forked from svrjs/svrjs
589 lines
16 KiB
JavaScript
589 lines
16 KiB
JavaScript
//SVR.JS USER TOOL
|
|
const readline = require("readline");
|
|
const fs = require("fs");
|
|
let crypto = {};
|
|
try {
|
|
crypto = require("crypto");
|
|
// eslint-disable-next-line no-unused-vars
|
|
} catch (ex) {
|
|
crypto = {};
|
|
crypto.__disabled__ = null;
|
|
crypto.createHash = (type) => {
|
|
if (type != "SHA256") throw new Error("Hash type not supported!");
|
|
return {
|
|
msg: "",
|
|
update: (a) => {
|
|
this.msg = a;
|
|
return this;
|
|
},
|
|
digest: (ty) => {
|
|
const chrsz = 8;
|
|
const hexcase = 0;
|
|
|
|
const safeAdd = (x, y) => {
|
|
const lsw = (x & 0xffff) + (y & 0xffff);
|
|
const msw = (x >> 16) + (y >> 16) + (lsw >> 16);
|
|
return (msw << 16) | (lsw & 0xffff);
|
|
};
|
|
|
|
const S = (X, n) => {
|
|
return (X >>> n) | (X << (32 - n));
|
|
};
|
|
|
|
const R = (X, n) => {
|
|
return X >>> n;
|
|
};
|
|
|
|
const Ch = (x, y, z) => {
|
|
return (x & y) ^ (~x & z);
|
|
};
|
|
|
|
const Maj = (x, y, z) => {
|
|
return (x & y) ^ (x & z) ^ (y & z);
|
|
};
|
|
|
|
const Sigma0256 = (x) => {
|
|
return S(x, 2) ^ S(x, 13) ^ S(x, 22);
|
|
};
|
|
|
|
const Sigma1256 = (x) => {
|
|
return S(x, 6) ^ S(x, 11) ^ S(x, 25);
|
|
};
|
|
|
|
const Gamma0256 = (x) => {
|
|
return S(x, 7) ^ S(x, 18) ^ R(x, 3);
|
|
};
|
|
|
|
const Gamma1256 = (x) => {
|
|
return S(x, 17) ^ S(x, 19) ^ R(x, 10);
|
|
};
|
|
|
|
function coreSha256(m, l) {
|
|
const K = new Array(
|
|
0x428a2f98,
|
|
0x71374491,
|
|
0xb5c0fbcf,
|
|
0xe9b5dba5,
|
|
0x3956c25b,
|
|
0x59f111f1,
|
|
0x923f82a4,
|
|
0xab1c5ed5,
|
|
0xd807aa98,
|
|
0x12835b01,
|
|
0x243185be,
|
|
0x550c7dc3,
|
|
0x72be5d74,
|
|
0x80deb1fe,
|
|
0x9bdc06a7,
|
|
0xc19bf174,
|
|
0xe49b69c1,
|
|
0xefbe4786,
|
|
0xfc19dc6,
|
|
0x240ca1cc,
|
|
0x2de92c6f,
|
|
0x4a7484aa,
|
|
0x5cb0a9dc,
|
|
0x76f988da,
|
|
0x983e5152,
|
|
0xa831c66d,
|
|
0xb00327c8,
|
|
0xbf597fc7,
|
|
0xc6e00bf3,
|
|
0xd5a79147,
|
|
0x6ca6351,
|
|
0x14292967,
|
|
0x27b70a85,
|
|
0x2e1b2138,
|
|
0x4d2c6dfc,
|
|
0x53380d13,
|
|
0x650a7354,
|
|
0x766a0abb,
|
|
0x81c2c92e,
|
|
0x92722c85,
|
|
0xa2bfe8a1,
|
|
0xa81a664b,
|
|
0xc24b8b70,
|
|
0xc76c51a3,
|
|
0xd192e819,
|
|
0xd6990624,
|
|
0xf40e3585,
|
|
0x106aa070,
|
|
0x19a4c116,
|
|
0x1e376c08,
|
|
0x2748774c,
|
|
0x34b0bcb5,
|
|
0x391c0cb3,
|
|
0x4ed8aa4a,
|
|
0x5b9cca4f,
|
|
0x682e6ff3,
|
|
0x748f82ee,
|
|
0x78a5636f,
|
|
0x84c87814,
|
|
0x8cc70208,
|
|
0x90befffa,
|
|
0xa4506ceb,
|
|
0xbef9a3f7,
|
|
0xc67178f2
|
|
);
|
|
let HASH = new Array(
|
|
0x6a09e667,
|
|
0xbb67ae85,
|
|
0x3c6ef372,
|
|
0xa54ff53a,
|
|
0x510e527f,
|
|
0x9b05688c,
|
|
0x1f83d9ab,
|
|
0x5be0cd19
|
|
);
|
|
let W = new Array(64);
|
|
let a, b, c, d, e, f, g, h;
|
|
let T1, T2;
|
|
|
|
m[l >> 5] |= 0x80 << (24 - (l % 32));
|
|
m[(((l + 64) >> 9) << 4) + 15] = l;
|
|
|
|
for (let i = 0; i < m.length; i += 16) {
|
|
a = HASH[0];
|
|
b = HASH[1];
|
|
c = HASH[2];
|
|
d = HASH[3];
|
|
e = HASH[4];
|
|
f = HASH[5];
|
|
g = HASH[6];
|
|
h = HASH[7];
|
