91
- package/dist/transforms/identifier/renameVariables.js +240 -187
- package/dist/transforms/lock/integrity.js +61 -184
- package/dist/transforms/lock/lock.js +263 -303
- package/dist/transforms/minify.js +431 -436
- package/dist/transforms/opaquePredicates.js +65 -118
- package/dist/transforms/pack.js +160 -0
- package/dist/transforms/plugin.js +179 -0
- package/dist/transforms/preparation.js +263 -163
- package/dist/transforms/renameLabels.js +132 -56
- package/dist/transforms/rgf.js +142 -240
- package/dist/transforms/shuffle.js +52 -145
- package/dist/transforms/string/encoding.js +45 -173
- package/dist/transforms/string/stringCompression.js +81 -126
- package/dist/transforms/string/stringConcealing.js +189 -224
- package/dist/transforms/string/stringEncoding.js +32 -40
- package/dist/transforms/string/stringSplitting.js +54 -55
- package/dist/transforms/variableMasking.js +232 -0
- package/dist/utils/ControlObject.js +125 -0
- package/dist/utils/IntGen.js +46 -0
- package/dist/utils/NameGen.js +106 -0
- package/dist/utils/ast-utils.js +560 -0
- package/dist/utils/function-utils.js +56 -0
- package/dist/utils/gen-utils.js +48 -0
- package/dist/utils/node.js +77 -0
- package/dist/utils/object-utils.js +21 -0
- package/dist/utils/random-utils.js +91 -0
- package/dist/utils/static-utils.js +64 -0
- package/dist/validateOptions.js +122 -0
- package/index.d.ts +1 -17
- package/package.json +27 -22
- package/src/constants.ts +139 -77
- package/src/index.ts +70 -163
- package/src/obfuscationResult.ts +43 -0
- package/src/obfuscator.ts +328 -135
- package/src/options.ts +154 -623
- package/src/order.ts +14 -14
- package/src/presets.ts +39 -34
- package/src/probability.ts +21 -36
- package/src/templates/{bufferToString.ts → bufferToStringTemplate.ts} +5 -54
- package/src/templates/deadCodeTemplates.ts +1185 -0
- package/src/templates/getGlobalTemplate.ts +72 -0
- package/src/templates/integrityTemplate.ts +69 -0
- package/src/templates/setFunctionLengthTemplate.ts +11 -0
- package/src/templates/stringCompressionTemplate.ts +42 -0
- package/src/templates/tamperProtectionTemplates.ts +116 -0
- package/src/templates/template.ts +183 -92
- package/src/transforms/astScrambler.ts +99 -0
- package/src/transforms/calculator.ts +96 -224
- package/src/transforms/controlFlowFlattening.ts +1594 -0
- package/src/transforms/deadCode.ts +85 -628
- package/src/transforms/dispatcher.ts +431 -636
- package/src/transforms/extraction/duplicateLiteralsRemoval.ts +147 -299
- package/src/transforms/extraction/objectExtraction.ts +160 -333
- package/src/transforms/finalizer.ts +63 -64
- package/src/transforms/flatten.ts +439 -557
- package/src/transforms/functionOutlining.ts +225 -0
- package/src/transforms/identifier/globalConcealing.ts +261 -189
- package/src/transforms/identifier/movedDeclarations.ts +228 -142
- package/src/transforms/identifier/renameVariables.ts +252 -258
- package/src/transforms/lock/integrity.ts +84 -260
- package/src/transforms/lock/lock.ts +342 -491
- package/src/transforms/minify.ts +523 -663
- package/src/transforms/opaquePredicates.ts +90 -229
- package/src/transforms/pack.ts +195 -0
- package/src/transforms/plugin.ts +185 -0
- package/src/transforms/preparation.ts +337 -215
- package/src/transforms/renameLabels.ts +176 -77
- package/src/transforms/rgf.ts +293 -386
- package/src/transforms/shuffle.ts +80 -254
- package/src/transforms/string/encoding.ts +26 -129
- package/src/transforms/string/stringCompression.ts +118 -236
- package/src/transforms/string/stringConcealing.ts +255 -339
- package/src/transforms/string/stringEncoding.ts +28 -47
