js hook toolkit that all you need
Drift inferred · capture-to-capture
- HIGH code analysis flagged committed secret, dynamic code execution ×29 in vmoranv/jshookmcp
- HIGH code analysis flagged committed secret, dynamic code execution ×6 in vmoranv/jshookmcp
- HIGH code analysis flagged committed secret, dynamic code execution ×6 in vmoranv/jshookmcp
- HIGH code analysis flagged committed secret, dynamic code execution ×6 in vmoranv/jshookmcp
- HIGH code analysis flagged committed secret, dynamic code execution ×6 in vmoranv/jshookmcp
- HIGH code analysis flagged dynamic code execution ×2 in vmoranv/jshookmcp
- HIGH code analysis flagged committed secret, dynamic code execution ×5 in vmoranv/jshookmcp
- HIGH code analysis flagged committed secret, dynamic code execution ×5 in vmoranv/jshookmcp
transport stdio · streamable-http · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 22fb441 · analyzer v28 · 3d ago
danger signals39
- dynamic code execution new Function() vmoranv-jshookmcp-22fb441/src/modules/collector/DOMInspector.ts :108
new Function( - dynamic code execution eval() vmoranv-jshookmcp-22fb441/src/modules/v8-inspector/JITInspector.ts :136
const candidate = eval(${JSON.stringify(functionRef)}); - dynamic code execution new Function() vmoranv-jshookmcp-22fb441/src/modules/v8-inspector/VersionDetector.ts :103
return Boolean(new Function("return %HaveSameMap({}, {})")()); - dynamic code execution new Function() vmoranv-jshookmcp-22fb441/src/server/domains/browser/handlers/safe-code-transform.ts :83
const evaluateFunction = new Function(`return ${functionString}`)() as () => unknown; - dynamic code execution indirect eval vmoranv-jshookmcp-22fb441/src/server/domains/browser/handlers/safe-code-transform.ts :111
return (0, eval)(${escapedCode}); - dynamic code execution indirect eval vmoranv-jshookmcp-22fb441/src/server/domains/process/handlers/injection-handlers.ts :498
const result = (0, eval)(expression); - dynamic code execution eval() vmoranv-jshookmcp-22fb441/tests/modules/analyzer/CodeAnalyzer.test.ts :89
eval(payload); - dynamic code execution eval() vmoranv-jshookmcp-22fb441/tests/modules/analyzer/CodeAnalyzerDataFlow.interprocedural.test.ts :37
eval(w); - dynamic code execution eval() vmoranv-jshookmcp-22fb441/tests/modules/analyzer/CodeAnalyzerDataFlow.test.ts :38
eval(source); - dynamic code execution new Function() vmoranv-jshookmcp-22fb441/tests/modules/analyzer/CodeAnalyzerDataFlow.test.ts :93
new Function(netSource); - dynamic code execution eval() vmoranv-jshookmcp-22fb441/tests/modules/analyzer/SecurityCodeAnalyzer.test.ts :63
eval(payload); - dynamic code execution setTimeout(string) vmoranv-jshookmcp-22fb441/tests/modules/analyzer/SecurityCodeAnalyzer.test.ts :121
setTimeout('alert(1)', 0); - dynamic code execution new Function() vmoranv-jshookmcp-22fb441/tests/modules/captcha/CaptchaDetector.callbacks.extra.test.ts :33
const runner = new Function( - dynamic code execution new Function() vmoranv-jshookmcp-22fb441/tests/modules/captcha/CaptchaDetector.coverage.test.ts :26
const runner = new Function( - dynamic code execution eval() vmoranv-jshookmcp-22fb441/tests/modules/collector/PageController.test.ts :555
return eval(pageFunction); - dynamic code execution new Function() vmoranv-jshookmcp-22fb441/tests/modules/deobfuscator/webcrack.benchmark.test.ts :46
new Function(code); - dynamic code execution eval() vmoranv-jshookmcp-22fb441/tests/modules/detector/ObfuscationDetector.coverage.extra.test.ts :68
eval(function(p,a,c,k,e,d){return p;}); - dynamic code execution new Function() vmoranv-jshookmcp-22fb441/tests/modules/detector/ObfuscationDetector.test.ts :133
const factory = new Function("return 1"); - dynamic code execution eval() vmoranv-jshookmcp-22fb441/tests/modules/detector/ObfuscationDetector.test.ts :136
const packed = eval(function(p,a,c,k,e,d){return p;}); - dynamic code execution new Function() vmoranv-jshookmcp-22fb441/tests/modules/emulator/EnvironmentEmulatorFetch.coverage.test.ts :84
const runner = new Function( - dynamic code execution new Function() vmoranv-jshookmcp-22fb441/tests/modules/stealth/StealthVerifier.coverage.test.ts :23
const runner = new Function( - dynamic code execution new Function() vmoranv-jshookmcp-22fb441/tests/modules/stealth/StealthVerifier.test.ts :163
const wrappedFn = new Function( - dynamic code execution eval() vmoranv-jshookmcp-22fb441/tests/server/domains/analysis/ast-and-deflat.test.ts :51
