UNPKG

js-confuser

Version:

JavaScript Obfuscation Tool.

462 lines (451 loc) 25.8 kB
"use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports["default"] = exports.DEFAULT_OPTIONS = void 0; var _assert = require("assert"); var _generator = _interopRequireDefault(require("@babel/generator")); var _traverse = _interopRequireDefault(require("@babel/traverse")); var _parser = require("@babel/parser"); var _validateOptions = require("./validateOptions"); var _NameGen = require("./utils/NameGen"); var _order = require("./order"); var _plugin = require("./transforms/plugin"); var _objectUtils = require("./utils/object-utils"); var _preparation = _interopRequireDefault(require("./transforms/preparation")); var _renameVariables = _interopRequireDefault(require("./transforms/identifier/renameVariables")); var _variableMasking = _interopRequireDefault(require("./transforms/variableMasking")); var _dispatcher = _interopRequireDefault(require("./transforms/dispatcher")); var _duplicateLiteralsRemoval = _interopRequireDefault(require("./transforms/extraction/duplicateLiteralsRemoval")); var _objectExtraction = _interopRequireDefault(require("./transforms/extraction/objectExtraction")); var _globalConcealing = _interopRequireDefault(require("./transforms/identifier/globalConcealing")); var _stringCompression = _interopRequireDefault(require("./transforms/string/stringCompression")); var _deadCode = _interopRequireDefault(require("./transforms/deadCode")); var _stringSplitting = _interopRequireDefault(require("./transforms/string/stringSplitting")); var _shuffle = _interopRequireDefault(require("./transforms/shuffle")); var _astScrambler = _interopRequireDefault(require("./transforms/astScrambler")); var _calculator = _interopRequireDefault(require("./transforms/calculator")); var _movedDeclarations = _interopRequireDefault(require("./transforms/identifier/movedDeclarations")); var _renameLabels = _interopRequireDefault(require("./transforms/renameLabels")); var _rgf = _interopRequireDefault(require("./transforms/rgf")); var _flatten = _interopRequireDefault(require("./transforms/flatten")); var _stringConcealing = _interopRequireDefault(require("./transforms/string/stringConcealing")); var _lock = _interopRequireDefault(require("./transforms/lock/lock")); var _controlFlowFlattening = _interopRequireDefault(require("./transforms/controlFlowFlattening")); var _opaquePredicates = _interopRequireDefault(require("./transforms/opaquePredicates")); var _minify = _interopRequireDefault(require("./transforms/minify")); var _finalizer = _interopRequireDefault(require("./transforms/finalizer")); var _integrity = _interopRequireDefault(require("./transforms/lock/integrity")); var _pack = _interopRequireDefault(require("./transforms/pack")); function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; } function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); } function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); } function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); } function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; } function _createForOfIteratorHelper(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; } function _unsupportedIterableToArray(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray(r, a) : void 0; } } function _arrayLikeToArray(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; } function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); } function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; } function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; } function _classCallCheck(a, n) { if (!(a instanceof n)) throw new TypeError("Cannot call a class as a function"); } function _defineProperties(e, r) { for (var t = 0; t < r.length; t++) { var o = r[t]; o.enumerable = o.enumerable || !1, o.configurable = !0, "value" in o && (o.writable = !0), Object.defineProperty(e, _toPropertyKey(o.key), o); } } function _createClass(e, r, t) { return r && _defineProperties(e.prototype, r), t && _defineProperties(e, t), Object.defineProperty(e, "prototype", { writable: !1 }), e; } function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; } function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; } function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); } // Transforms var DEFAULT_OPTIONS = exports.DEFAULT_OPTIONS = { target: "node", compact: true }; var Obfuscator = exports["default"] = /*#__PURE__*/function () { function Obfuscator(userOptions, parentObfuscator) { var _this = this, _this$options$lock; _classCallCheck(this, Obfuscator); _defineProperty(this, "plugins", []); _defineProperty(this, "totalPossibleTransforms", 0); _defineProperty(this, "globalState", { lock: { integrity: { sensitivityRegex: / |\n|;|,|\{|\}|\(|\)|\.