- package/src/transforms/string/stringSplitting.ts +61 -75
- package/src/transforms/variableMasking.ts +257 -0
- package/src/utils/ControlObject.ts +141 -0
- package/src/utils/IntGen.ts +33 -0
- package/src/utils/NameGen.ts +106 -0
- package/src/utils/ast-utils.ts +667 -0
- package/src/utils/function-utils.ts +50 -0
- package/src/utils/gen-utils.ts +48 -0
- package/src/utils/node.ts +78 -0
- package/src/utils/object-utils.ts +21 -0
- package/src/utils/random-utils.ts +79 -0
- package/src/utils/static-utils.ts +66 -0
- package/src/validateOptions.ts +256 -0
- package/tsconfig.json +13 -8
- package/babel.config.js +0 -12
- package/dev.js +0 -8
- package/dist/compiler.js +0 -34
- package/dist/parser.js +0 -59
- package/dist/precedence.js +0 -66
- package/dist/templates/bufferToString.js +0 -108
- package/dist/templates/crash.js +0 -59
- package/dist/templates/es5.js +0 -137
- package/dist/templates/functionLength.js +0 -34
- package/dist/templates/globals.js +0 -9
- package/dist/transforms/antiTooling.js +0 -88
- package/dist/transforms/controlFlowFlattening/controlFlowFlattening.js +0 -1281
- package/dist/transforms/controlFlowFlattening/expressionObfuscation.js +0 -131
- package/dist/transforms/es5/antiClass.js +0 -164
- package/dist/transforms/es5/antiDestructuring.js +0 -193
- package/dist/transforms/es5/antiES6Object.js +0 -185
- package/dist/transforms/es5/antiSpreadOperator.js +0 -35
- package/dist/transforms/es5/antiTemplate.js +0 -66
- package/dist/transforms/es5/es5.js +0 -123
- package/dist/transforms/extraction/classExtraction.js +0 -83
- package/dist/transforms/identifier/globalAnalysis.js +0 -70
- package/dist/transforms/identifier/variableAnalysis.js +0 -104
- package/dist/transforms/lock/antiDebug.js +0 -76
- package/dist/transforms/stack.js +0 -343
- package/dist/transforms/transform.js +0 -350
- package/dist/traverse.js +0 -110
- package/dist/util/compare.js +0 -145
- package/dist/util/gen.js +0 -564
- package/dist/util/guard.js +0 -9
- package/dist/util/identifiers.js +0 -355
- package/dist/util/insert.js +0 -362
- package/dist/util/math.js +0 -19
- package/dist/util/object.js +0 -40
- package/dist/util/random.js +0 -130
- package/dist/util/scope.js +0 -20
- package/docs/ControlFlowFlattening.md +0 -595
- package/docs/Countermeasures.md +0 -63
- package/docs/ES5.md +0 -197
- package/docs/Integrity.md +0 -75
- package/docs/RGF.md +0 -419
- package/samples/example.js +0 -15
- package/samples/high.js +0 -1
- package/samples/input.js +0 -3
- package/samples/javascriptobfuscator.com.js +0 -8
- package/samples/jscrambler_advanced.js +0 -1894
- package/samples/jscrambler_light.js +0 -1134
- package/samples/low.js +0 -1
- package/samples/medium.js +0 -1
- package/samples/obfuscator.io.js +0 -1686
- package/samples/preemptive.com.js +0 -16
- package/src/compiler.ts +0 -35
- package/src/parser.ts +0 -49
- package/src/precedence.ts +0 -61
- package/src/templates/crash.ts +0 -55
- package/src/templates/es5.ts +0 -131
- package/src/templates/functionLength.ts +0 -32
- package/src/templates/globals.ts +0 -3
- package/src/transforms/antiTooling.ts +0 -102
- package/src/transforms/controlFlowFlattening/controlFlowFlattening.ts +0 -2146
- package/src/transforms/controlFlowFlattening/expressionObfuscation.ts +0 -179
- package/src/transforms/es5/antiClass.ts +0 -272
- package/src/transforms/es5/antiDestructuring.ts +0 -294
- package/src/transforms/es5/antiES6Object.ts +0 -267
- package/src/transforms/es5/antiSpreadOperator.ts +0 -56
- package/src/transforms/es5/antiTemplate.ts +0 -98
- package/src/transforms/es5/es5.ts +0 -149
- package/src/transforms/extraction/classExtraction.ts +0 -168
