jsarmor 1.0.7 → 2.0.0

package/cli/index.js

@@ -19,6 +19,9 @@ import { injectDeadCode, generateDeadRuntime } from "../core/deadcode.js";
 import { injectAntiDebug } from "../core/antidebug.js";
 import { antiBeautify } from "../core/beautifyGuard.js";
 import { selfDefend } from "../core/selfdefend.js";
+import { unicodeIdentifiers } from "../core/unicodeIdentifier.js";
+import { buildStringRuntime } from "../core/stringRuntime.js";
+import { antiVM } from "../core/antivm.js";
 
 import { watermark } from "../utils/watermark.js";
 
@@ -107,7 +110,7 @@ barCompleteChar:"█",
 barIncompleteChar:"░"
 });
 
-bar.start(6,0);
+bar.start(7,0);
 
 const ast = parseCode(code);
 bar.increment();
@@ -115,6 +118,9 @@ bar.increment();
 renameVariables(ast);
 bar.increment();
 
+unicodeIdentifiers(ast);
+bar.increment();
+
 const pool = encodeStrings(ast);
 bar.increment();
 
@@ -143,8 +149,9 @@ const final =
 watermark(user) +
 injectAntiDebug() +
 antiBeautify() +
+antiVM() +
 selfDefend() +
-`var _STRINGS=${JSON.stringify(pool)};\n` +
+buildStringRuntime(pool) +
 runtimeJunk +
 generateJunk() +
 output;

package/core/antidebug.js

@@ -1,15 +1,13 @@
 export function injectAntiDebug(){
-
 return `
 
-(function(){
+;(function(){
 setInterval(function(){
 try{
-(function(){debugger})()
+debugger;
 }catch(e){}
-},2000)
+},3000) 
 })();
 
 `;
-
 }

package/core/antivm.js

@@ -0,0 +1,19 @@
+export function antiVM(){
+return `
+
+;(function(){
+
+var s=(typeof navigator!="undefined"?navigator.userAgent:"node").toLowerCase()
+
+if(
+s.includes("vmware")||
+s.includes("virtualbox")||
+s.includes("qemu")
+){
+console.warn("VM detected"); 
+}
+
+})()
+
+`
+}

package/core/beautifyGuard.js

@@ -1,21 +1,17 @@
 export function antiBeautify(){
-
 return `
 
-(function(){
+;(function(){
 
 const start=Date.now()
-
 debugger
-
 const end=Date.now()
 
-if(end-start>100){
-while(true){}
+if(end-start>1000){
+console.warn("Debug detected")
 }
 
 })();
 
 `;
-
 }

package/core/controlflow.js

@@ -93,24 +93,13 @@ Function(path){
   });
 
   const whileLoop = t.whileStatement(
-    t.booleanLiteral(true),
-    t.blockStatement([
-
-      t.switchStatement(
-        t.identifier("_s"),
-        cases
-      ),
-
-      t.ifStatement(
-        t.binaryExpression(
-          ">=",
-          t.identifier("_s"),
-          t.numericLiteral(body.length)
-        ),
-        t.breakStatement()
-      )
-
-    ])
+  t.binaryExpression("<", t.identifier("_s"), t.numericLiteral(body.length)),
+  t.blockStatement([
+    t.switchStatement(
+      t.identifier("_s"),
+      cases
+    )
+  ])
   );
 
   const newBody = [];

package/core/deadcode.js

@@ -1,7 +1,9 @@
-import traverse from "@babel/traverse";
+import traverseModule from "@babel/traverse";
 import * as t from "@babel/types";
 import { randomInt } from "../utils/random.js";
 
+const traverse = traverseModule.default;
+
 const patterns = [
 
 "var _a=Math.random();if(_a>2){console.log(_a)}",
@@ -17,7 +19,9 @@ const patterns = [
 
 ];
 
-for(let i=0;i<90;i++){
+/* generate nhiều pattern */
+
+for(let i=0;i<20;i++){
 
 patterns.push(`
 var _junk${i}=Math.random()*${randomInt(1,999)};
@@ -34,9 +38,11 @@ return patterns[Math.floor(Math.random()*patterns.length)];
 
 }
 
+/* AST deadcode */
+
 export function injectDeadCode(ast){
 
-traverse.default(ast,{
+traverse(ast,{
 
 BlockStatement(path){
 
@@ -76,14 +82,14 @@ path.node.body.unshift(fake);
 