|
|
|
for (let j = 0; j < 64; j++) {
|
|
if (j < 16) W[j] = m[j + i];
|
|
else
|
|
W[j] = safeAdd(
|
|
safeAdd(
|
|
safeAdd(Gamma1256(W[j - 2]), W[j - 7]),
|
|
Gamma0256(W[j - 15])
|
|
),
|
|
W[j - 16]
|
|
);
|
|
|
|
T1 = safeAdd(
|
|
safeAdd(safeAdd(safeAdd(h, Sigma1256(e)), Ch(e, f, g)), K[j]),
|
|
W[j]
|
|
);
|
|
T2 = safeAdd(Sigma0256(a), Maj(a, b, c));
|
|
|
|
h = g;
|
|
g = f;
|
|
f = e;
|
|
e = safeAdd(d, T1);
|
|
d = c;
|
|
c = b;
|
|
b = a;
|
|
a = safeAdd(T1, T2);
|
|
}
|
|
|
|
HASH[0] = safeAdd(a, HASH[0]);
|
|
HASH[1] = safeAdd(b, HASH[1]);
|
|
HASH[2] = safeAdd(c, HASH[2]);
|
|
HASH[3] = safeAdd(d, HASH[3]);
|
|
HASH[4] = safeAdd(e, HASH[4]);
|
|
HASH[5] = safeAdd(f, HASH[5]);
|
|
HASH[6] = safeAdd(g, HASH[6]);
|
|
HASH[7] = safeAdd(h, HASH[7]);
|
|
}
|
|
return HASH;
|
|
}
|
|
|
|
const str2binb = (str) => {
|
|
let bin = Array();
|
|
const mask = (1 << chrsz) - 1;
|
|
for (let i = 0; i < str.length * chrsz; i += chrsz) {
|
|
bin[i >> 5] |=
|
|
(str.charCodeAt(i / chrsz) & mask) << (24 - (i % 32));
|
|
}
|
|
return bin;
|
|
};
|
|
|
|
const Utf8Encode = (string) => {
|
|
string = string.replace(/\r\n/g, "\n");
|
|
let utftext = "";
|
|
|
|
for (let n = 0; n < string.length; n++) {
|
|
let c = string.charCodeAt(n);
|
|
|
|
if (c < 128) {
|
|
utftext += String.fromCharCode(c);
|
|
} else if (c > 127 && c < 2048) {
|
|
utftext += String.fromCharCode((c >> 6) | 192);
|
|
utftext += String.fromCharCode((c & 63) | 128);
|
|
} else {
|
|
utftext += String.fromCharCode((c >> 12) | 224);
|
|
utftext += String.fromCharCode(((c >> 6) & 63) | 128);
|
|
utftext += String.fromCharCode((c & 63) | 128);
|
|
}
|
|
}
|
|
|
|
return utftext;
|
|
};
|
|
|
|
const binb2hex = (binarray) => {
|
|
const hexTab = hexcase ? "0123456789ABCDEF" : "0123456789abcdef";
|
|
let str = "";
|
|
for (let i = 0; i < binarray.length * 4; i++) {
|
|
str +=
|
|
hexTab.charAt(
|
|
(binarray[i >> 2] >> ((3 - (i % 4)) * 8 + 4)) & 0xf
|
|
) +
|
|
hexTab.charAt((binarray[i >> 2] >> ((3 - (i % 4)) * 8)) & 0xf);
|
|
}
|
|
return str;
|
|
};
|
|
|
|
let s = Utf8Encode(this.msg);
|
|
let str = binb2hex(coreSha256(str2binb(s), s.length * chrsz));
|
|
if (ty == "hex") return str;
|
|
let hx = [];
|
|
for (var i = 0; i < str.length; i += 2) {
|
|
hx.push(parseInt(str[i] + str[i + 1], 16));
|
|
}
|
|
return Buffer.from(hx);
|
|
}
|
|
};
|
|
};
|
|
}
|
|
|
|
if (!crypto.randomInt) {
|
|
crypto.randomInt = (min, max) => {
|
|
return Math.round(Math.random() * (max - min)) + min;
|
|
};
|
|
}
|
|
|
|
let configJSON = {};
|
|
if (fs.existsSync(__dirname + "/config.json")) {
|
|
let configJSONf = "";
|
|
try {
|
|
configJSONf = fs.readFileSync(__dirname + "/config.json"); //Read JSON File
|
|
// eslint-disable-next-line no-unused-vars
|
|
} catch (ex) {
|
|
throw new Error("Cannot read JSON file.");
|
|
}
|
|
try {
|
|
configJSON = JSON.parse(configJSONf); //Parse JSON
|
|
// eslint-disable-next-line no-unused-vars
|
|
} catch (ex) {
|
|
throw new Error("JSON Parse error.");
|
|
}
|
|
}
|
|
|
|