- package/src/transforms/identifier/globalAnalysis.ts +0 -85
- package/src/transforms/identifier/variableAnalysis.ts +0 -118
- package/src/transforms/lock/antiDebug.ts +0 -112
- package/src/transforms/stack.ts +0 -551
- package/src/transforms/transform.ts +0 -453
- package/src/traverse.ts +0 -120
- package/src/types.ts +0 -131
- package/src/util/compare.ts +0 -181
- package/src/util/gen.ts +0 -651
- package/src/util/guard.ts +0 -7
- package/src/util/identifiers.ts +0 -494
- package/src/util/insert.ts +0 -419
- package/src/util/math.ts +0 -15
- package/src/util/object.ts +0 -39
- package/src/util/random.ts +0 -141
- package/src/util/scope.ts +0 -21
- package/test/code/Cash.src.js +0 -1011
- package/test/code/Cash.test.ts +0 -49
- package/test/code/Dynamic.src.js +0 -118
- package/test/code/Dynamic.test.ts +0 -49
- package/test/code/ES6.src.js +0 -235
- package/test/code/ES6.test.ts +0 -42
- package/test/code/NewFeatures.test.ts +0 -19
- package/test/code/StrictMode.src.js +0 -65
- package/test/code/StrictMode.test.js +0 -37
- package/test/compare.test.ts +0 -104
- package/test/index.test.ts +0 -249
- package/test/options.test.ts +0 -132
- package/test/presets.test.ts +0 -22
- package/test/probability.test.ts +0 -44
- package/test/templates/template.test.ts +0 -14
- package/test/transforms/antiTooling.test.ts +0 -52
- package/test/transforms/calculator.test.ts +0 -78
- package/test/transforms/controlFlowFlattening/controlFlowFlattening.test.ts +0 -1274
- package/test/transforms/controlFlowFlattening/expressionObfuscation.test.ts +0 -192
- package/test/transforms/deadCode.test.ts +0 -85
- package/test/transforms/dispatcher.test.ts +0 -457
- package/test/transforms/es5/antiClass.test.ts +0 -427
- package/test/transforms/es5/antiDestructuring.test.ts +0 -157
- package/test/transforms/es5/antiES6Object.test.ts +0 -245
- package/test/transforms/es5/antiTemplate.test.ts +0 -116
- package/test/transforms/es5/es5.test.ts +0 -110
- package/test/transforms/extraction/classExtraction.test.ts +0 -86
- package/test/transforms/extraction/duplicateLiteralsRemoval.test.ts +0 -200
- package/test/transforms/extraction/objectExtraction.test.ts +0 -491
- package/test/transforms/flatten.test.ts +0 -721
- package/test/transforms/hexadecimalNumbers.test.ts +0 -62
- package/test/transforms/identifier/globalConcealing.test.ts +0 -72
- package/test/transforms/identifier/movedDeclarations.test.ts +0 -275
- package/test/transforms/identifier/renameVariables.test.ts +0 -621
- package/test/transforms/lock/antiDebug.test.ts +0 -66
- package/test/transforms/lock/browserLock.test.ts +0 -129
- package/test/transforms/lock/countermeasures.test.ts +0 -100
- package/test/transforms/lock/integrity.test.ts +0 -161
- package/test/transforms/lock/lock.test.ts +0 -204
- package/test/transforms/lock/osLock.test.ts +0 -312
- package/test/transforms/lock/selfDefending.test.ts +0 -68
- package/test/transforms/minify.test.ts +0 -575
- package/test/transforms/opaquePredicates.test.ts +0 -43
- package/test/transforms/preparation.test.ts +0 -157
- package/test/transforms/renameLabels.test.ts +0 -95
- package/test/transforms/rgf.test.ts +0 -378
- package/test/transforms/shuffle.test.ts +0 -135
- package/test/transforms/stack.test.ts +0 -573
- package/test/transforms/string/stringCompression.test.ts +0 -120
- package/test/transforms/string/stringConcealing.test.ts +0 -299
- package/test/transforms/string/stringEncoding.test.ts +0 -95
- package/test/transforms/string/stringSplitting.test.ts +0 -135
- package/test/transforms/transform.test.ts +0 -66
- package/test/traverse.test.ts +0 -139
