叫我小杨同学
335ddee90f
- 回滚/备份：空 bak 改名 .bad 跳过；升级刷新 bak 补上单数 marker 补丁；统一原子写 - 补丁命中：optional 命中不符记软失败；#42 插入型替换加探针防重复插入 - Windows：进程枚举改用 | 分隔 + UTF-8，修复中文路径换包不杀旧进程；换包失败拉起原版 - 安全：asar 解包防越界；红队路径校验 realpath 防空 symlink；更新仅 https；报告回放去换行注入 - 提示词钩子：停用后 rewriteFn 返回原装配文本并清理 assemble guard；缓存签名纳入红队/策略/override - 红队：listEngagements 默认不算统计；listVulns/报告支持 evidenceLimit - 子代理名额占位即时生效并回退；--apply 有失败项退出码 1 - 清理：删除 lib/mnemon-settings.js 及 13 处死代码/未使用 import；移除 test 目录与 test 脚本
840 lines
31 KiB
JavaScript
840 lines
31 KiB
JavaScript
import fs from "node:fs";
|
||
import path from "node:path";
|
||
import { randomUUID } from "node:crypto";
|
||
import dns from "node:dns/promises";
|
||
import { findDshHome } from "./core.js";
|
||
|
||
const SUFFIXES = [
|
||
[".xn--fiqs8s", "CN"],
|
||
[".xn--fiqz9s", "CN"],
|
||
[".xn--j6w193g", "HK"],
|
||
[".xn--mix082f", "MO"],
|
||
[".xn--55qx5d", "CN"],
|
||
[".xn--io0a7i", "CN"],
|
||
[".xn--55qw42g", "CN"],
|
||
[".xn--zfr164b", "CN"],
|
||
[".xn--czru2d", "CN"],
|
||
[".xn--hxt814e", "CN"],
|
||
[".xn--fiq228c5hs", "CN"],
|
||
[".xn--3bst00m", "CN"],
|
||
[".xn--ses554g", "CN"],
|
||
[".中国", "CN"],
|
||
[".中國", "CN"],
|
||
[".公司", "CN"],
|
||
[".网络", "CN"],
|
||
[".網絡", "CN"],
|
||
[".公益", "CN"],
|
||
[".政务", "CN"],
|
||
[".商城", "CN"],
|
||
[".网店", "CN"],
|
||
[".中文网", "CN"],
|
||
[".集团", "CN"],
|
||
[".网址", "CN"],
|
||
[".在线", "CN"],
|
||
[".移动", "CN"],
|
||
[".我爱你", "CN"],
|
||
[".香港", "HK"],
|
||
[".澳门", "MO"],
|
||
[".澳門", "MO"],
|
||
[".com.cn", "CN"],
|
||
[".net.cn", "CN"],
|
||
[".org.cn", "CN"],
|
||
[".gov.cn", "CN"],
|
||
[".edu.cn", "CN"],
|
||
[".ac.cn", "CN"],
|
||
[".mil.cn", "CN"],
|
||
[".ah.cn", "CN"],
|
||
[".bj.cn", "CN"],
|
||
[".cq.cn", "CN"],
|
||
[".fj.cn", "CN"],
|
||
[".gd.cn", "CN"],
|
||
[".gs.cn", "CN"],
|
||
[".gx.cn", "CN"],
|
||
[".gz.cn", "CN"],
|
||
[".ha.cn", "CN"],
|
||
[".hb.cn", "CN"],
|
||
[".he.cn", "CN"],
|
||
[".hi.cn", "CN"],
|
||
[".hl.cn", "CN"],
|
||
[".hn.cn", "CN"],
|
||
[".jl.cn", "CN"],
|
||
[".js.cn", "CN"],
|
||
[".jx.cn", "CN"],
|
||
[".ln.cn", "CN"],
|
||
[".nm.cn", "CN"],
|
||
[".nx.cn", "CN"],
|
||
[".qh.cn", "CN"],
|
||
[".sc.cn", "CN"],
|
||
[".sd.cn", "CN"],
|
||
[".sh.cn", "CN"],
|
||
[".sn.cn", "CN"],
|
||
[".sx.cn", "CN"],
|
||
[".tj.cn", "CN"],
|
||
[".xj.cn", "CN"],
|
||
[".xz.cn", "CN"],
|
||
[".yn.cn", "CN"],
|
||
[".zj.cn", "CN"],
|
||
[".hk.cn", "HK"],
|
||
[".mo.cn", "MO"],
|
||
[".cn", "CN"],
|
||
[".com.hk", "HK"],
|
||
[".edu.hk", "HK"],
|
||
[".gov.hk", "HK"],
|
||
[".idv.hk", "HK"],
|
||
[".net.hk", "HK"],
|
||
[".org.hk", "HK"],
|
||
[".hk", "HK"],
|
||
[".com.mo", "MO"],
|
||
[".edu.mo", "MO"],
|
||
[".gov.mo", "MO"],
|
||
[".net.mo", "MO"],
|
||
[".org.mo", "MO"],
|
||
[".mo", "MO"],
|
||
];
|
||
|
||
const FILE_SUFFIX = new Set([
|
||
"js", "jsx", "ts", "tsx", "mjs", "cjs", "json", "md", "yml", "yaml",
|
||
"css", "html", "map", "log", "txt", "png", "jpg", "jpeg", "gif", "svg",
|
||
"woff", "woff2", "lock", "vue", "py", "go", "rs", "java", "xml", "toml",
|
||
"ini", "bak", "patch", "diff", "sh", "ps1", "cmd", "exe",
|
||
]);
|
||
|
||
// 跨国银行 / 央行 / 国际金融组织 / 主流加密交易所。
|
||
// regionOfSuffix 对 .com/.co.jp/.co.kr 这类通用后缀不触发区域判定,银行表精准补齐。
|
||
// 子域匹配(online.chase.com → chase.com)也命中。保持小写。
|
||
const BANK_HOSTS = new Set([
|
||
"chase.com", "jpmorgan.com", "jpmorganchase.com", "bankofamerica.com",
|
||
"wellsfargo.com", "citibank.com", "citi.com", "usbank.com", "pncbank.com",
|
||
"pnc.com", "tdbank.com", "capitalone.com", "truist.com", "americanexpress.com",
|
||
"amex.com", "discover.com", "ally.com", "schwab.com", "fidelity.com",
|
||
"goldmansachs.com", "morganstanley.com",
|
||
"hsbc.com", "hsbc.co.uk", "barclays.co.uk", "barclays.com", "lloydsbank.com",
|
||
"lloyds.com", "natwest.com", "rbs.co.uk", "santander.co.uk", "nationwide.co.uk",
|
||
"standardchartered.com", "sc.com", "metrobankonline.co.uk", "aib.ie", "boi.com",
|
||
"deutsche-bank.de", "db.com", "commerzbank.de", "sparkasse.de", "dkb.de",
|
||
"ing.de", "n26.com", "targobank.de", "erstebank.at", "raiffeisen.at",
|
||