 }
 
+/* runtime deadcode */
+
 export function generateDeadRuntime(){
 
 let out="";
 
-for(let i=0;i<30;i++){
-
+for(let i=0;i<10;i++){
 out+=randomPattern()+"\n";
-
 }
 
 return out;

package/core/junkcode.js

@@ -1,18 +1,19 @@
-export function generateJunk() {
+export function generateJunk(){
 
-  const junk = [];
+return `
 
-  for (let i = 0; i < 20; i++) {
+var _假=Math.random()
 
-    junk.push(`
-var _junk${i} = Math.random() * ${i};
-if(_junk${i} > 9999){
- console.log(_junk${i});
+function _伪(){
+try{
+return Function("return 1+1")()
+}catch(e){}
 }
-`);
 
-  }
+if(_假>2){
+console.log(_伪())
+}
 
-  return junk.join("\n");
+`
 
 }

package/core/rc4.js

@@ -1,42 +1,33 @@
 export function rc4(key, str){
 
-let s=[]
-let j=0
-let x
-let res=""
+if(!key) throw new Error("RC4 key empty")
 
-for(let i=0;i<256;i++){
-s[i]=i
-}
-
-for(let i=0;i<256;i++){
-
-j=(j+s[i]+key.charCodeAt(i%key.length))%256
+let s=[],j=0,x,res=""
 
-x=s[i]
-s[i]=s[j]
-s[j]=x
+for(let i=0;i<256;i++) s[i]=i
 
+for(let i=0;i<256;i++){
+  j=(j+s[i]+key.charCodeAt(i%key.length))&255
+  x=s[i]
+  s[i]=s[j]
+  s[j]=x
 }
 
 let i=0
 j=0
 
 for(let y=0;y<str.length;y++){
+  i=(i+1)&255
+  j=(j+s[i])&255
 
-i=(i+1)%256
-j=(j+s[i])%256
-
-x=s[i]
-s[i]=s[j]
-s[j]=x
+  x=s[i]
+  s[i]=s[j]
+  s[j]=x
 
-let k=s[(s[i]+s[j])%256]
-
-res+=String.fromCharCode(str.charCodeAt(y)^k)
+  let k=s[(s[i]+s[j])&255]
 
+  res += String.fromCharCode(str.charCodeAt(y) ^ k)
 }
 
 return res
-
 }

package/core/renamer.js

@@ -1,4 +1,5 @@
 import traverseModule from "@babel/traverse";
+import * as t from "@babel/types";
 
 const traverse = traverseModule.default;
 
@@ -15,50 +16,127 @@ const reserved = new Set([
 "setInterval"
 ]);
 
+/* multilingual identifier */
+
+const jp = "あいうえおかきくけこさしすせそたちつてと";
+const kr = "가나다라마바사아자차카타파하";
+const cn = "的一是在不了有和人这中大为上个国我以要他";
+const latin = "abcdefghijklmnopqrstuvwxyz";
+
+const pool = jp + kr + cn + latin;
+
 function randomName(){
-const chars="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
-let name="_";
+let name="_0x";
 for(let i=0;i<6;i++){
-name+=chars[Math.floor(Math.random()*chars.length)];
+name+=pool[Math.floor(Math.random()*pool.length)];
 }
 return name;
 }
 
 export function renameVariables(ast){
 
+const renamed = new Map();
+
 traverse(ast,{
-Program(path){
 
-  const bindings = path.scope.bindings;
+Identifier(path){
+
+// chỉ rename binding identifier
+if(!path.isBindingIdentifier()) return;
+
+const name = path.node.name;
+
+// skip reserved
+if(reserved.has(name)) return;
+
+// skip already obfuscated
+if(name.startsWith("_0x")) return;
 
-  for(const key in bindings){
+// skip short names (tránh phá scope nhỏ)
+if(name.length < 3) return;
 
-    const binding = bindings[key];
+const binding = path.scope.getBinding(name);
+if(!binding) return;
 
-    if(reserved.has(key)) continue;
+// skip params
+if(binding.kind === "param") return;
 
-    // skip imports
-    if(binding.path.isImportSpecifier?.()) continue;
-    if(binding.path.isImportDefaultSpecifier?.()) continue;
-    if(binding.path.isImportNamespaceSpecifier?.()) continue;
+// skip global scope
+if(!binding.scope.parent) return;
 