- package/test/util/compare.test.ts +0 -34
- package/test/util/gen.test.ts +0 -121
- package/test/util/identifiers.test.ts +0 -253
- package/test/util/insert.test.ts +0 -142
- package/test/util/math.test.ts +0 -5
- package/test/util/random.test.ts +0 -71
- /package/dist/{types.js → obfuscationResult.js} +0 -0
|
@@ -1,129 +0,0 @@
|
|
|
1
|
-
import JsConfuser from "../../../src/index";
|
|
2
|
-
|
|
3
|
-
test("Variant #1: Chrome", async () => {
|
|
4
|
-
// Chrome user-agent
|
|
5
|
-
var window = {
|
|
6
|
-
navigator: {
|
|
7
|
-
userAgent:
|
|
8
|
-
"Mozilla/5.0 (X11; CrOS x86_64 8172.45.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.64 Safari/537.36",
|
|
9
|
-
},
|
|
10
|
-
};
|
|
11
|
-
|
|
12
|
-
var output = await JsConfuser.obfuscate(
|
|
13
|
-
`
|
|
14
|
-
function caught(){
|
|
15
|
-
TEST_VARIABLE = "caught"
|
|
16
|
-
}
|
|
17
|
-
`,
|
|
18
|
-
{
|
|
19
|
-
target: "browser",
|
|
20
|
-
lock: {
|
|
21
|
-
browserLock: ["chrome"],
|
|
22
|
-
countermeasures: "caught",
|
|
23
|
-
},
|
|
24
|
-
}
|
|
25
|
-
);
|
|
26
|
-
|
|
27
|
-
var TEST_VARIABLE;
|
|
28
|
-
|
|
29
|
-
eval(output);
|
|
30
|
-
expect(TEST_VARIABLE).toStrictEqual(undefined);
|
|
31
|
-
});
|
|
32
|
-
|
|
33
|
-
test(
|
|
34
|
-
"Variant #2: Chrome on Firefox browser",
|
|
35
|
-
async () => {
|
|
36
|
-
// Firefox user-agent
|
|
37
|
-
var window = {
|
|
38
|
-
navigator: {
|
|
39
|
-
userAgent:
|
|
40
|
-
"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:15.0) Gecko/20100101 Firefox/15.0.1",
|
|
41
|
-
},
|
|
42
|
-
};
|
|
43
|
-
|
|
44
|
-
var output = await JsConfuser.obfuscate(
|
|
45
|
-
`
|
|
46
|
-
function caught(){
|
|
47
|
-
TEST_VARIABLE = "caught"
|
|
48
|
-
}
|
|
49
|
-
`,
|
|
50
|
-
{
|
|
51
|
-
target: "browser",
|
|
52
|
-
lock: {
|
|
53
|
-
browserLock: ["chrome"],
|
|
54
|
-
countermeasures: "caught",
|
|
55
|
-
},
|
|
56
|
-
}
|
|
57
|
-
);
|
|
58
|
-
|
|
59
|
-
var TEST_VARIABLE;
|
|
60
|
-
|
|
61
|
-
eval(output);
|
|
62
|
-
expect(TEST_VARIABLE).toStrictEqual("caught");
|
|
63
|
-
},
|
|
64
|
-
30 * 1000
|
|
65
|
-
);
|
|
66
|
-
|
|
67
|
-
test("Variant #2: Firefox", async () => {
|
|
68
|
-
// Firefox user-agent
|
|
69
|
-
var window = {
|
|
70
|
-
navigator: {
|
|
71
|
-
userAgent:
|
|
72
|
-
"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:15.0) Gecko/20100101 Firefox/15.0.1",
|
|
73
|
-
},
|
|
74
|
-
};
|
|
75
|
-
|
|
76
|
-
var output = await JsConfuser.obfuscate(
|
|
77
|
-
`
|
|
78
|
-
function caught(){
|
|
79
|
-
TEST_VARIABLE = "caught"
|
|
80
|
-
}
|
|
81
|
-
`,
|
|
82
|
-
{
|
|
83
|
-
target: "browser",
|
|
84
|
-
lock: {
|
|
85
|
-
browserLock: ["firefox"],
|
|
86
|
-
countermeasures: "caught",
|
|
87
|
-
},
|
|
88
|
-
}
|
|
89
|
-
);
|
|
90
|
-
|
|
91
|
-
var TEST_VARIABLE;
|
|
92
|
-
|
|
93
|
-
eval(output);
|
|
94
|
-
expect(TEST_VARIABLE).toStrictEqual(undefined);
|
|
95
|
-
});
|
|
96
|
-
|
|
97
|
-
test(
|
|
98
|
-
"Variant #4: Firefox on Chrome browser",
|
|
99
|
-
async () => {
|
|
100
|
-
// Chrome user-agent
|
|
101
|
-
var window = {
|
|
102
|
-
navigator: {
|
|
103
|
-
userAgent:
|
|
104
|
-
"Mozilla/5.0 (X11; CrOS x86_64 8172.45.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.64 Safari/537.36",
|
|
105
|
-
},
|
|
106
|
-
};
|
|
107
|
-
|
|
108
|
-
var output = await JsConfuser.obfuscate(
|
|
109
|
-
`
|
|
110
|
-
function caught(){
|
|
111
|
-
TEST_VARIABLE = "caught"
|
|
112
|
-
}
|
|
113
|
-
`,
|
|
114
|
-
{
|
|
115
|
-
target: "browser",
|
|
116
|
-
lock: {
|
|
117
|
-
browserLock: ["firefox"],
|
|
118
|
-
countermeasures: "caught",
|
|
119
|
-
},
|
|
120
|
-
}
|
|
121
|
-
);
|
|
