stegdoc 5.4.0 → 5.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stegdoc",
-  "version": "5.4.0",
+  "version": "5.6.0",
   "description": "Hide files inside Office documents (XLSX/DOCX) with AES-256 encryption and steganography",
   "main": "src/index.js",
   "bin": {

package/src/commands/encode.js

@@ -30,12 +30,14 @@ function zipFolder(folderPath) {
  */
 async function detectFileType(filePath) {
   try {
-    const { fileTypeFromBuffer } = await import('file-type');
+    const fileType = await import('file-type');
+    const fromBuffer = fileType.fileTypeFromBuffer || fileType.default?.fromBuffer;
+    if (!fromBuffer) return null;
     const fd = await fs.promises.open(filePath, 'r');
     const buf = Buffer.alloc(4100);
     await fd.read(buf, 0, 4100, 0);
     await fd.close();
-    return await fileTypeFromBuffer(buf);
+    return await fromBuffer(buf);
   } catch {
     return null;
   }

package/src/index.js

@@ -11,7 +11,7 @@ const verifyCommand = require('./commands/verify');
 program
   .name('stegdoc')
   .description('CLI tool to encode files into Office documents with AES-256 encryption')
-  .version('5.4.0');
+  .version('5.6.0');
 
 // Encode command
 program

package/src/lib/log-generator.js

@@ -46,23 +46,22 @@ const IP_POOL_RARE = [
 // ─── User-Agent Pool ────────────────────────────────────────────────────────
 
 const USER_AGENTS = [
-  'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36',
-  'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36',
-  'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36',
-  'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0',
-  'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15',
-  'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36',
-  'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/122.0.0.0 Safari/537.36',
-  'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:123.0) Gecko/20100101 Firefox/123.0',
-  'Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1',
-  'Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36',
-  // Bots (occasional)
-  'Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)',
-  'Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)',
+  'node-fetch/3.3.2',
+  'axios/1.7.2',
+  'python-httpx/0.27.0',
+  'Go-http-client/2.0',
+  'curl/8.5.0',
+  'python-requests/2.31.0',
+  'okhttp/4.12.0',
+  'got/14.2.1',
+  'undici/6.13.0',
+  'httpie/3.2.2',
+  'wget/1.21.4',
+  'PostmanRuntime/7.36.3',
 ];
 
-// Weights for UA selection (frequent browsers appear more)
-const UA_WEIGHTS = [20, 15, 12, 10, 8, 7, 6, 5, 4, 3, 1, 1];
+// Weights for UA selection (common API clients appear more)
+const UA_WEIGHTS = [20, 18, 15, 12, 10, 8, 6, 4, 3, 2, 1, 1];
 
 // ─── URL Path Templates (for data lines) ───────────────────────────────────
 
@@ -620,8 +619,8 @@ function encodePayloadToLogLines(payloadBuffer, metadataJson, encryptionMeta) {
     dataRows.push(generateDataLogLine(chunk));
   }
 
-  // Generate filler lines for realism
-  const fillerCount = Math.max(30, Math.floor(dataLineCount * 0.2));
+  // Generate filler lines for realism (3% — enough for variation, minimal overhead)
+  const fillerCount = Math.max(10, Math.floor(dataLineCount * 0.03));
   const fillerRows = [];
   for (let i = 0; i < fillerCount; i++) {
     fillerRows.push(generateFillerLogLine());