eval("console.log('hello')"); - dynamic code execution new Function() vmoranv-jshookmcp-22fb441/tests/server/domains/browser/font-fingerprint.test.ts :13
const fn = new Function(...keys, 'document', 'queryLocalFonts', 'return (' + script + ');'); - dynamic code execution constructor escape vmoranv-jshookmcp-22fb441/tests/server/domains/browser/page-evaluation.security.test.ts :174
Function.prototype.constructor.constructor('return process')() - dynamic code execution new Function() vmoranv-jshookmcp-22fb441/tests/server/domains/canvas/adapters/babylon-adapter.test.ts :121
const fn = new Function( - dynamic code execution new Function() vmoranv-jshookmcp-22fb441/tests/server/domains/canvas/adapters/three-adapter.test.ts :177
const fn = new Function( - dynamic code execution new Function() vmoranv-jshookmcp-22fb441/tests/server/domains/canvas/canvas.coverage.test.ts :361
const evaluator = new Function( - dynamic code execution new Function() vmoranv-jshookmcp-22fb441/tests/server/domains/canvas/handlers.test.ts :39
const evaluator = new Function( - suspicious endpoint google-analytics.com (telemetry) vmoranv-jshookmcp-22fb441/tests/modules/analyzer/PatternDetector.additional.test.ts :162
makeRequest({ url: 'https://google-analytics.com/collect' }), - suspicious endpoint google-analytics.com (telemetry) vmoranv-jshookmcp-22fb441/tests/modules/analyzer/PatternDetector.test.ts :333
request({ requestId: 'blacklisted', url: 'https://google-analytics.com/collect' }), - suspicious endpoint 169.254.169.254 (cloud metadata) vmoranv-jshookmcp-22fb441/tests/server/domains/graphql/runtime-replay.test.ts :108
endpoint: 'http://169.254.169.254/graphql', - suspicious endpoint 169.254.169.254 (cloud metadata) vmoranv-jshookmcp-22fb441/tests/server/domains/graphql/runtime-subscribe.test.ts :273
endpoint: 'http://169.254.169.254/graphql', - suspicious endpoint 93.184.216.34 vmoranv-jshookmcp-22fb441/tests/server/domains/network/replay-additional.test.ts :678
url: 'https://93.184.216.34/api', - suspicious endpoint 8.8.8.8 vmoranv-jshookmcp-22fb441/tests/server/domains/network/ssrf-policy.test.ts :358
const target = await resolveNetworkTarget('http://8.8.8.8/path'); - suspicious endpoint 169.254.169.254 (cloud metadata) vmoranv-jshookmcp-22fb441/tests/server/domains/sourcemap/handlers.impl.sourcemap-parse-base.test.ts :146
'http://169.254.169.254', - suspicious endpoint 169.254.169.254 (cloud metadata) vmoranv-jshookmcp-22fb441/tests/server/domains/sourcemap/handlers.test.ts :222
sourceMapUrl: 'http://169.254.169.254/meta.map', - suspicious endpoint 93.184.216.34 vmoranv-jshookmcp-22fb441/tests/server/domains/workflow/network-policy.coverage.test.ts :332
const result = await authorizeWorkflowUrl('https://93.184.216.34/', defaultPolicy, { - committed secret private key vmoranv-jshookmcp-22fb441/scripts/runtime-probes/constants.mjs :29
PEM private key block (redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 2523
filesystem 114
- fs vmoranv-jshookmcp-22fb441/packages/extension-sdk/src/bridges/shared.ts :2
import { mkdir } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/adb/ADBClient.ts :3
import { access } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/adb/ADBConnector.ts :14
import { createWriteStream } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/analyzer/SecurityCodeAnalyzer.ts :260
// Path traversal: fs.readFile/writeFile/etc or path.join/resolve with a user-input-named arg - fs vmoranv-jshookmcp-22fb441/src/modules/apk-packer/PackerDetector.ts :18
import { stat } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/apk-packer/SigningBlockParser.ts :23
import { open, stat, type FileHandle } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/binary-instrument/GhidraAnalyzer.ts :2
import { constants as fsConstants } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/binary-instrument/UnidbgRunner.ts :3
import { access } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/binary-instrument/android-runtime-dump-session.ts :1
import { open, stat } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/binary-instrument/apk-dex-intake.ts :1
import { stat } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/binary-instrument/dex-artifacts.ts :1
import { open, readdir, stat } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/binary-secrets/KeyExtractor.ts :28
import { createReadStream } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/boringssl-inspector/TLSKeyLogExtractor.ts :2
import { existsSync, readFileSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/browser/BrowserModeManager.ts :1