122
|
-
|
|
123
|
-
var TEST_VARIABLE;
|
|
124
|
-
|
|
125
|
-
eval(output);
|
|
126
|
-
expect(TEST_VARIABLE).toStrictEqual("caught");
|
|
127
|
-
},
|
|
128
|
-
30 * 1000
|
|
129
|
-
);
|
|
@@ -1,100 +0,0 @@
|
|
|
1
|
-
import JsConfuser from "../../../src/index";
|
|
2
|
-
|
|
3
|
-
test("Variant #1: Error when countermeasures function can't be found", async () => {
|
|
4
|
-
var err;
|
|
5
|
-
try {
|
|
6
|
-
await JsConfuser.obfuscate(`5+5`, {
|
|
7
|
-
target: "node",
|
|
8
|
-
lock: {
|
|
9
|
-
countermeasures: "myMissingFunction",
|
|
10
|
-
},
|
|
11
|
-
});
|
|
12
|
-
} catch (_err) {
|
|
13
|
-
err = _err;
|
|
14
|
-
}
|
|
15
|
-
|
|
16
|
-
expect(err).toBeTruthy();
|
|
17
|
-
expect(err instanceof Error).toStrictEqual(true);
|
|
18
|
-
expect(err.message).toContain(
|
|
19
|
-
"Countermeasures function named 'myMissingFunction' was not found"
|
|
20
|
-
);
|
|
21
|
-
});
|
|
22
|
-
|
|
23
|
-
test("Variant #2: Error when countermeasures function isn't top-level", async () => {
|
|
24
|
-
await expect(async () => {
|
|
25
|
-
await JsConfuser.obfuscate(
|
|
26
|
-
`
|
|
27
|
-
(function(){
|
|
28
|
-
function myNonTopLevelFunction(){
|
|
29
|
-
|
|
30
|
-
}
|
|
31
|
-
})();
|
|
32
|
-
`,
|
|
33
|
-
{
|
|
34
|
-
target: "node",
|
|
35
|
-
lock: {
|
|
36
|
-
countermeasures: "myNonTopLevelFunction",
|
|
37
|
-
},
|
|
38
|
-
}
|
|
39
|
-
);
|
|
40
|
-
}).rejects.toThrow(
|
|
41
|
-
"Countermeasures function must be defined at the global level"
|
|
42
|
-
);
|
|
43
|
-
});
|
|
44
|
-
|
|
45
|
-
test("Variant #3: Error when countermeasures function is redefined", async () => {
|
|
46
|
-
await expect(async () => {
|
|
47
|
-
await JsConfuser.obfuscate(
|
|
48
|
-
`
|
|
49
|
-
function myFunction(){
|
|
50
|
-
|
|
51
|
-
}
|
|
52
|
-
var myFunction = function(){
|
|
53
|
-
|
|
54
|
-
}
|
|
55
|
-
`,
|
|
56
|
-
{
|
|
57
|
-
target: "node",
|
|
58
|
-
lock: {
|
|
59
|
-
countermeasures: "myFunction",
|
|
60
|
-
},
|
|
61
|
-
}
|
|
62
|
-
);
|
|
63
|
-
}).rejects.toThrow(
|
|
64
|
-
"Countermeasures function was already defined, it must have a unique name from the rest of your code"
|
|
65
|
-
);
|
|
66
|
-
});
|
|
67
|
-
|
|
68
|
-
test("Variant #4: Should work when countermeasures is variable declaration", async () => {
|
|
69
|
-
await JsConfuser.obfuscate(
|
|
70
|
-
`
|
|
71
|
-
var myFunction = function(){
|
|
72
|
-
|
|
73
|
-
}
|
|
74
|
-
`,
|
|
75
|
-
{
|
|
76
|
-
target: "node",
|
|
77
|
-
lock: {
|
|
78
|
-
countermeasures: "myFunction",
|
|
79
|
-
},
|
|
80
|
-
}
|
|
81
|
-
);
|
|
82
|
-
});
|
|
83
|
-
|
|
84
|
-
// https://github.com/MichaelXF/js-confuser/issues/66
|
|
85
|
-
test("Variant #5: Should work with RGF enabled", async () => {
|
|
86
|
-
await JsConfuser.obfuscate(
|
|
87
|
-
`
|
|
88
|
-
function myCountermeasuresFunction(){
|
|
89
|
-
|
|
90
|
-
}
|
|
91
|
-
`,
|
|
92
|
-
{
|
|
93
|
-
target: "node",
|
|
94
|
-
lock: {
|
|
95
|
-
countermeasures: "myCountermeasuresFunction",
|
|
96
|
-
},
|
|
97
|
-
rgf: true,
|
|
98
|
-
}
|
|
99
|
-
);
|
|
100
|
-
});
|
|
@@ -1,161 +0,0 @@
|
|
|
1
|
-
import JsConfuser from "../../../src/index";
|
|
2
|
-
|
|
3
|
-
it("should run correctly", async () => {
|
|
4
|
-
var code = `
|
|
5
|
-
function TEST_FUNCTION(){
|
|
6
|
-
input_test1(true)
|
|
7
|
-
}
|
|
8
|
-
|
|
9
|
-
TEST_FUNCTION();
|
|
10
|
-
`;
|
|
11
|
-
|
|
12
|
-
var output = await JsConfuser(code, {
|
|
13
|
-
target: "node",
|
|
14
|
-
lock: { integrity: true, countermeasures: false },
|
|
15
|
-
});
|
|
16
|
-
|
|
17
|
-
expect(output).toContain("function");
|
|
18
|
-
|
|
19
|
-
var value = "never_called";
|
|
20
|
-
