JavaScriptObfuscator.ts 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294
  1. import { inject, injectable, } from 'inversify';
  2. import { ServiceIdentifiers } from './container/ServiceIdentifiers';
  3. import * as esprima from 'esprima';
  4. import * as escodegen from 'escodegen-wallaby';
  5. import * as ESTree from 'estree';
  6. import { ICustomNodeGroup } from './interfaces/custom-nodes/ICustomNodeGroup';
  7. import { IGeneratorOutput } from './interfaces/IGeneratorOutput';
  8. import { IJavaScriptObfuscator } from './interfaces/IJavaScriptObfsucator';
  9. import { ILogger } from './interfaces/logger/ILogger';
  10. import { IObfuscationEventEmitter } from './interfaces/event-emitters/IObfuscationEventEmitter';
  11. import { IObfuscationResult } from './interfaces/IObfuscationResult';
  12. import { IOptions } from './interfaces/options/IOptions';
  13. import { IRandomGenerator } from './interfaces/utils/IRandomGenerator';
  14. import { ISourceMapCorrector } from './interfaces/source-map/ISourceMapCorrector';
  15. import { IStackTraceAnalyzer } from './interfaces/analyzers/stack-trace-analyzer/IStackTraceAnalyzer';
  16. import { IStackTraceData } from './interfaces/analyzers/stack-trace-analyzer/IStackTraceData';
  17. import { IStorage } from './interfaces/storages/IStorage';
  18. import { ITransformersRunner } from './interfaces/node-transformers/ITransformersRunner';
  19. import { LoggingMessage } from './enums/logger/LoggingMessage';
  20. import { NodeTransformer } from './enums/node-transformers/NodeTransformer';
  21. import { ObfuscationEvent } from './enums/event-emitters/ObfuscationEvent';
  22. import { NodeGuards } from './node/NodeGuards';
  23. @injectable()
  24. export class JavaScriptObfuscator implements IJavaScriptObfuscator {
  25. /**
  26. * @type {GenerateOptions}
  27. */
  28. private static readonly escodegenParams: escodegen.GenerateOptions = {
  29. verbatim: 'x-verbatim-property',
  30. sourceMapWithCode: true
  31. };
  32. /**
  33. * @type {NodeTransformer[]}
  34. */
  35. private static readonly controlFlowTransformersList: NodeTransformer[] = [
  36. NodeTransformer.BlockStatementControlFlowTransformer,
  37. NodeTransformer.FunctionControlFlowTransformer
  38. ];
  39. /**
  40. * @type {NodeTransformer[]}
  41. */
  42. private static readonly convertingTransformersList: NodeTransformer[] = [
  43. NodeTransformer.MemberExpressionTransformer,
  44. NodeTransformer.MethodDefinitionTransformer,
  45. NodeTransformer.TemplateLiteralTransformer
  46. ];
  47. /**
  48. * @type {NodeTransformer[]}
  49. */
  50. private static readonly deadCodeInjectionTransformersList: NodeTransformer[] = [
  51. NodeTransformer.DeadCodeInjectionTransformer
  52. ];
  53. /**
  54. * @type {NodeTransformer[]}
  55. */
  56. private static readonly obfuscatingTransformersList: NodeTransformer[] = [
  57. NodeTransformer.CatchClauseTransformer,
  58. NodeTransformer.ClassDeclarationTransformer,
  59. NodeTransformer.FunctionDeclarationTransformer,
  60. NodeTransformer.FunctionTransformer,
  61. NodeTransformer.LabeledStatementTransformer,
  62. NodeTransformer.LiteralTransformer,
  63. NodeTransformer.ObjectExpressionTransformer,
  64. NodeTransformer.VariableDeclarationTransformer
  65. ];
  66. /**
  67. * @type {NodeTransformer[]}
  68. */
  69. private static readonly preparingTransformersList: NodeTransformer[] = [
  70. NodeTransformer.ObfuscatingGuardsTransformer,
  71. NodeTransformer.ParentificationTransformer
  72. ];
  73. /**