import { existsSync } from 'fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/captcha/AICaptchaDetector.ts :2
import { writeFile, mkdir } from 'fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/collector/BrowserLifecycleManager.ts :3
import { existsSync } from 'fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/collector/CodeCache.ts :1
import fs from 'fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/collector/CodeCollectorConnectionInternal.ts :1
import { readFile } from 'fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/collector/PageController.ts :5
import { writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/dart-inspector/ObfuscationMapLocator.ts :18
import { readdir, writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/dart-inspector/ObjectPoolDumper.ts :36
import { open, stat, type FileHandle } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/dart-inspector/PackageDetector.ts :16
import { stat } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/dart-inspector/SmiScanner.ts :24
import { createReadStream } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/dart-inspector/SnapshotFingerprint.ts :28
import { open, stat } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/dart-inspector/Symbolizer.ts :29
import { readFile, stat } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/dart-inspector/snapshot-version-table.ts :29
import { readFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/debugger/DebuggerSessionManager.ts :1
import * as fs from 'fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/deobfuscator/webcrack.ts :1
import { readdir, rm, stat } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/emulator/EnvironmentEmulator.ts :3
import { existsSync } from 'fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/exploit-dev/ResultCache.ts :2
import * as fs from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/extension-registry/PluginRegistry.ts :1
import { existsSync, mkdirSync, readFileSync, readdirSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/extension-registry/WebhookBridge.ts :1
import { existsSync, mkdirSync, readFileSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/external/ExternalToolRunner.ts :14
import { stat } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/jadx-search/JadxSearchEngine.ts :16
import { promises as fs } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/jadx-search/node-fallback-engine.ts :4
* Walks the decompile directory with `fs.promises.readdir({ recursive: true })`, - fs vmoranv-jshookmcp-22fb441/src/modules/monitor/PerformanceMonitor.profiling.ts :5
import { writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/monitor/PerformanceMonitor.tracing.ts :6
import { writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/native-emulator/dart/DartAotLoader.ts :71
const buffer = await fs.readFile(path); - fs vmoranv-jshookmcp-22fb441/src/modules/process/memory/injection-validator.ts :10
import { existsSync, statSync, createReadStream } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/process/memory/injector.ts :5
import { promises as fs } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/process/memory/linux/mapsAnalyzer.ts :23
import { readFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/process/memory/reader.ts :5
import { promises as fs } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/process/memory/regions.enumerate.ts :1
import { readFileSync } from 'fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/process/memory/regions.protection.ts :1
import { promises as fsAsync } from 'fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/process/memory/scanner.darwin.ts :4
import { promises as fs } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/process/memory/scanner.linux.ts :4
import { readFileSync, openSync, readSync, closeSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/modules/process/proc-runtime/proc-runtime-parser.ts :20
import { readFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/process/threads/thread-status-parser.ts :11
import { readFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/syscall-hook/SyscallToJSMapper.ts :26
jsFunction: 'fs.readFile', - fs vmoranv-jshookmcp-22fb441/src/modules/trace/TraceRecorder.network.ts :1
import { writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/modules/v8-inspector/TurboFanTraceCollector.ts :23
import { mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/native/AntiCheatDetector.ts :11