-    // skip function parameters
-    if(binding.kind === "param") continue;
+// skip mutated variables (tránh break logic)
+if(binding.constantViolations && binding.constantViolations.length > 0){
+    return;
+}
+
+// skip if already renamed
+if(renamed.has(binding)){
+    return;
+}
+
+const newName = randomName();
 
-    // skip destructuring
-    if(binding.path.isObjectPattern?.()) continue;
-    if(binding.path.isArrayPattern?.()) continue;
+try{
+path.scope.rename(name,newName);
+renamed.set(binding,newName);
+}catch{}
 
-    // skip globals
-    if(!binding.scope.parent) continue;
+},
 
-    const newName=randomName();
+FunctionDeclaration(path){
 
-    path.scope.rename(key,newName);
+if(!path.node.id) return;
 
-  }
+const name = path.node.id.name;
 
+if(reserved.has(name)) return;
+if(name.startsWith("_0x")) return;
+
+const binding = path.scope.getBinding(name);
+if(!binding) return;
+
+if(binding.constantViolations && binding.constantViolations.length > 0){
+    return;
 }
+
+if(renamed.has(binding)) return;
+
+const newName = randomName();
+
+try{
+path.scope.rename(name,newName);
+renamed.set(binding,newName);
+}catch{}
+
+},
+
+ClassDeclaration(path){
+
+if(!path.node.id) return;
+
+const name = path.node.id.name;
+
+if(reserved.has(name)) return;
+if(name.startsWith("_0x")) return;
+
+const binding = path.scope.getBinding(name);
+if(!binding) return;
+
+if(binding.constantViolations && binding.constantViolations.length > 0){
+    return;
+}
+
+if(renamed.has(binding)) return;
+
+const newName = randomName();
+
+try{
+path.scope.rename(name,newName);
+renamed.set(binding,newName);
+}catch{}
+
+}
+
 });
 
 }

package/core/selfdefend.js

@@ -1,23 +1,20 @@
 export function selfDefend(){
-
 return `
 
-(function(){
+;(function(){
 
 function guard(){
-
-const src=guard.toString()
-
+try{
+const src = guard.toString()
 if(!src.includes("guard")){
-while(true){}
+console.warn("Tamper detected")
 }
-
+}catch(e){}
 }
 
-setInterval(guard,4000)
+setInterval(guard,5000)
 
 })();
 
 `;
-
 }

package/core/stringArray.js

@@ -8,15 +8,52 @@ export function encodeStrings(ast){
 const pool = [];
 const map = new Map();
 
+function rand(a,b){
+return Math.floor(Math.random()*(b-a))+a;
+}
+
+function buildIndexExpression(index){
+
+const mode = rand(0,3);
+
+if(mode===0){
+
+const key = rand(1,50);
+
+return t.binaryExpression(
+"^",
+t.numericLiteral(index ^ key),
+t.numericLiteral(key)
+);
+
+}
+
+if(mode===1){
+
+const key = rand(1,20);
+
+return t.binaryExpression(
+"-",
+t.numericLiteral(index + key),
+t.numericLiteral(key)
+);
+
+}
+
+return t.numericLiteral(index);
+
+}
+
 function getIndex(value){
 
 if(map.has(value)){
-  return map.get(value);
+return map.get(value);
 }
 
 const index = pool.length;
 
 pool.push(value);
+
 map.set(value,index);
 
 return index;
@@ -24,52 +61,75 @@ return index;
 }
 
 traverse(ast,{
+
 StringLiteral(path){
 
-  const value = path.node.value;
-
-  /* skip unsafe places */
-
-  if(path.parent.type === "Directive") return;
-
-  if(
-    path.parent.type === "CallExpression" &&
-    path.parent.callee.name === "require"
-  ){
-    return;
-  }
-
-  if(path.parent.type === "ImportDeclaration"){
-    return;
-  }
-
-  if(
-    path.parent.type === "ObjectProperty" &&
-    path.parent.key === path.node
-  ){
-    return;
-  }
-
-  if(
-    path.parent.type === "MemberExpression" &&
-    path.parent.property === path.node
-  ){
-    return;
-  }
-
-  if(path.parent.type === "TemplateLiteral"){
-    return;
-  }
-
-  const index = getIndex(value);
-
-  path.replaceWith(
-    t.memberExpression(
-      t.identifier("_STRINGS"),
-      t.numericLiteral(index),
-      true
-    )
-  );
+const value = path.node.value;
+
+if(!value) return;
+
+/* skip directives */
+
+if(path.parent.type === "Directive") return;
+
+if(value === "use strict") return;
+
+/* skip require */
+
+if(
+path.parent.type === "CallExpression" &&
+path.parent.callee &&
+path.parent.callee.name === "require"
+){
+return;
+}
+
+/* skip import */
+
+if(path.parent.type === "ImportDeclaration") return;
+
+/* skip object key */
+
+if(
+path.parent.type === "ObjectProperty" &&
+path.parent.key === path.node
+){
+return;
+}
+
+/* skip member property */
+
+if(
+path.parent.type === "MemberExpression" &&
+path.parent.property === path.node
+){
+return;
+}
+
+/* skip template */
+
+if(path.parent.type === "TemplateLiteral") return;
+
+/* skip inside decrypt runtime */
+
+if(path.findParent(p => 
+p.isCallExpression() &&
+p.node.callee &&
+p.node.callee.name === "_解密"
+)){
+return;
+}
+
+const index = getIndex(value);
+
+const expr = buildIndexExpression(index);
+
+path.replaceWith(
+t.callExpression(
+t.identifier("_解密"),
+[expr]
+)
+);
 
