minusone 0.4.1

A script deobfuscator
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70

use crate::debug::DebugView;
use crate::error::MinusOneResult;
use crate::init::Init;
use crate::ps;
use crate::ps::{build_powershell_tree_for_storage, remove_powershell_extra};
use crate::ps::linter::RemoveUnusedVar;
use crate::tree::{EmptyStorage, HashMapStorage, Storage, Tree};

pub struct Engine<'a, S: Storage> {
    root: Tree<'a, S>,
}

pub type DeobfuscateEngine<'a> = Engine<'a, HashMapStorage<ps::Powershell>>;

impl<'a> DeobfuscateEngine<'a> {
    pub fn remove_extra(src: &'a str) -> MinusOneResult<String> {
        remove_powershell_extra(src)
    }
    pub fn from_powershell(src: &'a str) -> MinusOneResult<Self> {
        Ok(Self {
            root: build_powershell_tree_for_storage(src)?,
        })
    }

    pub fn debug(&self) {
        let mut debub_view = DebugView::new();
        self.root.apply(&mut debub_view).unwrap();
    }

    pub fn deobfuscate(&mut self) -> MinusOneResult<()> {
        self.root.apply_mut_with_strategy(
            &mut ps::RuleSet::init(),
            ps::strategy::PowershellStrategy,
        )?;
        Ok(())
    }

    pub fn lint(&mut self) -> MinusOneResult<String> {
        let mut ps_litter_view = ps::linter::Linter::new();
        self.root.apply(&mut ps_litter_view)?;
        CleanEngine::from_powershell(&ps_litter_view.output)?.clean()
    }

    pub fn lint_format(&mut self, tab_chr: &str) -> MinusOneResult<String> {
        let mut ps_litter_view = ps::linter::Linter::new().set_tab(tab_chr);
        self.root.apply(&mut ps_litter_view)?;

        CleanEngine::from_powershell(&ps_litter_view.output)?.clean()
    }
}

pub type CleanEngine<'a> = Engine<'a, EmptyStorage>;

impl<'a> CleanEngine<'a> {
    pub fn from_powershell(src: &'a str) -> MinusOneResult<Self> {
        Ok(Self {
            root: build_powershell_tree_for_storage(src)?,
        })
    }

    pub fn clean(&mut self) -> MinusOneResult<String> {
        let mut rule = ps::var::UnusedVar::default();
        self.root.apply(
            &mut rule,
        )?;
        let mut clean_view = RemoveUnusedVar::new(rule);
        self.root.apply(&mut clean_view)?;
        clean_view.clear()
    }
}