"bnpparibas.com", "bnpparibas.fr", "credit-agricole.fr", "creditagricole.fr",
|
||
"societegenerale.com", "societegenerale.fr", "labanquepostale.fr", "lcl.fr",
|
||
"ubs.com", "credit-suisse.com", "raiffeisen.ch", "zkb.ch", "pictet.com",
|
||
"juliusbaer.com", "postfinance.ch",
|
||
"ing.com", "abnamro.com", "abnamro.nl", "rabobank.com", "rabobank.nl",
|
||
"kbc.com", "kbc.be", "belfius.be",
|
||
"unicredit.eu", "unicreditgroup.eu", "unicredit.it", "intesasanpaolo.com",
|
||
"intesasanpaolo.it", "mps.it",
|
||
"santander.com", "bbva.com", "bbva.es", "caixabank.es", "bankinter.com",
|
||
"sabadell.com", "novobanco.pt", "millenniumbcp.pt",
|
||
"nordea.com", "seb.se", "swedbank.se", "handelsbanken.se", "danskebank.com",
|
||
"dnb.no", "op.fi",
|
||
"mufg.jp", "bk.mufg.jp", "smbc.co.jp", "mizuhobank.co.jp", "mizuho-fg.co.jp",
|
||
"resona-gr.co.jp", "japanpost.jp", "jp-bank.japanpost.jp", "rakuten-bank.co.jp",
|
||
"sbi-sec.co.jp", "nomura.com",
|
||
"kbstar.com", "shinhan.com", "wooribank.com", "hanabank.com", "ibk.co.kr",
|
||
"nonghyup.com", "kakaobank.com", "tossbank.com",
|
||
"dbs.com", "dbs.com.sg", "posb.com.sg", "uob.com.sg", "uob.com", "ocbc.com",
|
||
"ocbc.com.sg", "maybank2u.com", "maybank.com", "maybank2u.com.my",
|
||
"cimbclicks.com.my", "cimb.com",
|
||
"commbank.com.au", "westpac.com.au", "westpac.co.nz", "anz.com", "anz.com.au",
|
||
"anz.co.nz", "nab.com.au", "bankwest.com.au", "asb.co.nz", "bnz.co.nz",
|
||
"kiwibank.co.nz", "macquarie.com", "macquarie.com.au",
|
||
"rbc.com", "rbcroyalbank.com", "td.com", "tdcanadatrust.com", "scotiabank.com",
|
||
"bmo.com", "cibc.com", "desjardins.com", "nationalbank.ca",
|
||
"sbi.co.in", "onlinesbi.sbi", "hdfcbank.com", "icicibank.com", "axisbank.com",
|
||
"kotak.com", "pnbindia.in", "bankofindia.co.in", "yesbank.in", "idfcfirstbank.com",
|
||
"bca.co.id", "mandiri.co.id", "bri.co.id", "bni.co.id", "bangkokbank.com",
|
||
"scb.co.th", "ktb.co.th", "kasikornbank.com", "vietcombank.com.vn", "bidv.com.vn",
|
||
"vietinbank.vn", "agribank.com.vn", "metrobank.com.ph", "bpi.com.ph", "bdo.com.ph",
|
||
"enbd.com", "rakbank.ae", "adcb.com", "dubaiislamic.ae", "mashreqbank.com",
|
||
"adib.ae", "alrajhibank.com.sa", "snb.com", "samba.com", "qnb.com",
|
||
"leumi.co.il", "bankhapoalim.co.il", "mizrahi-tefahot.co.il", "discountbank.co.il",
|
||
"sberbank.ru", "vtb.com", "vtb.ru", "alfabank.ru", "tinkoff.ru",
|
||
"gazprombank.ru", "rshb.ru", "otkritie.ru",
|
||
"itau.com.br", "bradesco.com.br", "santander.com.br", "bb.com.br",
|
||
"caixa.gov.br", "nubank.com.br", "banorte.com", "banamex.com", "bancomer.com",
|
||
"santander.com.mx", "scotiabank.com.mx", "hsbc.com.mx", "bancochile.cl",
|
||
"bci.cl", "bancolombia.com", "davivienda.com", "bbvacolombia.com",
|
||
"standardbank.co.za", "absa.co.za", "fnb.co.za", "nedbank.co.za",
|
||
"capitecbank.co.za", "ecobank.com", "gtbank.com", "firstbanknigeria.com",
|
||
"accessbankplc.com", "zenithbank.com",
|
||
// 大陆:.cn 已被 SUFFIXES 覆盖区域,这里登记非 .cn 后缀和核心主域方便 bank kind 命中。
|
||
"icbc.com.cn", "icbc-ltd.com", "abchina.com", "boc.cn", "boc-info.com", "ccb.com",
|
||
"bankcomm.com", "pingan.com", "cmbchina.com", "spdb.com.cn", "cmbc.com.cn",
|
||
"cib.com.cn", "cebbank.com", "hxb.com.cn", "bosc.cn", "psbc.com",
|
||
"hsbc.com.hk", "hangseng.com", "hangseng.com.hk", "bochk.com",
|
||
"cmbwinglungbank.com", "scb.com.hk", "bea.com.hk", "dahsing.com", "icbcasia.com",
|
||
"chbank.com.hk", "dbs.com.hk", "bnu.com.mo", "icbc.com.mo",
|
||
"ctbcbank.com", "esunbank.com.tw", "cathaybk.com.tw", "taishinbank.com.tw",
|
||
"fubon.com", "megabank.com.tw", "landbank.com.tw", "firstbank.com.tw",
|
||
"federalreserve.gov", "frbservices.org", "ecb.europa.eu", "bankofengland.co.uk",
|
||
"boj.or.jp", "boc.gov.cn", "pbc.gov.cn", "snb.ch", "rba.gov.au", "rbnz.govt.nz",
|
||
"worldbank.org", "imf.org", "bis.org", "adb.org", "afdb.org", "iadb.org",
|
||
"swift.com", "visa.com", "mastercard.com", "unionpayintl.com", "unionpay.com",
|
||
"binance.com", "coinbase.com", "kraken.com", "bitstamp.net", "bitfinex.com",
|
||
