JavaScriptObfuscator.ts 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325
  1. import { inject, injectable, } from 'inversify';
  2. import { ServiceIdentifiers } from './container/ServiceIdentifiers';
  3. import * as esprima from 'esprima';
  4. import * as escodegen from 'escodegen-wallaby';
  5. import * as ESTree from 'estree';
  6. import * as packageJson from 'pjson';
  7. import { ICustomNodeGroup } from './interfaces/custom-nodes/ICustomNodeGroup';
  8. import { IGeneratorOutput } from './interfaces/IGeneratorOutput';
  9. import { IJavaScriptObfuscator } from './interfaces/IJavaScriptObfsucator';
  10. import { ILogger } from './interfaces/logger/ILogger';
  11. import { IObfuscationEventEmitter } from './interfaces/event-emitters/IObfuscationEventEmitter';
  12. import { IObfuscationResult } from './interfaces/IObfuscationResult';
  13. import { IOptions } from './interfaces/options/IOptions';
  14. import { IRandomGenerator } from './interfaces/utils/IRandomGenerator';
  15. import { ISourceMapCorrector } from './interfaces/source-map/ISourceMapCorrector';
  16. import { IStackTraceAnalyzer } from './interfaces/analyzers/stack-trace-analyzer/IStackTraceAnalyzer';
  17. import { IStackTraceData } from './interfaces/analyzers/stack-trace-analyzer/IStackTraceData';
  18. import { IStorage } from './interfaces/storages/IStorage';
  19. import { ITransformersRunner } from './interfaces/node-transformers/ITransformersRunner';
  20. import { LoggingMessage } from './enums/logger/LoggingMessage';
  21. import { NodeTransformer } from './enums/node-transformers/NodeTransformer';
  22. import { ObfuscationEvent } from './enums/event-emitters/ObfuscationEvent';
  23. import { NodeGuards } from './node/NodeGuards';
  24. @injectable()
  25. export class JavaScriptObfuscator implements IJavaScriptObfuscator {
  26. /**
  27. * @type {GenerateOptions}
  28. */
  29. private static readonly escodegenParams: escodegen.GenerateOptions = {
  30. comment: true,
  31. verbatim: 'x-verbatim-property',
  32. sourceMapWithCode: true
  33. };
  34. /**
  35. * @type {NodeTransformer[]}
  36. */
  37. private static readonly controlFlowTransformersList: NodeTransformer[] = [
  38. NodeTransformer.BlockStatementControlFlowTransformer,
  39. NodeTransformer.FunctionControlFlowTransformer
  40. ];
  41. /**
  42. * @type {NodeTransformer[]}
  43. */
  44. private static readonly postObfuscationConvertingTransformersList: NodeTransformer[] = [
  45. NodeTransformer.AstToEvalCallExpressionTransformer
  46. ];
  47. /**
  48. * @type {NodeTransformer[]}
  49. */
  50. private static readonly preObfuscationConvertingTransformersList: NodeTransformer[] = [
  51. NodeTransformer.EvalCallExpressionToAstTransformer,
  52. NodeTransformer.MemberExpressionTransformer,
  53. NodeTransformer.MethodDefinitionTransformer,
  54. NodeTransformer.ObjectExpressionKeysTransformer,
  55. NodeTransformer.TemplateLiteralTransformer
  56. ];
  57. /**
  58. * @type {NodeTransformer[]}
  59. */
  60. private static readonly deadCodeInjectionTransformersList: NodeTransformer[] = [
  61. NodeTransformer.DeadCodeInjectionTransformer
  62. ];
  63. /**
  64. * @type {NodeTransformer[]}
  65. */
  66. private static readonly obfuscatingTransformersList: NodeTransformer[] = [
  67. NodeTransformer.CatchClauseTransformer,
  68. NodeTransformer.ClassDeclarationTransformer,
  69. NodeTransformer.FunctionDeclarationTransformer,
  70. NodeTransformer.FunctionTransformer,
  71. NodeTransformer.LabeledStatementTransformer,
  72. NodeTransformer.LiteralTransformer,
  73. NodeTransformer.ObjectExpressionTransformer,
  74. NodeTransformer.VariableDeclarationTransformer
  75. ];
  76. /**
  77. * @type {NodeTransformer[]}
  78. */
  79. private static readonly preparingTransformersList: NodeTransformer[] = [
  80. NodeTransformer.CommentsTransformer,
  81. NodeTransformer.ObfuscatingGuardsTransformer,