  74. * @type {IStorage<ICustomNodeGroup>}
  75. */
  76. private readonly customNodeGroupStorage: IStorage<ICustomNodeGroup>;
  77. /**
  78. * @type {ILogger}
  79. */
  80. private readonly logger: ILogger;
  81. /**
  82. * @type {IObfuscationEventEmitter}
  83. */
  84. private readonly obfuscationEventEmitter: IObfuscationEventEmitter;
  85. /**
  86. * @type {IOptions}
  87. */
  88. private readonly options: IOptions;
  89. /**
  90. * @type {IRandomGenerator}
  91. */
  92. private readonly randomGenerator: IRandomGenerator;
  93. /**
  94. * @type {ISourceMapCorrector}
  95. */
  96. private readonly sourceMapCorrector: ISourceMapCorrector;
  97. /**
  98. * @type {IStackTraceAnalyzer}
  99. */
  100. private readonly stackTraceAnalyzer: IStackTraceAnalyzer;
  101. /**
  102. * @type {ITransformersRunner}
  103. */
  104. private readonly transformersRunner: ITransformersRunner;
  105. /**
  106. * @param {IStackTraceAnalyzer} stackTraceAnalyzer
  107. * @param {IObfuscationEventEmitter} obfuscationEventEmitter
  108. * @param {IStorage<ICustomNodeGroup>} customNodeGroupStorage
  109. * @param {ITransformersRunner} transformersRunner
  110. * @param {ISourceMapCorrector} sourceMapCorrector
  111. * @param {IRandomGenerator} randomGenerator
  112. * @param {ILogger} logger
  113. * @param {IOptions} options
  114. */
  115. constructor (
  116. @inject(ServiceIdentifiers.IStackTraceAnalyzer) stackTraceAnalyzer: IStackTraceAnalyzer,
  117. @inject(ServiceIdentifiers.IObfuscationEventEmitter) obfuscationEventEmitter: IObfuscationEventEmitter,
  118. @inject(ServiceIdentifiers.TCustomNodeGroupStorage) customNodeGroupStorage: IStorage<ICustomNodeGroup>,
  119. @inject(ServiceIdentifiers.ITransformersRunner) transformersRunner: ITransformersRunner,
  120. @inject(ServiceIdentifiers.ISourceMapCorrector) sourceMapCorrector: ISourceMapCorrector,
  121. @inject(ServiceIdentifiers.IRandomGenerator) randomGenerator: IRandomGenerator,
  122. @inject(ServiceIdentifiers.ILogger) logger: ILogger,
  123. @inject(ServiceIdentifiers.IOptions) options: IOptions
  124. ) {
  125. this.stackTraceAnalyzer = stackTraceAnalyzer;
  126. this.obfuscationEventEmitter = obfuscationEventEmitter;
  127. this.customNodeGroupStorage = customNodeGroupStorage;
  128. this.transformersRunner = transformersRunner;
  129. this.sourceMapCorrector = sourceMapCorrector;
  130. this.randomGenerator = randomGenerator;
  131. this.logger = logger;
  132. this.options = options;
  133. }
  134. /**
  135. * @param {string} sourceCode
  136. * @returns {IObfuscationResult}
  137. */
  138. public obfuscate (sourceCode: string): IObfuscationResult {
  139. const timeStart: number = Date.now();
  140. this.logger.info(LoggingMessage.ObfuscationStarted);
  141. this.logger.info(LoggingMessage.RandomGeneratorSeed, this.randomGenerator.getSeed());
  142. // parse AST tree
  143. const astTree: ESTree.Program = this.parseCode(sourceCode);
  144. // obfuscate AST tree
  145. const obfuscatedAstTree: ESTree.Program = this.transformAstTree(astTree);
  146. // generate code
  147. const generatorOutput: IGeneratorOutput = this.generateCode(sourceCode, obfuscatedAstTree);
  148. const obfuscationTime: number = (Date.now() - timeStart) / 1000;
  149. this.logger.success(LoggingMessage.ObfuscationCompleted, obfuscationTime);
  150. return this.getObfuscationResult(generatorOutput);
  151. }
  152. /**
  153. * @param {string} sourceCode
  154. * @returns {Program}
  155. */
  156. private parseCode (sourceCode: string): ESTree.Program {