"bybit.com", "okx.com", "huobi.com", "kucoin.com", "gate.io", "bitget.com",
|
||
"crypto.com", "gemini.com", "upbit.com", "bithumb.com",
|
||
]);
|
||
|
||
function bankHit(name) {
|
||
if (!name || typeof name !== "string") return false;
|
||
if (BANK_HOSTS.has(name)) return true;
|
||
let dot = name.indexOf(".");
|
||
while (dot !== -1) {
|
||
if (BANK_HOSTS.has(name.slice(dot + 1))) return true;
|
||
dot = name.indexOf(".", dot + 1);
|
||
}
|
||
return false;
|
||
}
|
||
|
||
const LOOKUP_MS = 2000;
|
||
const LOOKUP_TTL_MS = 5000;
|
||
const lookupCache = new Map();
|
||
|
||
function isLocalLabV4(value) {
|
||
const a = value >>> 24;
|
||
const b = (value >>> 16) & 255;
|
||
if (a === 10 || a === 127) return true;
|
||
if (a === 172 && b >= 16 && b <= 31) return true;
|
||
if (a === 192 && b === 168) return true;
|
||
return false;
|
||
}
|
||
|
||
function isLocalLabAddress(addr) {
|
||
const name = hostOf(addr);
|
||
if (!name) return false;
|
||
if (name.includes(":")) {
|
||
const value = parseIpv6(name);
|
||
if (value == null) return false;
|
||
if ((value >> 32n) === 0xffffn) return isLocalLabV4(Number(value & 0xffffffffn) >>> 0);
|
||
if (value === 0n || value === 1n) return true;
|
||
if ((value >> 118n) === 0x3fan) return true;
|
||
if ((value >> 121n) === 0x7en) return true;
|
||
return false;
|
||
}
|
||
const value = ipv4ToInt(name);
|
||
return value != null && isLocalLabV4(value);
|
||
}
|
||
|
||
async function lookupIps(name) {
|
||
const key = String(name || "").toLowerCase();
|
||
const cached = lookupCache.get(key);
|
||
if (cached && cached.at > Date.now() - LOOKUP_TTL_MS) return cached.ips;
|
||
let ips = [];
|
||
try {
|
||
const rows = await Promise.race([
|
||
dns.lookup(key, { all: true, verbatim: true }),
|
||
new Promise((_, reject) => {
|
||
const timer = setTimeout(() => reject(new Error("lookup-timeout")), LOOKUP_MS);
|
||
if (typeof timer.unref === "function") timer.unref();
|
||
}),
|
||
]);
|
||
ips = [...new Set((Array.isArray(rows) ? rows : [rows]).map((row) => row && row.address).filter(Boolean))];
|
||
} catch {
|
||
ips = [];
|
||
}
|
||
lookupCache.set(key, { at: Date.now(), ips });
|
||
if (lookupCache.size > 256) lookupCache.delete(lookupCache.keys().next().value);
|
||
return ips;
|
||
}
|
||
|
||
const DENIAL = "不行，这是严令禁止的";
|
||
|
||
// 渗透(?!测试)：「渗透测试 / IP 与渗透测试」不是攻击任务（#73）。
|
||
// exploit(?!-)：exploit-db.com 等资料站不算 exploit 关键词。
|
||
// (?<!防御)攻击：「防御攻击手法」不误触。
|
||
const ATTACK =
|
||
/渗透测试|红队|打点|拿站|渗透(?!测试)|打穿|打下|打站|入侵|拿壳|拿权限|爆破|提权|webshell|getshell|端口扫描|pentest|\bexploit\b(?![-a-z0-9])|\bbreach\b|\bpwn\b|(?<!防御)攻击(?!面)|(?<!surface\s)\battack\b(?!\s+surface)/i;
|
||
|
||
// 外挂硬拦。单字「辅助 / 透视」太容易误伤辅助函数、透视投影，必须带游戏或挂本身。
|
||
const CHEAT_STRONG =
|
||
/外挂|游戏辅助|自瞄|自动瞄准|无后座|无限弹药|人物透视|物品透视|透视挂|开透视|加速挂|飞天挂|瞬移挂|锁头|压枪挂|改血|过反作弊|注入游戏|aimbot|wallhack|triggerbot|spinbot|silent\s*aim|game\s*cheat|anti-?cheat|cheat\s*engine/i;
|
||
const CHEAT_GAME =
|
||
/游戏|网游|端游|手游|\bgame\b|steam|csgo|\bcs2\b|pubg|valorant|和平精英|王者荣耀|原神/i;
|
||
const CHEAT_WEAK =
|
||
/内存修改|读内存|写内存|dll注入/i;
|
||
|
||
// ReDoS 保险:ATTACK 含零宽环视,整段消息(贴代码/日志)超过上限时按窗扫，不一次喂整篇。
|
||
const ATTACK_SCAN_CAP = 256 * 1024;
|
||
const ATTACK_WINDOW = 8192;
|
||
|
||
const NET_TOPIC =
|
||
/(?:代理|\bproxy\b|socks|vpn|frp|clash|v2ray|小飞机|机场|出口\s*ip|本机\s*ip|内网\s*ip|公网\s*ip|ip\s*地址|ip\s*归属|ip\s*查询|ip\s*相关|dns|域名解析|网卡|隧道|反向代理|正向代理|http[s]?\s*代理)/i;
|
||
|
||
function ipv4ToInt(ip) {
|
||
const parts = String(ip).split(".");
|
||
if (parts.length !== 4) return null;
|
||
let value = 0;
|
||
for (const part of parts) {
|
||
if (!/^\d{1,3}$/.test(part)) return null;
|
||
const number = Number(part);
|
||
if (number > 255) return null;
|
||
value = value * 256 + number;
|
||
}
|
||
return value >>> 0;
|
||
}
|
||
|
||
function parseIpv6(input) {
|
||
let text = String(input || "").trim().toLowerCase().split("%")[0];
|
||
if (!text) return null;
|
||
if (text.includes(".")) {
|
||
const colon = text.lastIndexOf(":");
|
||
const tail = ipv4ToInt(text.slice(colon + 1));
|
||
if (tail == null) return null;
|
||
const hi = (tail >>> 16).toString(16);