  82. NodeTransformer.ParentificationTransformer
  83. ];
  84. /**
  85. * @type {IStorage<ICustomNodeGroup>}
  86. */
  87. private readonly customNodeGroupStorage: IStorage<ICustomNodeGroup>;
  88. /**
  89. * @type {ILogger}
  90. */
  91. private readonly logger: ILogger;
  92. /**
  93. * @type {IObfuscationEventEmitter}
  94. */
  95. private readonly obfuscationEventEmitter: IObfuscationEventEmitter;
  96. /**
  97. * @type {IOptions}
  98. */
  99. private readonly options: IOptions;
  100. /**
  101. * @type {IRandomGenerator}
  102. */
  103. private readonly randomGenerator: IRandomGenerator;
  104. /**
  105. * @type {ISourceMapCorrector}
  106. */
  107. private readonly sourceMapCorrector: ISourceMapCorrector;
  108. /**
  109. * @type {IStackTraceAnalyzer}
  110. */
  111. private readonly stackTraceAnalyzer: IStackTraceAnalyzer;
  112. /**
  113. * @type {ITransformersRunner}
  114. */
  115. private readonly transformersRunner: ITransformersRunner;
  116. /**
  117. * @param {IStackTraceAnalyzer} stackTraceAnalyzer
  118. * @param {IObfuscationEventEmitter} obfuscationEventEmitter
  119. * @param {IStorage<ICustomNodeGroup>} customNodeGroupStorage
  120. * @param {ITransformersRunner} transformersRunner
  121. * @param {ISourceMapCorrector} sourceMapCorrector
  122. * @param {IRandomGenerator} randomGenerator
  123. * @param {ILogger} logger
  124. * @param {IOptions} options
  125. */
  126. constructor (
  127. @inject(ServiceIdentifiers.IStackTraceAnalyzer) stackTraceAnalyzer: IStackTraceAnalyzer,
  128. @inject(ServiceIdentifiers.IObfuscationEventEmitter) obfuscationEventEmitter: IObfuscationEventEmitter,
  129. @inject(ServiceIdentifiers.TCustomNodeGroupStorage) customNodeGroupStorage: IStorage<ICustomNodeGroup>,
  130. @inject(ServiceIdentifiers.ITransformersRunner) transformersRunner: ITransformersRunner,
  131. @inject(ServiceIdentifiers.ISourceMapCorrector) sourceMapCorrector: ISourceMapCorrector,
  132. @inject(ServiceIdentifiers.IRandomGenerator) randomGenerator: IRandomGenerator,
  133. @inject(ServiceIdentifiers.ILogger) logger: ILogger,
  134. @inject(ServiceIdentifiers.IOptions) options: IOptions
  135. ) {
  136. this.stackTraceAnalyzer = stackTraceAnalyzer;
  137. this.obfuscationEventEmitter = obfuscationEventEmitter;
  138. this.customNodeGroupStorage = customNodeGroupStorage;
  139. this.transformersRunner = transformersRunner;
  140. this.sourceMapCorrector = sourceMapCorrector;
  141. this.randomGenerator = randomGenerator;
  142. this.logger = logger;
  143. this.options = options;
  144. }
  145. /**
  146. * @param {string} sourceCode
  147. * @returns {IObfuscationResult}
  148. */
  149. public obfuscate (sourceCode: string): IObfuscationResult {
  150. const timeStart: number = Date.now();
  151. this.logger.info(LoggingMessage.Version, packageJson.version);
  152. this.logger.info(LoggingMessage.ObfuscationStarted);
  153. this.logger.info(LoggingMessage.RandomGeneratorSeed, this.randomGenerator.getSeed());
  154. // parse AST tree
  155. const astTree: ESTree.Program = this.parseCode(sourceCode);
  156. // obfuscate AST tree
  157. const obfuscatedAstTree: ESTree.Program = this.transformAstTree(astTree);
  158. // generate code
  159. const generatorOutput: IGeneratorOutput = this.generateCode(sourceCode, obfuscatedAstTree);
  160. const obfuscationTime: number = (Date.now() - timeStart) / 1000;
  161. this.logger.success(LoggingMessage.ObfuscationCompleted, obfuscationTime);
  162. return this.getObfuscationResult(generatorOutput);
  163. }
  164. /**
  165. * @param {string} sourceCode
  166. * @returns {Program}
  167. */
  168. private parseCode (sourceCode: string): ESTree.Program {
  169. return esprima.parseScript(sourceCode, {
  170. attachComment: true,
  171. loc: this.options.sourceMap
  172. });
  173. }
  174. /**
  175. * @param {Program} astTree
  176. * @returns {Program}
  177. */