import { promises as fs } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/native/HeapAnalyzer.ts :13
import { readFileSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/native/MinidumpParser.ts :22
import { readFileSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/native/PEAnalyzer.ts :11
import { promises as fs } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/native/ScriptLoader.ts :1
import { promises as fs, existsSync } from 'fs'; - fs vmoranv-jshookmcp-22fb441/src/native/platform/ElfParser.ts :1
import { readFileSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/native/platform/IntegrityScanner.ts :2
import { readFileSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/native/platform/MachOParser.ts :6
import { readFileSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/native/platform/ThreadEnumerator.ts :17
import { readdirSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/native/platform/linux/LinuxMemoryProvider.impl.ts :1
import fs from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/native/platform/linux/LinuxPtraceHelper.ts :8
import fs from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/native/syscall/SyscallResolver.ts :5
import { readFileSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/adb-bridge/handlers.impl.ts :2
import { mkdir, open, stat, writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/binary-instrument/handlers/analysis-handlers.ts :6
import { mkdtemp, readFile, rm, mkdir, readdir, stat, writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/binary-instrument/handlers/apktool.ts :5
import { mkdir } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/binary-instrument/handlers/frida.ts :6
import { mkdir } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/binary-instrument/handlers/ghidra.ts :5
import { readFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/binary-instrument/handlers/jadx.ts :6
import { mkdtemp, readFile, rm, mkdir, stat } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/binary-instrument/handlers/shared.ts :5
import { access } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/binary-instrument/shared/jadx-utils.ts :6
import { readFile, readdir } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/boringssl-inspector/handlers/shared/tls-probe.ts :1
import { readFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/browser/handlers/browser-control.ts :11
import { readFile, writeFile } from 'fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/browser/handlers/detailed-data.ts :6
import { readFileSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/encoding/handlers.base.ts :1
import { readFile, realpath } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/encoding/handlers/shared.ts :6
import { readFile, realpath } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/exploit-dev/handlers.impl.ts :1
import * as fs from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/exploit-dev/handlers/mitigation-detect.ts :1
import * as fs from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/exploit-dev/handlers/one-gadget.ts :21
import { readFileSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/exploit-dev/handlers/stack-pivot.ts :1
import * as fs from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/exploit-dev/handlers/verify-rop-chain.ts :23
import * as fs from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/exploit-dev/utils/disasm.ts :1
import * as fs from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/extension-registry/handlers.impl.ts :1
import { readFile, stat } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/maintenance/handlers.extensions.ts :1
import { existsSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/maintenance/handlers/extension-integrity-utils.ts :17
import { existsSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/maintenance/handlers/extension-registry-utils.ts :6
import { existsSync } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/native-emulator/handler-trace.ts :1
import { writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/native-emulator/handlers.impl.ts :14
import { readFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/platform/handlers/asar-deobfuscate-handler.ts :10
import { readFile, mkdir, writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/platform/handlers/asar-repack-handler.ts :11
import { readFile, writeFile, mkdir } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/platform/handlers/electron-dual-cdp.ts :10
import { readFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/platform/handlers/electron-fuse-handler.ts :7
import { readFile, writeFile, copyFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/platform/handlers/electron-handlers.ts :1
import { readFile, mkdir, writeFile, stat } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/platform/handlers/electron-integrity-handler.ts :12
import { readFile, stat } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/platform/handlers/electron-signature-handler.ts :14
import { readFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/platform/handlers/electron-userdata-handler.ts :8
import { readdir, readFile, stat } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/platform/handlers/miniapp-handlers.ts :1
import { readFile, mkdir, writeFile, stat } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/platform/handlers/platform-utils.ts :1
import type { Stats } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/platform/handlers/v8-bytecode-handler.ts :7
import { readFile, stat } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/process/handlers/hollowing-detection.ts :186
const diskBuffer = await fs.readFile(diskPath); - fs vmoranv-jshookmcp-22fb441/src/server/domains/protocol-analysis/handlers/pcapng-handlers.ts :5
import { mkdir } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/protocol-analysis/handlers/shared.ts :1
export { readFile, writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/proxy/handlers.impl.ts :2
import { access, mkdir, readFile, writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/proxy/mockttp-ca-compat.ts :2
import { readFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/sourcemap/handlers.impl.sourcemap-main.ts :1
import { mkdir, writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/sourcemap/handlers/sourcemap-handlers.ts :5
import { mkdir, writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/streaming/handlers/fetch-stream-handlers.ts :12
import { writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/streaming/handlers/grpc-handlers.ts :12
import { writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/streaming/handlers/sse-handlers.ts :5
import { writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/streaming/handlers/webrtc-handlers.ts :11
import { writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/streaming/handlers/ws-handlers.ts :5
import { writeFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/trace/handler-utils.ts :1
import { readFile } from 'node:fs/promises'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/v8-inspector/handlers/snapshot-persistence.ts :15
import type { Dirent } from 'node:fs'; - fs vmoranv-jshookmcp-22fb441/src/server/domains/wasm/handlers/browser-handlers.ts :5
import { writeFile } from 'node:fs/promises';
shell / exec 42
- shell vmoranv-jshookmcp-22fb441/packages/extension-sdk/src/bridges/shared.ts :1
import { execFile, spawn } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/adb/ADBClient.ts :1
import { execFile } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/adb/ADBConnector.ts :11
import { execSync, execFileSync, execFile } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/binary-instrument/FridaSession.ts :1
import { execFile } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/binary-instrument/GhidraAnalyzer.ts :1
import { execFile } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/binary-instrument/UnidbgRunner.ts :1
import { execFile } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/browser/BrowserDiscovery.ts :136
const { execFile } = await import('child_process'); - shell vmoranv-jshookmcp-22fb441/src/modules/browser/CamoufoxBrowserManager.ts :181
ProcessRegistry.register(childProc as import('node:child_process').ChildProcess); - shell vmoranv-jshookmcp-22fb441/src/modules/dart-inspector/flutter-stdlib-packages.ts :26
* `^[a-z_][a-z0-9_]*$`). Sorted alphabetically for diff hygiene. - shell vmoranv-jshookmcp-22fb441/src/modules/external/ExternalToolRunner.ts :13
import { spawn } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/external/ToolProbe.ts :8
import { execFile } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/jadx-search/ripgrep-detector.ts :9
import { execFile } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/jadx-search/ripgrep-engine.ts :15
import { spawn } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/mojo-ipc/MojoMonitor.ts :1