|
||
const lo = (tail & 0xffff).toString(16);
|
||
text = `${text.slice(0, colon + 1)}${hi}:${lo}`;
|
||
}
|
||
const halves = text.split("::");
|
||
if (halves.length > 2) return null;
|
||
const left = halves[0] ? halves[0].split(":") : [];
|
||
const right = halves.length === 2 && halves[1] ? halves[1].split(":") : [];
|
||
const missing = 8 - left.length - right.length;
|
||
if (halves.length === 1 && left.length !== 8) return null;
|
||
if (halves.length === 2 && missing < 0) return null;
|
||
const parts = halves.length === 2 ? [...left, ...Array(missing).fill("0"), ...right] : left;
|
||
if (parts.length !== 8) return null;
|
||
let out = 0n;
|
||
for (const part of parts) {
|
||
if (!/^[0-9a-f]{1,4}$/.test(part)) return null;
|
||
out = (out << 16n) + BigInt(parseInt(part, 16));
|
||
}
|
||
return out;
|
||
}
|
||
|
||
export function regionOfSuffix(host) {
|
||
const name = String(host || "").trim().toLowerCase().replace(/\.$/, "");
|
||
if (!name || name === "localhost" || name.endsWith(".local")) return "";
|
||
for (const [suffix, region] of SUFFIXES) {
|
||
if (name === suffix.slice(1) || name.endsWith(suffix)) return region;
|
||
}
|
||
return "";
|
||
}
|
||
|
||
function hostOf(raw) {
|
||
let host = String(raw || "").trim().toLowerCase();
|
||
if (!host) return "";
|
||
const at = host.lastIndexOf("@");
|
||
if (at >= 0) host = host.slice(at + 1);
|
||
if (host.startsWith("[")) {
|
||
const end = host.indexOf("]");
|
||
return end > 1 ? host.slice(1, end) : "";
|
||
}
|
||
if (/^\d{1,3}(?:\.\d{1,3}){3}:\d+$/.test(host)) return host.replace(/:\d+$/, "");
|
||
if (/^[a-z0-9.-]+:\d+$/.test(host)) return host.replace(/:\d+$/, "");
|
||
return host.replace(/\.$/, "");
|
||
}
|
||
|
||
function addHost(raw, hosts) {
|
||
const host = hostOf(raw);
|
||
if (!host || host.length > 253) return;
|
||
hosts.add(host);
|
||
}
|
||
|
||
function inFilePath(sample, index) {
|
||
const prev = sample[index - 1];
|
||
return prev === "/" || prev === "\\";
|
||
}
|
||
|
||
/** 网址里的主机照收。裸名字要像域名：路径片段、文件后缀、两段的 .mo 文件名丢掉。 */
|
||
function keepBareDomain(sample, index, name) {
|
||
if (inFilePath(sample, index)) return false;
|
||
const labels = name.split(".");
|
||
const tail = labels[labels.length - 1];
|
||
if (FILE_SUFFIX.has(tail)) return false;
|
||
if (labels.length === 2 && tail === "mo") return false;
|
||
return true;
|
||
}
|
||
|
||
function collectFromText(text, hosts) {
|
||
const sample = String(text || "").slice(0, 32768);
|
||
const url = /\b(?:[a-z][a-z0-9+.-]*:\/\/)([^/?#\s]+)/gi;
|
||
for (const match of sample.matchAll(url)) addHost(match[1], hosts);
|
||
const mapped = [];
|
||
const mappedRe = /(?:[0-9a-f]{0,4}:){1,6}ffff:(?:(?:25[0-5]|2[0-4]\d|1?\d?\d)\.){3}(?:25[0-5]|2[0-4]\d|1?\d?\d)/gi;
|
||
for (const match of sample.matchAll(mappedRe)) {
|
||
const value = match[0].toLowerCase();
|
||
hosts.add(value);
|
||
mapped.push({ start: match.index, end: match.index + match[0].length });
|
||
}
|
||
const covered = (index, length) => mapped.some((span) => index >= span.start && index + length <= span.end);
|
||
const ipv4 = /\b(?:(?:25[0-5]|2[0-4]\d|1?\d?\d)\.){3}(?:25[0-5]|2[0-4]\d|1?\d?\d)\b/g;
|
||
for (const match of sample.matchAll(ipv4)) {
|
||
if (covered(match.index, match[0].length)) continue;
|
||
hosts.add(match[0]);
|
||
}
|
||
const ipv6 = /(?<![\d:])(?:[0-9a-f]{0,4}:){2,7}[0-9a-f]{0,4}(?![\d])/gi;
|
||
for (const match of sample.matchAll(ipv6)) {
|
||
const value = match[0];
|
||
if (/^[\d:]+$/.test(value)) continue;
|
||
if (covered(match.index, value.length)) continue;
|
||
hosts.add(value);
|
||
}
|
||
const domain = /\b(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}\b/gi;
|
||
for (const match of sample.matchAll(domain)) {
|
||
const name = match[0].toLowerCase();
|
||
if (!keepBareDomain(sample, match.index, name)) continue;
|
||
hosts.add(name);
|
||
}
|
||
if (/\blocalhost\b/i.test(sample)) hosts.add("localhost");
|
||
}
|
||
|
||
const HOST_NAME = /^(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}$/;
|
||