  178. private transformAstTree (astTree: ESTree.Program): ESTree.Program {
  179. const isEmptyAstTree: boolean = NodeGuards.isProgramNode(astTree)
  180. && !astTree.body.length
  181. && !astTree.leadingComments;
  182. if (isEmptyAstTree) {
  183. this.logger.warn(LoggingMessage.EmptySourceCode);
  184. return astTree;
  185. }
  186. // first pass: AST-tree preparation
  187. this.logger.info(LoggingMessage.StagePreparingASTTree);
  188. astTree = this.transformersRunner.transform(
  189. astTree,
  190. JavaScriptObfuscator.preparingTransformersList
  191. );
  192. // second pass: AST-tree analyzing
  193. this.logger.info(LoggingMessage.StageAnalyzingASTTree);
  194. const stackTraceData: IStackTraceData[] = this.stackTraceAnalyzer.analyze(astTree);
  195. // initialize custom node groups and configure custom nodes
  196. this.customNodeGroupStorage
  197. .getStorage()
  198. .forEach((customNodeGroup: ICustomNodeGroup) => {
  199. customNodeGroup.initialize();
  200. this.obfuscationEventEmitter.once(
  201. customNodeGroup.getAppendEvent(),
  202. customNodeGroup.appendCustomNodes.bind(customNodeGroup)
  203. );
  204. });
  205. this.obfuscationEventEmitter.emit(ObfuscationEvent.BeforeObfuscation, astTree, stackTraceData);
  206. // third pass: dead code injection transformer
  207. if (this.options.deadCodeInjection) {
  208. this.logger.info(LoggingMessage.StageDeadCodeInjection);
  209. astTree = this.transformersRunner.transform(
  210. astTree,
  211. JavaScriptObfuscator.deadCodeInjectionTransformersList
  212. );
  213. }
  214. // fourth pass: control flow flattening transformers
  215. if (this.options.controlFlowFlattening) {
  216. this.logger.info(LoggingMessage.StageControlFlowFlattening);
  217. astTree = this.transformersRunner.transform(
  218. astTree,
  219. JavaScriptObfuscator.controlFlowTransformersList
  220. );
  221. }
  222. // fifth pass: pre-obfuscation converting transformers
  223. this.logger.info(LoggingMessage.StagePreObfuscation);
  224. astTree = this.transformersRunner.transform(
  225. astTree,
  226. JavaScriptObfuscator.preObfuscationConvertingTransformersList
  227. );
  228. // sixth pass: obfuscating transformers
  229. this.logger.info(LoggingMessage.StageObfuscation);
  230. astTree = this.transformersRunner.transform(
  231. astTree,
  232. JavaScriptObfuscator.obfuscatingTransformersList
  233. );
  234. // seventh pass: post-obfuscation converting transformers
  235. this.logger.info(LoggingMessage.StagePostObfuscation);
  236. astTree = this.transformersRunner.transform(
  237. astTree,
  238. JavaScriptObfuscator.postObfuscationConvertingTransformersList
  239. );
  240. this.obfuscationEventEmitter.emit(ObfuscationEvent.AfterObfuscation, astTree, stackTraceData);
  241. return astTree;
  242. }
  243. /**
  244. * @param {string} sourceCode
  245. * @param {Program} astTree
  246. * @returns {IGeneratorOutput}
  247. */
  248. private generateCode (sourceCode: string, astTree: ESTree.Program): IGeneratorOutput {
  249. const escodegenParams: escodegen.GenerateOptions = {
  250. ...JavaScriptObfuscator.escodegenParams
  251. };
  252. if (this.options.sourceMap) {
  253. escodegenParams.sourceMap = 'sourceMap';
  254. escodegenParams.sourceContent = sourceCode;
  255. }
  256. const generatorOutput: IGeneratorOutput = escodegen.generate(astTree, {
  257. ...escodegenParams,
  258. format: {
  259. compact: this.options.compact
  260. }
  261. });
  262. generatorOutput.map = generatorOutput.map ? generatorOutput.map.toString() : '';
  263. return generatorOutput;
  264. }
  265. /**
  266. * @param {IGeneratorOutput} generatorOutput
  267. * @returns {IObfuscationResult}
  268. */
  269. private getObfuscationResult (generatorOutput: IGeneratorOutput): IObfuscationResult {
  270. return this.sourceMapCorrector.correct(
  271. generatorOutput.code,
  272. generatorOutput.map
  273. );
  274. }
  275. }