|\[|\]/g }, createCountermeasuresCode: function createCountermeasuresCode() { throw new Error("Not implemented"); } }, // After RenameVariables completes, this map will contain the renamed variables // Most use cases involve grabbing the Program(global) mappings renamedVariables: new Map(), // Internal functions, should not be renamed/removed internals: { stringCompressionLibraryName: "", nativeFunctionName: "", integrityHashName: "", invokeCountermeasuresFnName: "" } }); _defineProperty(this, "index", 0); _defineProperty(this, "probabilityMapCounter", new WeakMap()); this.parentObfuscator = parentObfuscator; (0, _validateOptions.validateOptions)(userOptions); this.options = (0, _validateOptions.applyDefaultsToOptions)(_objectSpread({}, userOptions)); this.nameGen = new _NameGen.NameGen(this.options.identifierGenerator); var shouldAddLockTransform = this.options.lock && (Object.keys(this.options.lock).filter(function (key) { return key !== "customLocks" && _this.isProbabilityMapProbable(_this.options.lock[key]); }).length > 0 || this.options.lock.customLocks.length > 0); var allPlugins = []; var push = function push(probabilityMap) { for (var _len = arguments.length, pluginFns = new Array(_len > 1 ? _len - 1 : 0), _key = 1; _key < _len; _key++) { pluginFns[_key - 1] = arguments[_key]; } _this.totalPossibleTransforms += pluginFns.length; if (!_this.isProbabilityMapProbable(probabilityMap)) return; allPlugins.push.apply(allPlugins, pluginFns); }; push(true, _preparation["default"]); push(this.options.objectExtraction, _objectExtraction["default"]); push(this.options.flatten, _flatten["default"]); push(shouldAddLockTransform, _lock["default"]); push(this.options.rgf, _rgf["default"]); push(this.options.dispatcher, _dispatcher["default"]); push(this.options.deadCode, _deadCode["default"]); push(this.options.controlFlowFlattening, _controlFlowFlattening["default"]); push(this.options.calculator, _calculator["default"]); push(this.options.globalConcealing, _globalConcealing["default"]); push(this.options.opaquePredicates, _opaquePredicates["default"]); push(this.options.stringSplitting, _stringSplitting["default"]); push(this.options.stringConcealing, _stringConcealing["default"]); // String Compression is only applied to the main obfuscator // Any RGF functions will not have string compression due to the size of the decompression function push(!parentObfuscator && this.options.stringCompression, _stringCompression["default"]); push(this.options.variableMasking, _variableMasking["default"]); push(this.options.duplicateLiteralsRemoval, _duplicateLiteralsRemoval["default"]); push(this.options.shuffle, _shuffle["default"]); push(this.options.movedDeclarations, _movedDeclarations["default"]); push(this.options.renameLabels, _renameLabels["default"]); push(this.options.minify, _minify["default"]); push(this.options.astScrambler, _astScrambler["default"]); push(this.options.renameVariables, _renameVariables["default"]); push(true, _finalizer["default"]); push(this.options.pack, _pack["default"]); push((_this$options$lock = this.options.lock) === null || _this$options$lock === void 0 ? void 0 : _this$options$lock.integrity, _integrity["default"]); allPlugins.map(function (pluginFunction) { var pluginInstance; var plugin = pluginFunction({ Plugin: function Plugin(order, mergeObject) { (0, _assert.ok)(typeof order === "number"); var pluginOptions = { order: order, name: _order.Order[order] }; var newPluginInstance = new _plugin.PluginInstance(pluginOptions, _this); if (_typeof(mergeObject) === "object" && mergeObject) { Object.assign(newPluginInstance, mergeObject); } pluginInstance = newPluginInstance; // @ts-ignore return newPluginInstance; } }); (0, _assert.ok)(pluginInstance, "Plugin instance not created: " + pluginFunction.toString()); _this.plugins.push({ plugin: plugin, pluginInstance: pluginInstance }); }); this.plugins = this.plugins.sort(function (a, b) { return a.pluginInstance.order - b.pluginInstance.order; }); if (!parentObfuscator && this.hasPlugin(_order.Order.StringCompression)) { this.globalState.internals.stringCompressionLibraryName = this.nameGen.generate(false); } } return _createClass(Obfuscator, [{ key: "isInternalVariable", value: // Pack Interface for sharing globals across RGF functions function isInternalVariable(name) { return Object.values(this.globalState.internals).includes(name); } }, { key: "shouldTransformNativeFunction", value: function shouldTransformNativeFunction(nameAndPropertyPath) { var _this$options$lock2; if (!((_this$options$lock2 = this.options.lock) !== null && _this$options$lock2 !== void 0 && _this$options$lock2.tamperProtection)) { return false; } // Custom implementation for Tamper Protection if (typeof this.options.lock.tamperProtection === "function") { return this.options.lock.tamperProtection(nameAndPropertyPath.join(".")); } if (this.options.target === "browser" && nameAndPropertyPath.length === 1 && nameAndPropertyPath[0] === "fetch") { return true; } var globalObject = {}; try { globalObject = typeof globalThis !== "undefined" ? globalThis : // @ts-ignore typeof window !== "undefined" ? // @ts-ignore window : typeof global !== "undefined" ? global : // @ts-ignore typeof self !== "undefined" ? // @ts-ignore self : new Function("return this")(); } catch (e) {} var fn = globalObject; var _iterator = _createForOfIteratorHelper(nameAndPropertyPath), _step; try { for (_iterator.s(); !(_step = _iterator.n()).done;) { var _fn; var item = _step.value; fn = (_fn = fn) === null || _fn === void 0 ? void 0 : _fn[item]; if (typeof fn === "undefined") return false; } } catch (err) { _iterator.e(err); } finally { _iterator.f(); } var hasNativeCode = typeof fn === "function" && ("" + fn).includes("[native code]"); return hasNativeCode; } }, { key: "getStringCompressionLibraryName", value: function getStringCompressionLibraryName() { if (this.parentObfuscator) { return this.parentObfuscator.getStringCompressionLibraryName(); } return this.globalState.internals.stringCompressionLibraryName; } }, { key: "getObfuscatedVariableName", value: function getObfuscatedVariableName(originalName, programNode) { var renamedVariables = this.globalState.renamedVariables.get(programNode); return (renamedVariables === null || renamedVariables === void 0 ? void 0 : renamedVariables.get(originalName)) || originalName; } /** * The main Name Generator for `Rename Variables` */ }, { key: "obfuscateAST", value: function obfuscateAST(ast, options) { var finalASTHandler = []; for (var i = 0; i < this.plugins.length; i++) { var _plugin$post; this.index = i; var _this$plugins$i = this.plugins[i], plugin = _this$plugins$i.plugin, pluginInstance = _this$plugins$i.pluginInstance; if (this.options.verbose) { console.log("Applying ".concat(pluginInstance.name, " (").concat(i + 1, "/").concat(this.plugins.length, ")")); } (0, _traverse["default"])(ast, plugin.visitor); (_plugin$post = plugin.post) === null || _plugin$post === void 0 || _plugin$post.call(plugin); if (plugin.finalASTHandler) { finalASTHandler.push(plugin.finalASTHandler); } if (options !== null && options !== void 0 && options.profiler) { var _this$plugins; options === null || options === void 0 || options.profiler({ index: i, currentTransform: pluginInstance.name, nextTransform: (_this$plugins = this.plugins[i + 1]) === null || _this$plugins === void 0 || (_this$plugins = _this$plugins.pluginInstance) === null || _this$plugins === void 0 ? void 0 : _this$plugins.name, totalTransforms: this.plugins.length }); } } for (var _i = 0, _finalASTHandler = finalASTHandler; _i < _finalASTHandler.length; _i++) { var handler = _finalASTHandler[_i]; ast = handler(ast); } return ast; } }, { key: "obfuscate", value: function () { var _obfuscate = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(sourceCode) { var ast, code; return _regenerator().w(function (_context) { while (1) switch (_context.n) { case 0: // Parse the source code into an AST ast = Obfuscator.parseCode(sourceCode); ast = this.obfuscateAST(ast); // Generate the transformed code from the modified AST with comments removed and compacted output code = this.generateCode(ast); return _context.a(2, { code: code }); } }, _callee, this); })); function obfuscate(_x) { return _obfuscate.apply(this, arguments); } return obfuscate; }() }, { key: "getPlugin", value: function getPlugin(order) { return this.plugins.find(function (x) { return x.pluginInstance.order === order; }); } }, { key: "hasPlugin", value: function hasPlugin(order) { return !!this.getPlugin(order); } /** * Calls `Obfuscator.generateCode` with the current instance options */ }, { key: "generateCode", value: function generateCode(ast) { return Obfuscator.generateCode(ast, this.options); } /** * Generates code from an AST using `@babel/generator` */ }, { key: "computeProbabilityMap", value: /** * Evaluates a ProbabilityMap. * @param map The setting object. * @param customFnArgs Args given to user-implemented function, such as a variable name. */ function computeProbabilityMap(map) { for (var _len2 = arguments.length, customImplementationArgs = new Array(_len2 > 1 ? _len2 - 1 : 0), _key2 = 1; _key2 < _len2; _key2++) { customImplementationArgs[_key2 - 1] = arguments[_key2]; } // Check if this probability map uses the {value: ..., limit: ...} format if (_typeof(map) === "object" && map && "value" in map) { // Check for the limit property if ("limit" in map && typeof map.limit === "number" && map.limit >= 0) { // Check if the limit has been reached if (this.probabilityMapCounter.get(map) >= map.limit) { return false; } } var value = this.computeProbabilityMap.apply(this, [map.value].concat(customImplementationArgs)); if (value) { // Increment the counter for this map this.probabilityMapCounter.set(map, this.probabilityMapCounter.get(map) + 1 || 1); } return value; } if (!map) { return false; } if (map === true || map === 1) { return true; } if (typeof map === "number") { return Math.random() < map; } if (typeof map === "function") { return map.apply(void 0, customImplementationArgs); } if (typeof map === "string") { return map; } var asObject = {}; if (Array.isArray(map)) { map.forEach(function (x) { asObject[x.toString()] = 1; }); } else { asObject = map; } var total = Object.values(asObject).reduce(function (a, b) { return a + b; }); var percentages = (0, _objectUtils.createObject)(Object.keys(asObject), Object.values(asObject).map(function (x) { return x / total; })); var ticket = Math.random(); var count = 0; var winner = null; Object.keys(percentages).forEach(function (key) { var x = Number(percentages[key]); if (ticket >= count && ticket < count + x) { winner = key; } count += x; }); return winner; } /** * Determines if a probability map can return a positive result (true, or some string mode). * - Negative probability maps are used to remove transformations from running entirely. * @param map */ }, { key: "isProbabilityMapProbable", value: function isProbabilityMapProbable(map) { (0, _assert.ok)(!Number.isNaN(map), "Numbers cannot be NaN"); if (!map || typeof map === "undefined") { return false; } if (typeof map === "function") { return true; } if (typeof map === "number") { if (map > 1 || map < 0) { throw new Error("Numbers must be between 0 and 1 for 0% - 100%"); } } if (Array.isArray(map)) { (0, _assert.ok)(map.length != 0, "Empty arrays are not allowed for options. Use false instead."); if (map.length == 1) { return !!map[0]; } } if (_typeof(map) === "object") { if (map instanceof Date) return true; if (map instanceof RegExp) return true; if ("value" in map && !map.value) return false; if ("limit" in map && map.limit === 0) return false; var keys = Object.keys(map); (0, _assert.ok)(keys.length != 0, "Empty objects are not allowed for options. Use false instead."); if (keys.length == 1) { return !!map[keys[0]]; } } return true; } }], [{ key: "generateCode", value: function generateCode(ast) { var options = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : DEFAULT_OPTIONS; var compact = !!options.compact; var _generate = (0, _generator["default"])(ast, { comments: false, // Remove comments minified: compact // jsescOption: { // String Encoding using Babel // escapeEverything: true, // }, }), code = _generate.code; return code; } /** * Parses the source code into an AST using `t.parseSync` */ }, { key: "parseCode", value: function parseCode(sourceCode) { // Parse the source code into an AST var ast = (0, _parser.parse)(sourceCode, { sourceType: "unambiguous" }); return ast; } }]); }();