const V4_TEXT = /^(?:(?:25[0-5]|2[0-4]\d|1?\d?\d)\.){3}(?:25[0-5]|2[0-4]\d|1?\d?\d)$/;
|
||
|
||
export function allowFilePath(dshHome = findDshHome()) {
|
||
return path.join(dshHome, "net-scope-allow.txt");
|
||
}
|
||
|
||
/** 只接受一个 IP 或一个完整主机名。账号可以写成 user@host。密钥、网段、通配符丢掉。 */
|
||
export function entryHost(raw) {
|
||
const text = String(raw || "").trim();
|
||
if (!text || text.startsWith("#")) return "";
|
||
if (text.length > 253 || /[\s/\\*]/.test(text)) return "";
|
||
if (/BEGIN |PRIVATE KEY|ssh-(?:rsa|ed25519|dss) /i.test(text)) return "";
|
||
let body = text;
|
||
const at = body.lastIndexOf("@");
|
||
if (at >= 0) {
|
||
const user = body.slice(0, at);
|
||
if (!/^[A-Za-z0-9._-]{1,32}$/.test(user)) return "";
|
||
body = body.slice(at + 1);
|
||
}
|
||
const host = hostOf(body);
|
||
if (!host || host.length > 253) return "";
|
||
if (V4_TEXT.test(host)) return host;
|
||
if (host.includes(":")) return parseIpv6(host) != null ? host : "";
|
||
if (!HOST_NAME.test(host)) return "";
|
||
const tail = host.slice(host.lastIndexOf(".") + 1);
|
||
if (FILE_SUFFIX.has(tail)) return "";
|
||
return host;
|
||
}
|
||
|
||
export function normalizeAllowText(text) {
|
||
const kept = [];
|
||
const seen = new Set();
|
||
let dropped = 0;
|
||
for (const line of String(text || "").split(/\r?\n/)) {
|
||
const raw = line.trim();
|
||
if (!raw) continue;
|
||
if (raw.startsWith("#")) {
|
||
kept.push(raw);
|
||
continue;
|
||
}
|
||
const host = entryHost(raw);
|
||
if (!host) {
|
||
dropped += 1;
|
||
continue;
|
||
}
|
||
if (seen.has(host)) continue;
|
||
seen.add(host);
|
||
const at = raw.lastIndexOf("@");
|
||
kept.push(at > 0 ? `${raw.slice(0, at)}@${host}` : host);
|
||
}
|
||
return { text: kept.length ? `${kept.join("\n")}\n` : "", dropped, hosts: [...seen] };
|
||
}
|
||
|
||
export function readAllowText(dshHome = findDshHome()) {
|
||
try {
|
||
return fs.readFileSync(allowFilePath(dshHome), "utf8");
|
||
} catch {
|
||
return "";
|
||
}
|
||
}
|
||
|
||
export async function writeAllowText() {
|
||
allowCache = { path: "", mtime: -1, exact: new Set(), ips: null, at: 0 };
|
||
return { text: "", dropped: 0, hosts: [] };
|
||
}
|
||
|
||
export function ownServerNote() {
|
||
return "";
|
||
}
|
||
|
||
function isIp(host) {
|
||
return V4_TEXT.test(host) || host.includes(":");
|
||
}
|
||
|
||
function taskHit(label, kind) {
|
||
return { label, kind };
|
||
}
|
||
|
||
/** 代理 / IP / DNS 等配置咨询，不含攻击词时不拦（#73）。 */
|
||
export function isBenignNetworkTopic(text) {
|
||
const t = String(text || "").trim();
|
||
if (!t || !NET_TOPIC.test(t)) return false;
|
||
return !scanHas(ATTACK, t);
|
||
}
|
||
|
||
function scanHas(re, text) {
|
||
const sample = String(text || "");
|
||
const cap = Math.min(sample.length, ATTACK_SCAN_CAP);
|
||
if (!cap) return false;
|
||
if (cap <= ATTACK_WINDOW) return re.test(sample.slice(0, cap));
|
||
const hop = ATTACK_WINDOW - 256;
|
||
for (let i = 0; i < cap; i += hop) {
|
||
if (re.test(sample.slice(i, i + ATTACK_WINDOW))) return true;
|
||
}
|
||
return false;
|
||
}
|
||
|
||
export function isAttackTask(text) {
|
||
const sample = String(text || "");
|
||
if (isBenignNetworkTopic(sample)) return false;
|
||
return scanHas(ATTACK, sample);
|
||
}
|
||
|
||
export function isCheatTask(text) {
|
||
const sample = String(text || "");
|
||
const cap = sample.length > ATTACK_SCAN_CAP ? sample.slice(0, ATTACK_SCAN_CAP) : sample;
|
||
if (CHEAT_STRONG.test(cap)) return true;
|
||
return CHEAT_GAME.test(cap) && CHEAT_WEAK.test(cap);
|
||
}
|
||
|
||
function hostsInTask(text) {
|
||
const hosts = new Set();
|
||
const sample = String(text || "");
|
||
const cap = Math.min(sample.length, ATTACK_SCAN_CAP);
|
||
const win = 32768;
|
||
const hop = 28672;
|
||
const labeled = /(?:[a-z0-9\u00a1-\uffff](?:[a-z0-9\u00a1-\uffff-]{0,61}[a-z0-9\u00a1-\uffff])?\.)+(?:[a-z]{2,63}|xn--[a-z0-9-]{2,59}|[\u4e00-\u9fff]{2,12})/giu;
|
||
for (let i = 0; i < cap; i += hop) {
|
||
const chunk = sample.slice(i, i + win);
|
||
collectFromText(chunk, hosts);
|
||
for (const match of chunk.matchAll(labeled)) {