let users = [];
|
|
if (configJSON.users != undefined) users = configJSON.users;
|
|
|
|
function saveConfig() {
|
|
let configJSONobj = {};
|
|
if (fs.existsSync(__dirname + "/config.json"))
|
|
configJSONobj = JSON.parse(
|
|
fs.readFileSync(__dirname + "/config.json").toString()
|
|
);
|
|
configJSONobj.users = users;
|
|
const configString = JSON.stringify(configJSONobj, null, 2);
|
|
fs.writeFileSync(__dirname + "/config.json", configString);
|
|
}
|
|
|
|
const args = process.argv;
|
|
let user = "";
|
|
let action = "change";
|
|
let forcechange = false;
|
|
if (
|
|
process.argv.length <=
|
|
(process.argv[0].indexOf("node") > -1 || process.argv[0].indexOf("bun") > -1
|
|
? 2
|
|
: 1)
|
|
)
|
|
args.push("-h");
|
|
for (
|
|
let i =
|
|
process.argv[0].indexOf("node") > -1 || process.argv[0].indexOf("bun") > -1
|
|
? 2
|
|
: 1;
|
|
i < args.length;
|
|
i++
|
|
) {
|
|
if (
|
|
args[i] == "-h" ||
|
|
args[i] == "--help" ||
|
|
args[i] == "-?" ||
|
|
args[i] == "/h" ||
|
|
args[i] == "/?"
|
|
) {
|
|
console.log("SVR.JS user tool usage:");
|
|
console.log(
|
|
"node svrpasswd.js [-h] [--help] [-?] [/h] [/?] [-x] [-a|--add|-d|--delete] <username>"
|
|
);
|
|
console.log("-h -? /h /? --help -- Displays help");
|
|
console.log("-a --add -- Add an user");
|
|
console.log("-d --delete -- Deletes an user");
|
|
console.log("-x -- Changes hash algorithm");
|
|
process.exit(0);
|
|
} else if (args[i] == "-a" || args[i] == "--add") {
|
|
if (action != "change") {
|
|
console.log("Multiple actions specified.");
|
|
console.log(
|
|
"node svrpasswd.js [-h] [--help] [-?] [/h] [/?] [-x] [-a|--add|-d|--delete] <username>"
|
|
);
|
|
console.log("-h -? /h /? --help -- Displays help");
|
|
console.log("-a --add -- Add an user");
|
|
console.log("-d --delete -- Deletes an user");
|
|
console.log("-x -- Changes hash algorithm");
|
|
process.exit(1);
|
|
}
|
|
action = "add";
|
|
} else if (args[i] == "-d" || args[i] == "--delete") {
|
|
if (action != "change") {
|
|
console.log("Multiple actions specified.");
|
|
console.log(
|
|
"node svrpasswd.js [-h] [--help] [-?] [/h] [/?] [-x] [-a|--add|-d|--delete] <username>"
|
|
);
|
|
console.log("-h -? /h /? --help -- Displays help");
|
|
console.log("-a --add -- Add an user");
|
|
console.log("-d --delete -- Deletes an user");
|
|
console.log("-x -- Changes hash algorithm");
|
|
process.exit(1);
|
|
}
|
|
action = "delete";
|
|
} else if (args[i] == "-x") {
|
|
if (forcechange) {
|
|
console.log("Multiple -x options specified.");
|
|
console.log(
|
|
"node svrpasswd.js [-h] [--help] [-?] [/h] [/?] [-x] [-a|--add|-d|--delete] <username>"
|
|
);
|
|
console.log("-h -? /h /? --help -- Displays help");
|
|
console.log("-a --add -- Add an user");
|
|
console.log("-d --delete -- Deletes an user");
|
|
console.log("-x -- Changes hash algorithm");
|
|
process.exit(1);
|
|
}
|
|
forcechange = true;
|
|
} else {
|
|
if (user != "") {
|
|
console.log("Multiple users specified.");
|
|
console.log(
|
|
"node svrpasswd.js [-h] [--help] [-?] [/h] [/?] [-x] [-a|--add|-d|--delete] <username>"