function input_test1(valueIn) {
|
|
21
|
-
value = valueIn;
|
|
22
|
-
}
|
|
23
|
-
|
|
24
|
-
eval(output);
|
|
25
|
-
|
|
26
|
-
expect(value).toStrictEqual(true);
|
|
27
|
-
});
|
|
28
|
-
|
|
29
|
-
it("should not run when source code is modified", async () => {
|
|
30
|
-
var code = `
|
|
31
|
-
function TEST_FUNCTION(){
|
|
32
|
-
input("Hello World")
|
|
33
|
-
}
|
|
34
|
-
|
|
35
|
-
TEST_FUNCTION();
|
|
36
|
-
|
|
37
|
-
`;
|
|
38
|
-
|
|
39
|
-
var output = await JsConfuser(code, {
|
|
40
|
-
target: "node",
|
|
41
|
-
lock: { integrity: true, countermeasures: false },
|
|
42
|
-
});
|
|
43
|
-
|
|
44
|
-
expect(output).toContain("function");
|
|
45
|
-
|
|
46
|
-
var value = "never_called";
|
|
47
|
-
function input(valueIn) {
|
|
48
|
-
value = valueIn;
|
|
49
|
-
}
|
|
50
|
-
|
|
51
|
-
// Change the "Hello World" to "Goodnight"
|
|
52
|
-
output = output.replace("Hello World", "Goodnight");
|
|
53
|
-
|
|
54
|
-
eval(output);
|
|
55
|
-
|
|
56
|
-
expect(value).not.toEqual("Goodnight");
|
|
57
|
-
|
|
58
|
-
expect(value).toStrictEqual("never_called");
|
|
59
|
-
});
|
|
60
|
-
|
|
61
|
-
it("should run countermeasures function when changed", async () => {
|
|
62
|
-
var code = `
|
|
63
|
-
function TEST_FUNCTION(){
|
|
64
|
-
input("The code was never changed")
|
|
65
|
-
}
|
|
66
|
-
|
|
67
|
-
function TEST_COUNTERMEASURES(){
|
|
68
|
-
input("countermeasures")
|
|
69
|
-
}
|
|
70
|
-
|
|
71
|
-
TEST_FUNCTION();
|
|
72
|
-
|
|
73
|
-
`;
|
|
74
|
-
|
|
75
|
-
var output = await JsConfuser(code, {
|
|
76
|
-
target: "node",
|
|
77
|
-
lock: { integrity: true, countermeasures: "TEST_COUNTERMEASURES" },
|
|
78
|
-
});
|
|
79
|
-
|
|
80
|
-
expect(output).toContain("function");
|
|
81
|
-
|
|
82
|
-
var value = "never_called";
|
|
83
|
-
function input(valueIn) {
|
|
84
|
-
value = valueIn;
|
|
85
|
-
}
|
|
86
|
-
|
|
87
|
-
// Change the "Hello World" to "Goodnight"
|
|
88
|
-
output = output.replace(
|
|
89
|
-
"The code was never changed",
|
|
90
|
-
"The modified code was executed"
|
|
91
|
-
);
|
|
92
|
-
|
|
93
|
-
eval(output);
|
|
94
|
-
|
|
95
|
-
expect(value).toStrictEqual("countermeasures");
|
|
96
|
-
});
|
|
97
|
-
|
|
98
|
-
it("should error when countermeasures function doesn't exist", async () => {
|
|
99
|
-
var code = `
|
|
100
|
-
function TEST_FUNCTION(){
|
|
101
|
-
input("The code was never changed")
|
|
102
|
-
}
|
|
103
|
-
|
|
104
|
-
TEST_FUNCTION();
|
|
105
|
-
`;
|
|
106
|
-
|
|
107
|
-
var errorCaught;
|
|
108
|
-
try {
|
|
109
|
-
var output = await JsConfuser(code, {
|
|
110
|
-
target: "node",
|
|
111
|
-
lock: { integrity: true, countermeasures: "TEST_COUNTERMEASURES" },
|
|
112
|
-
});
|
|
113
|
-
} catch (e) {
|
|
114
|
-
errorCaught = e;
|
|
115
|
-
}
|
|
116
|
-
|
|
117
|
-
expect(errorCaught).toBeTruthy();
|
|
118
|
-
expect(errorCaught.toString()).toContain(
|
|
119
|
-
"Countermeasures function named 'TEST_COUNTERMEASURES' was not found."
|
|
120
|
-
);
|
|
121
|
-
expect(errorCaught.toString()).toContain("TEST_COUNTERMEASURES");
|
|
122
|
-
});
|
|
123
|
-
|
|
124
|
-
it("should work on High Preset", async () => {
|
|
125
|
-
var output = await JsConfuser(`TEST_OUTPUT = ("Hello World")`, {
|
|
126
|
-
target: "node",
|
|
127
|
-
preset: "high",
|
|
128
|
-
lock: {
|
|
129
|
-
integrity: true,
|
|
130
|
-
},
|
|
131
|
-
});
|
|
132
|
-
|
|
133
|
-
var TEST_OUTPUT;
|
|
134
|
-
eval(output);
|
|
135
|
-
|
|
136
|
-
expect(TEST_OUTPUT).toStrictEqual("Hello World");
|
|
137
|
-
});
|
|
138
|
-
|
|
139
|
-
it("should work with RGF enabled", async () => {
|
|
140
|
-
var output = await JsConfuser(
|
|
141
|
-
`