|
||
const name = match[0].toLowerCase().replace(/\.$/, "");
|
||
if (!keepBareDomain(chunk, match.index, name)) continue;
|
||
addHost(name, hosts);
|
||
}
|
||
}
|
||
return hosts;
|
||
}
|
||
|
||
/**
|
||
* 本地靶场只认解析结果。后缀（.lab / .htb）本身不放行。
|
||
* 走系统解析（含 hosts）：所有 A/AAAA 都必须是本机/私网，有一条公网或解析失败就拦。
|
||
*/
|
||
async function isRangeTarget(name) {
|
||
if (!name) return false;
|
||
if (name === "localhost" || name.endsWith(".localhost")) return true;
|
||
if (isIp(name)) return isLocalLabAddress(name);
|
||
const ips = await lookupIps(name);
|
||
if (!ips.length) return false;
|
||
return ips.every((ip) => isLocalLabAddress(ip));
|
||
}
|
||
|
||
export async function publicHostHit(text) {
|
||
const names = [];
|
||
for (const host of hostsInTask(text)) {
|
||
const name = hostOf(host);
|
||
if (name) names.push(name);
|
||
}
|
||
if (!names.length) return null;
|
||
for (const name of names) {
|
||
if (await isRangeTarget(name)) continue;
|
||
return taskHit(name, isIp(name) ? "ip" : bankHit(name) ? "bank" : "domain");
|
||
}
|
||
return null;
|
||
}
|
||
|
||
export async function taskTargetHit(text) {
|
||
if (!isAttackTask(text)) return null;
|
||
let found = false;
|
||
for (const host of hostsInTask(text)) {
|
||
if (hostOf(host)) found = true;
|
||
}
|
||
if (!found) return taskHit("unspecified", "domain");
|
||
return publicHostHit(text);
|
||
}
|
||
|
||
function blobOf(value, depth = 0) {
|
||
if (value == null || depth > 3) return "";
|
||
if (typeof value === "string" || typeof value === "number") return String(value);
|
||
if (Array.isArray(value)) return value.map((item) => blobOf(item, depth + 1)).join("\n");
|
||
if (typeof value !== "object") return "";
|
||
const skip = new Set(["agent", "session", "ctx", "next", "signal", "context"]);
|
||
return Object.entries(value)
|
||
.filter(([key]) => !skip.has(key))
|
||
.map(([, item]) => blobOf(item, depth + 1))
|
||
.join("\n")
|
||
.slice(0, 32768);
|
||
}
|
||
|
||
function toolArgText(message) {
|
||
const parts = [];
|
||
const calls = message?.toolCalls || message?.tool_calls || [];
|
||
for (const call of Array.isArray(calls) ? calls : []) {
|
||
parts.push(blobOf(call.arguments ?? call.input ?? call.params ?? call));
|
||
}
|
||
if (Array.isArray(message?.content)) {
|
||
for (const block of message.content) {
|
||
if (!block || typeof block !== "object") continue;
|
||
if (block.type === "tool_use" || block.type === "tool-call" || block.type === "tool-call-start") {
|
||
parts.push(blobOf(block.input ?? block.arguments ?? block));
|
||
}
|
||
}
|
||
}
|
||
if (message?.toolName || message?.name) parts.push(String(message.toolName || message.name));
|
||
return parts.join("\n");
|
||
}
|
||
|
||
export function latestToolText(messages) {
|
||
const list = Array.isArray(messages) ? messages : [];
|
||
const parts = [];
|
||
for (let i = list.length - 1; i >= 0 && parts.length < 6; i -= 1) {
|
||
const role = list[i]?.role;
|
||
if (role !== "assistant" && role !== "model") continue;
|
||
const blob = toolArgText(list[i]);
|
||
if (blob.trim()) parts.push(blob);
|
||
}
|
||
return parts.join("\n");
|
||
}
|
||
|
||
export function execArgText(exec) {
|
||
if (!exec || typeof exec !== "object") return "";
|
||
return blobOf({
|
||
name: exec.tool?.name || exec.name || exec.toolName,
|
||
args: exec.args ?? exec.input ?? exec.parameters ?? exec.params,
|
||
command: exec.command,
|
||
call: exec.toolCall ?? exec.call,
|
||
});
|
||
}
|
||
|
||
function isRedteamPayload(payload) {
|
||
const session = payload?.agent?.session || payload?.session;
|
||
const raw = session?.agentPreset || session?.header?.agentPreset || session?.projectionValues?.agentPreset || payload?.agent?.preset;
|
||
const id = String(raw?.id || raw?.name || raw || "").toLowerCase();
|
||
return id.includes("redteam");
|
||
}
|
||
|
||
function messageBody(message) {
|
||
if (typeof message?.content === "string") return message.content;
|
||
if (!Array.isArray(message?.content)) return typeof message?.text === "string" ? message.text : "";
|
||