|
|
);
|
|
console.log("-h -? /h /? --help -- Displays help");
|
|
console.log("-a --add -- Add an user");
|
|
console.log("-d --delete -- Deletes an user");
|
|
console.log("-x -- Changes hash algorithm");
|
|
process.exit(1);
|
|
}
|
|
user = args[i];
|
|
}
|
|
}
|
|
|
|
if (user == "") {
|
|
console.log("No user specified.");
|
|
console.log(
|
|
"node svrpasswd.js [-h] [--help] [-?] [/h] [/?] [-x] [-a|--add|-d|--delete] <username>"
|
|
);
|
|
console.log("-h -? /h /? --help -- Displays help");
|
|
console.log("-a --add -- Add an user");
|
|
console.log("-d --delete -- Deletes an user");
|
|
console.log("-x -- Changes hash algorithm");
|
|
process.exit(1);
|
|
}
|
|
|
|
function getUserIndex(username) {
|
|
let ind = -1;
|
|
for (let i = 0; i < users.length; i++) {
|
|
if (users[i].name == username) {
|
|
ind = i;
|
|
break;
|
|
}
|
|
}
|
|
return ind;
|
|
}
|
|
|
|
function sha256(msg) {
|
|
let hash = crypto.createHash("SHA256");
|
|
hash.update(msg);
|
|
return hash.digest("hex");
|
|
}
|
|
|
|
function generateSalt() {
|
|
let token = "";
|
|
const strlist =
|
|
"0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
|
|
for (let i = 0; i < 63; i++) {
|
|
token += strlist[crypto.randomInt(0, strlist.length)];
|
|
}
|
|
return token;
|
|
}
|
|
|
|
function password(callback) {
|
|
const rl = readline.createInterface({
|
|
input: process.stdin,
|
|
output: process.stdout,
|
|
prompt: "Password: "
|
|
});
|
|
rl.prompt();
|
|
process.stdout.writeold = process.stdout.write;
|
|
process.stdout.write = (s) => {
|
|
process.stdout.writeold(s.replace(/[^\r\n]/g, ""));
|
|
};
|
|
rl.once("line", (line) => {
|
|
process.stdout.write = process.stdout.writeold;
|
|
var rl = readline.createInterface({
|
|
input: process.stdin,
|
|
output: process.stdout,
|
|
prompt: "Confirm password: "
|
|
});
|
|
rl.prompt();
|
|
process.stdout.writeold = process.stdout.write;
|
|
process.stdout.write = (s) => {
|
|
process.stdout.writeold(s.replace(/[^\r\n]/g, ""));
|
|
};
|
|
rl.on("line", (line2) => {
|
|
process.stdout.write = process.stdout.writeold;
|
|
rl.close();
|
|
if (line != line2) callback(false);
|
|
else callback(line);
|
|
});
|
|
});
|
|
}
|
|
|
|
function promptAlgorithms(callback, bypass, pbkdf2, scrypt) {
|
|
if (bypass) {
|
|
if (scrypt) {
|
|
callback("scrypt");
|
|
} else if (pbkdf2) {
|
|
callback("pbkdf2");
|
|
} else {
|
|
callback("sha256");
|
|
}
|
|
return;
|
|
}
|
|
let algorithms = {
|
|
sha256:
|
|
"Salted SHA256 (1 iteration) - fastest and uses least memory, but less secure",
|
|
pbkdf2:
|
|
"PBKDF2 (PBKDF2-HMAC-SHA512, 36250 iterations) - more secure and uses less memory, but slower",
|
|
scrypt:
|
|
"scrypt (N=2^14, r=8, p=1) - faster and more secure, but uses more memory"
|
|
};
|
|
if (
|
|
!crypto.pbkdf2 ||
|
|
(process.isBun &&
|
|
!(
|
|
process.versions.bun &&
|
|
!process.versions.bun.match(
|
|
/^(?:0\.|1\.0\.|1\.1\.[0-9](?![0-9])|1\.1\.1[0-2](?![0-9]))/
|
|
)
|
|
))
|
|
)
|
|
delete algorithms.pbkdf2;