|
|
142
|
-
function getTestOutput(){
|
|
143
|
-
return "Hello World";
|
|
144
|
-
}
|
|
145
|
-
|
|
146
|
-
TEST_OUTPUT = getTestOutput();
|
|
147
|
-
`,
|
|
148
|
-
{
|
|
149
|
-
target: "node",
|
|
150
|
-
rgf: true,
|
|
151
|
-
lock: {
|
|
152
|
-
integrity: true,
|
|
153
|
-
},
|
|
154
|
-
}
|
|
155
|
-
);
|
|
156
|
-
|
|
157
|
-
var TEST_OUTPUT;
|
|
158
|
-
eval(output);
|
|
159
|
-
|
|
160
|
-
expect(TEST_OUTPUT).toStrictEqual("Hello World");
|
|
161
|
-
});
|
|
@@ -1,204 +0,0 @@
|
|
|
1
|
-
import JsConfuser from "../../../src/index";
|
|
2
|
-
|
|
3
|
-
it("should work with startDate and call countermeasures function", async () => {
|
|
4
|
-
var startDate = await JsConfuser.obfuscate(
|
|
5
|
-
` function countermeasures(){ input(true) } `,
|
|
6
|
-
{
|
|
7
|
-
target: "node",
|
|
8
|
-
lock: {
|
|
9
|
-
startDate: Date.now() + 1000 * 60 * 60 * 24, // one day in the future
|
|
10
|
-
countermeasures: "countermeasures",
|
|
11
|
-
},
|
|
12
|
-
}
|
|
13
|
-
);
|
|
14
|
-
|
|
15
|
-
var value = "never_called";
|
|
16
|
-
function input(valueIn) {
|
|
17
|
-
value = valueIn;
|
|
18
|
-
}
|
|
19
|
-
|
|
20
|
-
eval(startDate);
|
|
21
|
-
expect(value).toStrictEqual(true);
|
|
22
|
-
});
|
|
23
|
-
|
|
24
|
-
it("should not call countermeasures if the time is correct", async () => {
|
|
25
|
-
var startDate = await JsConfuser.obfuscate(
|
|
26
|
-
` function countermeasures(){ input(true) } `,
|
|
27
|
-
{
|
|
28
|
-
target: "node",
|
|
29
|
-
lock: {
|
|
30
|
-
startDate: Date.now() - 1000 * 60 * 60 * 24, // one day in the past
|
|
31
|
-
endDate: Date.now() + 1000 * 60 * 60 * 24, // one day in the future (2-day window to run this code)
|
|
32
|
-
countermeasures: "countermeasures",
|
|
33
|
-
},
|
|
34
|
-
}
|
|
35
|
-
);
|
|
36
|
-
|
|
37
|
-
var value = "never_called";
|
|
38
|
-
function input(valueIn) {
|
|
39
|
-
value = valueIn;
|
|
40
|
-
}
|
|
41
|
-
|
|
42
|
-
eval(startDate);
|
|
43
|
-
expect(value).toStrictEqual("never_called");
|
|
44
|
-
});
|
|
45
|
-
|
|
46
|
-
it("should work with endDate and call countermeasures function", async () => {
|
|
47
|
-
var endDate = await JsConfuser.obfuscate(
|
|
48
|
-
` function countermeasures(){ input(true) } `,
|
|
49
|
-
{
|
|
50
|
-
target: "node",
|
|
51
|
-
lock: {
|
|
52
|
-
endDate: Date.now() - 1000 * 60 * 60 * 24, // one day in the past
|
|
53
|
-
countermeasures: "countermeasures",
|
|
54
|
-
},
|
|
55
|
-
}
|
|
56
|
-
);
|
|
57
|
-
|
|
58
|
-
var value = "never_called";
|
|
59
|
-
function input(valueIn) {
|
|
60
|
-
value = valueIn;
|
|
61
|
-
}
|
|
62
|
-
|
|
63
|
-
eval(endDate);
|
|
64
|
-
expect(value).toStrictEqual(true);
|
|
65
|
-
});
|
|
66
|
-
|
|
67
|
-
// REMOVED FEATURE:
|
|
68
|
-
// it("strings should be encoded when startDate and endDate are given", async () => {
|
|
69
|
-
// var startDate = await JsConfuser.obfuscate(` input("ENCODED_STRING") `, {
|
|
70
|
-
// target: "node",
|
|
71
|
-
// lock: {
|
|
72
|
-
// startDate: Date.now() - 1000 * 60 * 60 * 24, // one day in the past
|
|
73
|
-
// endDate: Date.now() + 1000 * 60 * 60 * 24, // one day in the future (2-day window to run this code)
|
|
74
|
-
// },
|
|
75
|
-
// });
|
|
76
|
-
|
|
77
|
-
// var value = "never_called";
|
|
78
|
-
// function input(valueIn) {
|
|
79
|
-
// value = valueIn;
|
|
80
|
-
// }
|
|
81
|
-
|
|
82
|
-
// eval(startDate);
|
|
83
|
-
// expect(value).toStrictEqual("ENCODED_STRING");
|
|
84
|
-
// });
|
|
85
|
-
|
|
86
|
-
it("countermeasures function should still work even with renameVariables enabled", async () => {
|
|
87
|
-
var output = await JsConfuser.obfuscate(
|
|
88
|
-