 }
 

package/core/stringRuntime.js

@@ -0,0 +1,56 @@
+import { rc4 } from "./rc4.js"
+
+export function buildStringRuntime(pool){
+
+const key = Math.random().toString(36).slice(2)
+
+const encrypted = pool.map(s=>{
+  const enc = rc4(key, s)
+  return Buffer.from(enc, "binary").toString("base64")
+})
+
+return `
+
+var _池 = ${JSON.stringify(encrypted)};
+var _缓存 = {};
+
+function _解密(i){
+
+if(_缓存[i]) return _缓存[i];
+
+var b64 = _池[i];
+
+var data = typeof atob === "function"
+? atob(b64)
+: Buffer.from(b64,"base64").toString("binary");
+
+var s=[],j=0,x,res="";
+
+for(var k=0;k<256;k++) s[k]=k;
+
+for(k=0;k<256;k++){
+j=(j+s[k]+"${key}".charCodeAt(k%"${key}".length))%256;
+x=s[k];s[k]=s[j];s[j]=x;
+}
+
+k=0;j=0;
+
+for(var y=0;y<data.length;y++){
+
+k=(k+1)%256;
+j=(j+s[k])%256;
+
+x=s[k];s[k]=s[j];s[j]=x;
+
+var t=s[(s[k]+s[j])%256];
+
+res+=String.fromCharCode(data.charCodeAt(y)^t);
+
+}
+
+_缓存[i]=res;
+return res;
+
+}
+`
+}

package/core/unicode.js

@@ -17,11 +17,7 @@ export function unicodeEscape(ast){
     StringLiteral(path){
 
       const val = path.node.value;
-
-      path.node.extra = {
-        raw: `"${toUnicode(val)}"`,
-        rawValue: val
-      };
+      if(val.includes("_解密")) return;
 
     }
   });

package/core/unicodeIdentifier.js

@@ -0,0 +1,67 @@
+import traverseModule from "@babel/traverse";
+
+const traverse = traverseModule.default;
+
+const reserved = new Set([
+"require",
+"module",
+"exports",
+"console",
+"process",
+"Buffer"
+]);
+
+const jp="あいうえおかきくけこ";
+const kr="가나다라마바사";
+const cn="的一是在不了有和";
+
+const pool = jp + kr + cn;
+
+function randChar(){
+return pool[Math.floor(Math.random()*pool.length)];
+}
+
+function randomName(){
+
+let name="_0x";
+
+for(let i=0;i<4;i++){
+name+=randChar();
+}
+
+return name;
+
+}
+
+export function unicodeIdentifiers(ast){
+
+traverse(ast,{
+
+Identifier(path){
+
+    if(!path.isBindingIdentifier()) return;
+
+    const name = path.node.name;
+
+    if(name.length < 3) return;
+    if(name.startsWith("_0x")) return;
+    if(reserved.has(name)) return;
+
+    const binding = path.scope.getBinding(name);
+
+    if(!binding) return;
+    if(binding.identifier !== path.node) return;
+
+    if(binding.constantViolations.length > 0) return;
+
+    const newName = randomName();
+
+    try{
+        path.scope.rename(name,newName);
+    }catch{}
+
+}
+
+});
+
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jsarmor",
-  "version": "1.0.7",
+  "version": "2.0.0",
   "description": "Advanced JavaScript Obfuscator",
   "type": "module",
   "main": "cli/index.js",