return message.content.map((block) => {
|
||
if (typeof block === "string") return block;
|
||
if (block && block.type === "text" && typeof block.text === "string") return block.text;
|
||
return "";
|
||
}).join("\n");
|
||
}
|
||
|
||
function looksLikeToolResult(message, text) {
|
||
if (message?.toolCallId || message?.tool_call_id || message?.toolName) return true;
|
||
if (message?.source?.kind && message.source.kind !== "user") return true;
|
||
const head = String(text || "").slice(0, 240);
|
||
return /^(?:Tool result|\[tool|function_call|toolu_|call_)/i.test(head);
|
||
}
|
||
|
||
function humanTaskText(message) {
|
||
if (!message || typeof message !== "object") return "";
|
||
if (message.role && message.role !== "user") return "";
|
||
const kind = message.source?.kind;
|
||
if (kind && kind !== "user") return "";
|
||
const text = messageBody(message);
|
||
if (!text || looksLikeToolResult(message, text)) return "";
|
||
if (/^\s*Current runtime context\b/i.test(text)) return "";
|
||
return text.replace(/<system-reminder>[\s\S]*?<\/system-reminder>/gi, "\n").trim();
|
||
}
|
||
|
||
/** 只看本轮新用户句。整段历史拼在一起会把工具回包、上一轮域名和攻击词叠成误拦。 */
|
||
export function currentTaskText(messages) {
|
||
const list = Array.isArray(messages) ? messages : [];
|
||
let cut = -1;
|
||
for (let i = list.length - 1; i >= 0; i -= 1) {
|
||
const role = list[i]?.role;
|
||
if (role === "assistant" || role === "model") {
|
||
cut = i;
|
||
break;
|
||
}
|
||
}
|
||
return list.slice(cut + 1).map(humanTaskText).filter(Boolean).join("\n");
|
||
}
|
||
|
||
function sessionOf(payload) {
|
||
const agent = payload?.agent;
|
||
if (agent?.session && typeof agent.session.append === "function") return agent.session;
|
||
if (payload?.session && typeof payload.session.append === "function") return payload.session;
|
||
return null;
|
||
}
|
||
|
||
async function denialMessage() {
|
||
try {
|
||
const mod = await import("@deepseek-ai/dsh-llm");
|
||
if (typeof mod.createAssistantMessage === "function") {
|
||
return mod.createAssistantMessage({
|
||
content: [{ type: "text", text: DENIAL }],
|
||
source: { provider: "deepseek", model: "deepseek-chat" },
|
||
});
|
||
}
|
||
} catch {
|
||
/* 宿主包不在这条导入路径上时用手写消息。 */
|
||
}
|
||
return {
|
||
id: randomUUID(),
|
||
role: "assistant",
|
||
content: [{ type: "text", text: DENIAL }],
|
||
source: { kind: "model", provider: "deepseek", model: "deepseek-chat" },
|
||
};
|
||
}
|
||
|
||
const COMPACT_STREAM_TYPES = new Set([
|
||
"chunk",
|
||
"text-chunks",
|
||
"reasoning-chunks",
|
||
"tool-call-chunks",
|
||
]);
|
||
|
||
function denialChunks() {
|
||
return [
|
||
{ type: "block-start", index: 0, blockType: "text" },
|
||
{ type: "text-delta", index: 0, text: DENIAL },
|
||
{ type: "block-end", index: 0, block: { type: "text", text: DENIAL } },
|
||
{ type: "finish", reason: "stop" },
|
||
];
|
||
}
|
||
|
||
/** 宿主持久化只要 Accumulator 紧致记录；裸 chunk 会让 firstRunMemberTime 读 undefined.length（#84）。
|
||
* 审查「4.1 才是正解」: 每个 chunk 包成 { type: "chunk", time, chunk },走 compact chunk
|
||
* 单条路径,避免批记录 (text-chunks 需要 .texts 字段而不是 .chunks) 字段名错配再次崩溃。 */
|
||
function denialStream(now = Date.now()) {
|
||
const time0 = Number.isSafeInteger(now) ? now : Date.now();
|
||
const chunks = denialChunks();
|
||
const records = chunks.map((chunk, i) => ({
|
||
type: "chunk",
|
||
time: time0 + i,
|
||
chunk,
|
||
}));
|
||
for (const record of records) {
|
||
if (!COMPACT_STREAM_TYPES.has(record.type)) {
|
||
throw new TypeError(`denial stream must use compact Assistant records, got ${record.type}`);
|
||
}
|
||
}
|
||
return records;
|
||
}
|
||
|
||
async function appendDenial(session, turn, step) {
|
||
session.append("assistant/message", {
|
||
turn,
|
||
step,
|
||
message: await denialMessage(),
|
||
stream: denialStream(),
|
||
}, { surfaceOp: "append" });
|
||
}
|
||
|
||
async function parkDenial(payload) {
|
||
const session = sessionOf(payload);
|
||
const turn = Number(payload?.turn);
|
||
const step = Number(payload?.step);
|
||
if (!session || !Number.isSafeInteger(turn) || !Number.isSafeInteger(step) || step < 1) return false;