` function countermeasures(){ input(true) } `,
|
|
89
|
-
{
|
|
90
|
-
target: "node",
|
|
91
|
-
renameVariables: true,
|
|
92
|
-
renameGlobals: true, // <- `countermeasures` is top level name
|
|
93
|
-
lock: {
|
|
94
|
-
endDate: Date.now() - 1000 * 60 * 60 * 24, // always in the past, therefore countermeasures will always be called
|
|
95
|
-
countermeasures: "countermeasures",
|
|
96
|
-
},
|
|
97
|
-
}
|
|
98
|
-
);
|
|
99
|
-
|
|
100
|
-
// ensure function was renamed
|
|
101
|
-
expect(output).not.toContain("countermeasures");
|
|
102
|
-
|
|
103
|
-
var value = "never_called";
|
|
104
|
-
function input(valueIn) {
|
|
105
|
-
value = valueIn;
|
|
106
|
-
}
|
|
107
|
-
|
|
108
|
-
eval(output);
|
|
109
|
-
expect(value).toStrictEqual(true);
|
|
110
|
-
});
|
|
111
|
-
|
|
112
|
-
it("should not call countermeasures when domainLock is correct", async () => {
|
|
113
|
-
var output = await JsConfuser.obfuscate(
|
|
114
|
-
` function countermeasures(){ input(true) } `,
|
|
115
|
-
{
|
|
116
|
-
target: "browser",
|
|
117
|
-
lock: {
|
|
118
|
-
domainLock: ["mywebsite.com"],
|
|
119
|
-
countermeasures: "countermeasures",
|
|
120
|
-
},
|
|
121
|
-
}
|
|
122
|
-
);
|
|
123
|
-
|
|
124
|
-
var location = {
|
|
125
|
-
href: "mywebsite.com",
|
|
126
|
-
};
|
|
127
|
-
|
|
128
|
-
var value = "never_called";
|
|
129
|
-
function input(valueIn) {
|
|
130
|
-
value = valueIn;
|
|
131
|
-
}
|
|
132
|
-
|
|
133
|
-
eval(output);
|
|
134
|
-
expect(value).toStrictEqual("never_called");
|
|
135
|
-
});
|
|
136
|
-
|
|
137
|
-
it("should call countermeasures when domain is different", async () => {
|
|
138
|
-
var output = await JsConfuser.obfuscate(
|
|
139
|
-
` function countermeasures(){ input(true) } `,
|
|
140
|
-
{
|
|
141
|
-
target: "browser",
|
|
142
|
-
lock: {
|
|
143
|
-
domainLock: ["mywebsite.com"],
|
|
144
|
-
countermeasures: "countermeasures",
|
|
145
|
-
},
|
|
146
|
-
}
|
|
147
|
-
);
|
|
148
|
-
|
|
149
|
-
var location = {
|
|
150
|
-
href: "anotherwebsite.com",
|
|
151
|
-
};
|
|
152
|
-
|
|
153
|
-
var value = "never_called";
|
|
154
|
-
function input(valueIn) {
|
|
155
|
-
value = valueIn;
|
|
156
|
-
}
|
|
157
|
-
|
|
158
|
-
eval(output);
|
|
159
|
-
expect(value).toStrictEqual(true);
|
|
160
|
-
});
|
|
161
|
-
|
|
162
|
-
it("should not call countermeasures when context is correct", async () => {
|
|
163
|
-
var output = await JsConfuser.obfuscate(
|
|
164
|
-
` function countermeasures(){ input(true) } `,
|
|
165
|
-
{
|
|
166
|
-
target: "node",
|
|
167
|
-
lock: {
|
|
168
|
-
context: ["authenticated"],
|
|
169
|
-
countermeasures: "countermeasures",
|
|
170
|
-
},
|
|
171
|
-
}
|
|
172
|
-
);
|
|
173
|
-
|
|
174
|
-
(global as any).authenticated = true;
|
|
175
|
-
|
|
176
|
-
var value = "never_called";
|
|
177
|
-
function input(valueIn) {
|
|
178
|
-
value = valueIn;
|
|
179
|
-
}
|
|
180
|
-
|
|
181
|
-
eval(output);
|
|
182
|
-
expect(value).toStrictEqual("never_called");
|
|
183
|
-
});
|
|
184
|
-
|
|
185
|
-
it("should call countermeasures when context is different", async () => {
|
|
186
|
-
var output = await JsConfuser.obfuscate(
|
|
187
|
-
` function countermeasures(){ input(true) } `,
|
|
188
|
-
{
|
|
189
|
-
target: "node",
|
|
190
|
-
lock: {
|
|
191
|
-
context: ["missingProperty"],
|
|
192
|
-
countermeasures: "countermeasures",
|
|
193
|
-
},
|
|
194
|
-
}
|
|
195
|
-
);
|
|
196
|
-
|
|
197
|
-
var value = "never_called";
|
|
198
|
-
function input(valueIn) {
|
|
199
|
-
value = valueIn;
|
|
200
|
-
}
|
|
201
|
-
|
|
202
|
-
eval(output);
|
|
203
|
-
expect(value).toStrictEqual(true);
|
|
204
|
-
});
|