  157. return esprima.parseScript(sourceCode, {
  158. attachComment: true,
  159. loc: this.options.sourceMap
  160. });
  161. }
  162. /**
  163. * @param {Program} astTree
  164. * @returns {Program}
  165. */
  166. private transformAstTree (astTree: ESTree.Program): ESTree.Program {
  167. if (NodeGuards.isProgramNode(astTree) && !astTree.body.length) {
  168. this.logger.warn(LoggingMessage.EmptySourceCode);
  169. return astTree;
  170. }
  171. // first pass: AST-tree preparation
  172. this.logger.info(LoggingMessage.StagePreparingASTTree);
  173. astTree = this.transformersRunner.transform(
  174. astTree,
  175. JavaScriptObfuscator.preparingTransformersList
  176. );
  177. // second pass: AST-tree analyzing
  178. this.logger.info(LoggingMessage.StageAnalyzingASTTree);
  179. const stackTraceData: IStackTraceData[] = this.stackTraceAnalyzer.analyze(astTree);
  180. // initialize custom node groups and configure custom nodes
  181. this.customNodeGroupStorage
  182. .getStorage()
  183. .forEach((customNodeGroup: ICustomNodeGroup) => {
  184. customNodeGroup.initialize();
  185. this.obfuscationEventEmitter.once(
  186. customNodeGroup.getAppendEvent(),
  187. customNodeGroup.appendCustomNodes.bind(customNodeGroup)
  188. );
  189. });
  190. this.obfuscationEventEmitter.emit(ObfuscationEvent.BeforeObfuscation, astTree, stackTraceData);
  191. // third pass: dead code injection transformer
  192. if (this.options.deadCodeInjection) {
  193. this.logger.info(LoggingMessage.StageDeadCodeInjection);
  194. astTree = this.transformersRunner.transform(
  195. astTree,
  196. JavaScriptObfuscator.deadCodeInjectionTransformersList
  197. );
  198. }
  199. // fourth pass: control flow flattening transformers
  200. if (this.options.controlFlowFlattening) {
  201. this.logger.info(LoggingMessage.StageControlFlowFlattening);
  202. astTree = this.transformersRunner.transform(
  203. astTree,
  204. JavaScriptObfuscator.controlFlowTransformersList
  205. );
  206. }
  207. // fifth pass: converting and obfuscating transformers
  208. this.logger.info(LoggingMessage.StageObfuscation);
  209. astTree = this.transformersRunner.transform(astTree, [
  210. ...JavaScriptObfuscator.convertingTransformersList,
  211. ...JavaScriptObfuscator.obfuscatingTransformersList
  212. ]);
  213. this.obfuscationEventEmitter.emit(ObfuscationEvent.AfterObfuscation, astTree, stackTraceData);
  214. return astTree;
  215. }
  216. /**
  217. * @param {string} sourceCode
  218. * @param {Program} astTree
  219. * @returns {IGeneratorOutput}
  220. */
  221. private generateCode (sourceCode: string, astTree: ESTree.Program): IGeneratorOutput {
  222. const escodegenParams: escodegen.GenerateOptions = {
  223. ...JavaScriptObfuscator.escodegenParams
  224. };
  225. if (this.options.sourceMap) {
  226. escodegenParams.sourceMap = 'sourceMap';
  227. escodegenParams.sourceContent = sourceCode;
  228. }
  229. const generatorOutput: IGeneratorOutput = escodegen.generate(astTree, {
  230. ...escodegenParams,
  231. format: {
  232. compact: this.options.compact
  233. }
  234. });
  235. generatorOutput.map = generatorOutput.map ? generatorOutput.map.toString() : '';
  236. return generatorOutput;
  237. }
  238. /**
  239. * @param {IGeneratorOutput} generatorOutput
  240. * @returns {IObfuscationResult}
  241. */
  242. private getObfuscationResult (generatorOutput: IGeneratorOutput): IObfuscationResult {
  243. return this.sourceMapCorrector.correct(
  244. generatorOutput.code,
  245. generatorOutput.map
  246. );
  247. }
  248. }