|
||
const messages = Array.isArray(payload?.messages) ? payload.messages : [];
|
||
let outerOpened = false;
|
||
let innerOpened = false;
|
||
try {
|
||
if (step === 1) {
|
||
for (const message of messages) {
|
||
session.append("user/message", message, { surfaceOp: "append" });
|
||
}
|
||
}
|
||
session.append("step/start", { turn, step });
|
||
outerOpened = true;
|
||
await appendDenial(session, turn, step);
|
||
session.append("step/end", { turn, step });
|
||
return true;
|
||
} catch {
|
||
try {
|
||
if (!outerOpened) {
|
||
session.append("step/start", { turn, step });
|
||
innerOpened = true;
|
||
}
|
||
await appendDenial(session, turn, step);
|
||
session.append("step/end", { turn, step });
|
||
return true;
|
||
} catch {
|
||
// 无论哪一层开过 step/start，都必须补 step/end，否则孤儿步让宿主崩。
|
||
if (outerOpened || innerOpened) {
|
||
try { session.append("step/end", { turn, step }); } catch { /* 步已经合不上时，交给宿主收尾。 */ }
|
||
}
|
||
return false;
|
||
}
|
||
}
|
||
}
|
||
|
||
function denyToolResult() {
|
||
return { isError: true, content: DENIAL, output: DENIAL, text: DENIAL };
|
||
}
|
||
|
||
export function installRegionGate(ctx) {
|
||
if (!ctx || typeof ctx.on !== "function") return;
|
||
const scoped = new WeakMap();
|
||
const hook = async (payload, next) => {
|
||
const forward = () => (typeof next === "function" ? next() : { kind: "enter", messages: payload?.messages || [] });
|
||
const step = Number(payload?.step);
|
||
const turn = Number(payload?.turn);
|
||
const session = sessionOf(payload) || payload?.agent?.session;
|
||
let hit = null;
|
||
try {
|
||
const task = currentTaskText(payload?.messages);
|
||
const redteam = isRedteamPayload(payload);
|
||
const marked = session ? scoped.get(session) === turn : false;
|
||
if (step === 1) {
|
||
if (!task && !redteam) return forward();
|
||
if (task && isCheatTask(task)) hit = taskHit("cheat", "cheat");
|
||
else if (task && isAttackTask(task)) {
|
||
if (session && Number.isSafeInteger(turn)) scoped.set(session, turn);
|
||
hit = await taskTargetHit(task);
|
||
} else if (redteam) {
|
||
if (session && Number.isSafeInteger(turn)) scoped.set(session, turn);
|
||
hit = task ? await publicHostHit(task) : null;
|
||
} else return forward();
|
||
} else if (redteam || marked || isAttackTask(task)) {
|
||
if (isCheatTask(task)) hit = taskHit("cheat", "cheat");
|
||
else hit = await publicHostHit(latestToolText(payload?.messages));
|
||
} else return forward();
|
||
} catch {
|
||
return forward();
|
||
}
|
||
if (!hit) return forward();
|
||
try {
|
||
const parked = await parkDenial(payload);
|
||
if (parked) return { kind: "enter", messages: [] };
|
||
} catch {
|
||
/* 禁止句没写上时不能把这一轮收成空白。 */
|
||
}
|
||
return forward();
|
||
};
|
||
const toolHook = async (exec, next) => {
|
||
const forward = () => (typeof next === "function" ? next() : denyToolResult());
|
||
try {
|
||
const blob = execArgText(exec);
|
||
if (!blob.trim()) return forward();
|
||
const hit = await publicHostHit(blob);
|
||
if (!hit) return forward();
|
||
} catch {
|
||
return forward();
|
||
}
|
||
if (exec && typeof exec === "object") {
|
||
exec.blocked = true;
|
||
exec.error = DENIAL;
|
||
}
|
||
return denyToolResult();
|
||
};
|
||
const arm = () => {
|
||
if (ctx.__dshPurgeRegionGate) return true;
|
||
try {
|
||
ctx.on("agent/pre-step", hook, { global: true, prepend: true });
|
||
try { ctx.on("tools/pre-execute", toolHook, { global: true, prepend: true }); } catch { /* 旧宿主没有工具钩。 */ }
|
||
ctx.__dshPurgeRegionGate = true;
|
||
return true;
|
||
} catch {
|
||
return false;
|
||
}
|
||
};
|
||
if (arm()) return;
|
||
// 宿主事件总线还没就绪：指数退避 3 次（≈ 0→50ms→200ms），不无限重试。
|
||
// unref:退避 timer 不阻止进程 exit(ctrl-C / electron close 时立刻退)。
|
||
queueMicrotask(() => {
|
||
if (arm()) return;
|
||
const t1 = setTimeout(() => {
|
||
if (arm()) return;
|
||
const t2 = setTimeout(() => { arm(); }, 200);
|
||
if (typeof t2.unref === 'function') t2.unref();
|
||
}, 50);
|
||
if (typeof t1.unref === 'function') t1.unref();
|
||
});
|
||
}
|