import { spawn } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/process/LinuxProcessManager.ts :8
import { exec, spawn } from 'child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/process/MacProcessManager.ts :8
import { exec, execFile, spawn } from 'child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/process/ProcessManager.impl.ts :3
import { exec, spawn } from 'child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/process/memory/injection-validator.ts :11
import { execSync } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/process/memory/types.ts :5
import { exec, execFile } from 'child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/syscall-hook/SyscallMonitor.ts :1
import type { ChildProcess } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/syscall-hook/SyscallToJSMapper.ts :38
jsFunction: 'child_process.spawn', - shell vmoranv-jshookmcp-22fb441/src/modules/v8-inspector/NativeBytecodePrinter.ts :1
import { spawn } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/modules/v8-inspector/TurboFanTraceCollector.ts :22
import { spawn } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/native/NativeMemoryManager.impl.ts :16
import { exec } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/native/platform/ThreadEnumerator.ts :18
import { exec } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/server/domains/adb-bridge/handlers.impl.ts :1
import { execFile } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/server/domains/adb-bridge/logcat.ts :1
import { spawn } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/server/domains/binary-instrument/handlers/analysis-handlers.ts :5
import { execFile } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/server/domains/binary-instrument/handlers/frida.ts :5
import { execFile } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/server/domains/binary-instrument/handlers/jadx.ts :9
import { execFile } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/server/domains/binary-instrument/handlers/shared.ts :6
import { execFile } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/server/domains/browser/handlers/safe-code-transform.ts :12
* 1. No Node.js API access (fs, child_process, etc.) - shell vmoranv-jshookmcp-22fb441/src/server/domains/coordination/state-board/handlers/shared.ts :59
.join('.*')}$`, - shell vmoranv-jshookmcp-22fb441/src/server/domains/exploit-dev/handlers/mitigation-detect.ts :2
import * as childProcess from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/server/domains/maintenance/gpu-detect.ts :8
import { execFile } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/server/domains/maintenance/handlers/extension-registry-utils.ts :5
import { execFile } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/server/domains/platform/handlers/electron-dual-cdp.ts :9
import { spawn, type ChildProcess } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/server/domains/platform/handlers/platform-utils.ts :275
const { execFile } = await import('node:child_process'); - shell vmoranv-jshookmcp-22fb441/src/server/domains/platform/handlers/v8-bytecode-handler.ts :8
import { execFile } from 'node:child_process'; - shell vmoranv-jshookmcp-22fb441/src/server/domains/proxy/handlers.impl.ts :1157
const { execFile } = await import('node:child_process'); - shell vmoranv-jshookmcp-22fb441/src/server/domains/syscall-hook/handlers/ebpf-attach.ts :278
const { execFile } = await import('node:child_process'); - shell vmoranv-jshookmcp-22fb441/src/server/domains/syscall-hook/permission-check.ts :34
const { execFile } = await import('node:child_process');
network 39
- net vmoranv-jshookmcp-22fb441/packages/extension-sdk/src/bridges/shared.ts :257
const response = await fetch(url, { - net vmoranv-jshookmcp-22fb441/src/modules/adb/ADBConnector.ts :312
const response = await fetch(`http://localhost:${hostPort}/json`, { - net vmoranv-jshookmcp-22fb441/src/modules/adb/WebViewDebugger.ts :1
import { createServer } from 'node:net'; - net vmoranv-jshookmcp-22fb441/src/modules/collector/PageScriptCollectors.ts :134
const response = await fetch(url); - net vmoranv-jshookmcp-22fb441/src/modules/extension-registry/PluginRegistry.ts :282
const response = await fetch(url); - net vmoranv-jshookmcp-22fb441/src/modules/extension-registry/WebhookBridge.ts :74
const response = await fetch(record.url, { - net vmoranv-jshookmcp-22fb441/src/server/MCPServer.context.ts :2
import type { Server } from 'node:http'; - net vmoranv-jshookmcp-22fb441/src/server/MCPServer.transport.ts :1