|
|
const algorithmNames = Object.keys(algorithms);
|
|
if (algorithmNames.length < 2) callback(algorithmNames[0]);
|
|
console.log("Select password hashing algorithm. Available algorithms:");
|
|
for (var i = 0; i < algorithmNames.length; i++) {
|
|
console.log(algorithmNames[i] + " - " + algorithms[algorithmNames[i]]);
|
|
}
|
|
const rl = readline.createInterface({
|
|
input: process.stdin,
|
|
output: process.stdout,
|
|
prompt: "Algorithm: "
|
|
});
|
|
rl.prompt();
|
|
rl.on("line", (line) => {
|
|
rl.close();
|
|
line = line.trim();
|
|
if (!algorithms[line]) callback(false);
|
|
else callback(line);
|
|
});
|
|
}
|
|
|
|
const userindex = getUserIndex(user);
|
|
if (action == "add" && userindex != -1) {
|
|
console.log("User alerady exists.");
|
|
process.exit(1);
|
|
} else if (action != "add" && userindex == -1) {
|
|
console.log("User doesn't exist.");
|
|
process.exit(1);
|
|
}
|
|
if (action == "delete") {
|
|
users.splice(userindex, 1);
|
|
saveConfig();
|
|
console.log("User deleted successfully");
|
|
} else if (action == "add") {
|
|
promptAlgorithms((algorithm) => {
|
|
if (!algorithm) {
|
|
console.log("Invalid algorithm!");
|
|
process.exit(1);
|
|
} else {
|
|
password((password) => {
|
|
if (!password) {
|
|
console.log("Passwords don't match!");
|
|
process.exit(1);
|
|
} else {
|
|
const salt = generateSalt();
|
|
let hash = "";
|
|
if (algorithm == "scrypt") {
|
|
hash = crypto.scryptSync(password, salt, 64).toString("hex");
|
|
} else if (algorithm == "pbkdf2") {
|
|
hash = crypto
|
|
.pbkdf2Sync(password, salt, 36250, 64, "sha512")
|
|
.toString("hex");
|
|
} else {
|
|
hash = sha256(password + salt);
|
|
}
|
|
users.push({
|
|
name: user,
|
|
pass: hash,
|
|
salt: salt,
|
|
pbkdf2: algorithm == "pbkdf2" ? true : undefined,
|
|
scrypt: algorithm == "scrypt" ? true : undefined,
|
|
__svrpasswd_l2: true
|
|
});
|
|
saveConfig();
|
|
console.log("User added successfully");
|
|
}
|
|
});
|
|
}
|
|
});
|
|
} else {
|
|
promptAlgorithms(
|
|
(algorithm) => {
|
|
if (!algorithm) {
|
|
console.log("Invalid algorithm!");
|
|
process.exit(1);
|
|
} else {
|
|
password((password) => {
|
|
if (!password) {
|
|
console.log("Passwords don't match!");
|
|
process.exit(1);
|
|
} else {
|
|
var salt = generateSalt();
|
|
var hash = "";
|
|
if (algorithm == "scrypt") {
|
|
hash = crypto.scryptSync(password, salt, 64).toString("hex");
|
|
} else if (algorithm == "pbkdf2") {
|
|
hash = crypto
|
|
.pbkdf2Sync(password, salt, 36250, 64, "sha512")
|
|
.toString("hex");
|
|
} else {
|
|
hash = sha256(password + salt);
|
|
}
|
|
users[userindex] = {
|
|
name: user,
|
|
pass: hash,
|
|
salt: salt,
|
|
pbkdf2: algorithm == "pbkdf2" ? true : undefined,
|
|
scrypt: algorithm == "scrypt" ? true : undefined,
|
|
__svrpasswd_l2: true
|
|
};
|
|
saveConfig();
|
|
console.log("Password changed successfully");
|
|
}
|
|
});
|
|
}
|
|
},
|
|
users[userindex].__svrpasswd_l2 && !forcechange,
|
|
users[userindex].pbkdf2,
|
|
users[userindex].scrypt
|
|
);
|
|
}
|