import { createServer } from 'node:http'; - net vmoranv-jshookmcp-22fb441/src/server/MCPServer.ts :2
import type { Server } from 'node:http'; - net vmoranv-jshookmcp-22fb441/src/server/domains/analysis/handlers.web-tools.ts :180
const resp = await fetch(scriptUrl, { cache: 'force-cache', signal: ac1.signal }); - net vmoranv-jshookmcp-22fb441/src/server/domains/boringssl-inspector/handlers/raw-socket-handlers.ts :6
import { createServer as createNetServer, Socket as NetSocket } from 'node:net'; - net vmoranv-jshookmcp-22fb441/src/server/domains/boringssl-inspector/handlers/session-handlers.ts :5
import { isIP, Socket as NetSocket } from 'node:net'; - net vmoranv-jshookmcp-22fb441/src/server/domains/boringssl-inspector/handlers/shared/types.ts :1
import type { Socket as NetSocket } from 'node:net'; - net vmoranv-jshookmcp-22fb441/src/server/domains/boringssl-inspector/handlers/tls-probe-handlers.ts :5
import { isIP } from 'node:net'; - net vmoranv-jshookmcp-22fb441/src/server/domains/boringssl-inspector/handlers/websocket-handlers.ts :6
import { isIP, Socket as NetSocket } from 'node:net'; - net vmoranv-jshookmcp-22fb441/src/server/domains/browser/handlers/captcha-solver.ts :184
const createRes = await fetch(`${baseUrl}/createTask`, { - net vmoranv-jshookmcp-22fb441/src/server/domains/debugger/antidebug/scripts.data.detect.ts :53
var response = await fetch(absoluteUrl.href, { credentials: 'same-origin' }); - net vmoranv-jshookmcp-22fb441/src/server/domains/graphql/handlers/introspection.ts :148
response = await fetch(endpoint, { - net vmoranv-jshookmcp-22fb441/src/server/domains/graphql/handlers/replay.ts :222
response = await fetch(endpoint, { - net vmoranv-jshookmcp-22fb441/src/server/domains/graphql/handlers/schema-enum.helpers.ts :191
const response = await fetch(endpoint, { - net vmoranv-jshookmcp-22fb441/src/server/domains/maintenance/handlers/extension-registry-utils.ts :354
const res = await fetch(url, { signal: controller.signal }); - net vmoranv-jshookmcp-22fb441/src/server/domains/native-bridge/index.ts :85
const res = await fetch(url, { - net vmoranv-jshookmcp-22fb441/src/server/domains/network/handlers/raw-helpers.ts :10
import * as net from 'node:net'; - net vmoranv-jshookmcp-22fb441/src/server/domains/network/handlers/raw-latency-handlers.ts :1
import * as http from 'node:http'; - net vmoranv-jshookmcp-22fb441/src/server/domains/network/handlers/raw-runtime-helpers.ts :2
import * as net from 'node:net'; - net vmoranv-jshookmcp-22fb441/src/server/domains/network/replay.ts :26
import * as net from 'node:net'; - net vmoranv-jshookmcp-22fb441/src/server/domains/platform/handlers/electron-dual-cdp.ts :66
const res = await fetch(`http://127.0.0.1:${port}/json/version`, { - net vmoranv-jshookmcp-22fb441/src/server/domains/platform/handlers/electron-ipc-sniffer.ts :172
const listRes = await fetch(`http://${hostPort}/json`, { - net vmoranv-jshookmcp-22fb441/src/server/domains/process/handlers/injection-handlers.ts :598
const resp = await fetch(listUrl); - net vmoranv-jshookmcp-22fb441/src/server/domains/protocol-analysis/handlers/shared/network-packet/addressing.ts :1
import { isIP } from 'node:net'; - net vmoranv-jshookmcp-22fb441/src/server/domains/sourcemap/handlers.impl.sourcemap-parse-base.ts :316
const response = await fetch(resolvedUrl, { signal: ac.signal }); - net vmoranv-jshookmcp-22fb441/src/server/domains/sourcemap/handlers/sourcemap-parsing.ts :393
const response = await fetch(resolvedUrl, { signal: ac.signal }); - net vmoranv-jshookmcp-22fb441/src/server/domains/streaming/definitions.ts :143
'Enable or disable capture of fetch()-based streams. Wraps window.fetch and, for ' + - net vmoranv-jshookmcp-22fb441/src/server/domains/streaming/handlers.impl.core.ts :152
// ── fetch()-based stream ── - net vmoranv-jshookmcp-22fb441/src/server/domains/streaming/handlers/fetch-stream-handlers.ts :2
* fetch()-based stream monitoring handlers. - net vmoranv-jshookmcp-22fb441/src/server/domains/streaming/handlers/shared.ts :127
/** Config for the fetch()-based stream monitor (re-applied on re-enable). */ - net vmoranv-jshookmcp-22fb441/src/server/domains/transform/handlers.impl.transform-base.ts :369
const response = await fetch(script.src); - net vmoranv-jshookmcp-22fb441/src/server/domains/transform/handlers/shared.ts :333
const r = await fetch(script.src); - net vmoranv-jshookmcp-22fb441/src/server/domains/wasm/handlers/browser-handlers.ts :26
* `fetch().then(arrayBuffer())` path still captures bytes.
secrets 2
- secrets vmoranv-jshookmcp-22fb441/src/server/domains/browser/handlers/captcha-capabilities.ts :30
const apiKeyConfigured = Boolean(process.env.CAPTCHA_API_KEY?.trim()); - secrets vmoranv-jshookmcp-22fb441/src/server/domains/browser/handlers/captcha-solver.ts :443
const apiKey = argString(args, 'apiKey', '') || process.env.CAPTCHA_API_KEY || '';
database 1
- db vmoranv-jshookmcp-22fb441/src/modules/trace/TraceDB.ts :37
Database = require('better-sqlite3');
install hooks 3
- prepack vmoranv-jshookmcp-22fb441/package.json :102
corepack pnpm run metadata:check && corepack pnpm run build:all - prepublishOnly vmoranv-jshookmcp-22fb441/package.json :111
corepack pnpm run check - postinstall vmoranv-jshookmcp-22fb441/package.json :112
node scripts/postinstall.cjs
declared dependencies 43
- @modelcontextprotocol/sdk@^1.29.0
- @alexaltea/capstone-js@^5.0.9
- @babel/generator@^8.0.0
- @babel/parser@^8.0.0
- @babel/traverse@^8.0.0
- @babel/types@^8.0.0
- @huggingface/tokenizers@^0.1.3
- dotenv@^17.4.2
- jsdom@^29.1.1
- koffi@^3.0.2
- mockttp@4.4.2
- protobufjs@8.7.1
- quickjs-emscripten@^0.32.0
- rebrowser-puppeteer-core@^24.8.1
- yauzl@^3.4.0
- zod@^4.4.3
- @types/babel__generator@^7.27.0
- @types/babel__traverse@^7.28.0
- @types/better-sqlite3@^7.6.13
- @types/jsdom@^28.0.3
- @types/node@^25.9.3
- @vitest/coverage-v8@^4.1.9
- cross-env@^10.1.0
- lefthook@^2.1.9
- medium-zoom@^1.1.0
- oxfmt@^0.60.0
- oxlint@^1.70.0
- rollup-plugin-visualizer@^7.0.1
- tinyglobby@^0.2.17
- tsdown@^0.22.3
- tsx@^4.22.4
- typescript@^6.0.3
- vite@^8.1.5
- vitepress@2.0.0-alpha.18
- vitest@^4.1.9
- vue@^3.5.38
- @devicefarmer/adbkit@^3.3.8
- better-sqlite3@12.11.1
- binaryen@^130.0.0
- camoufox-js@^0.11.1
- playwright-core@^1.61.0
- webcrack@2.16.0
- z3-solver@^5.0.0
perm:untrusted 2
- untrusted vmoranv-jshookmcp-22fb441/src/server/domains/streaming/handlers/fetch-stream-handlers.ts :5
* consume `text/event-stream` via `fetch(url).then(r => r.body.getReader())` - untrusted vmoranv-jshookmcp-22fb441/src/server/domains/wasm/handlers/browser-handlers.ts :26
* `fetch().then(arrayBuffer())` path still captures bytes.