LOCKED-CLI

Extreme Source Code Protection via V8 Bytecode & Zero-Trust KMS

locked-cli is a production-grade source code obfuscator and DRM (Digital Rights Management) tool for Node.js applications. It compiles your JavaScript into raw V8 Bytecode, wraps it in a highly secure anti-tamper runtime, and verifies decryption keys remotely via a Zero-Trust KMS (Key Management Server) to prevent memory dumping and wrapper stripping.

Core Features

1. V8 Bytecode Compilation: Turns your JS code into unreadable machine-level bytecode.
2. KMS Server (Zero-Trust): Decryption keys are NEVER stored on the client. Keys are retrieved in-memory via ECDH Key Exchange.
3. Anti-Memory Dump: Uses process.hrtime micro-timing checks and .fill(0) shredding to defeat GDB/x64dbg debuggers.
4. Anti-Piracy: Hardware ID (HWID) locked and strict IP Anomaly tracking.
5. Deep-Interweaving DRM: Inject application secrets directly from the KMS Server into your app's memory without storing them anywhere on disk.
6. C++ Ring-3 Protection: Optional native addon for ultimate OS-level debugger detection.

Installation

npm install -g locked-cli-complex

Usage (Client Side)

1. Compile and Protect your Project

Navigate to your Node.js project and run:

locked run ./src

This will generate a locked_app/ folder containing the heavily encrypted entrypoint.cjs and bytecode files.

2. Run the Protected Application (Online KMS Mode)

Set the KMS server URL, App ID, and License ID, then run the entrypoint:

LOCKED_AUTH_SERVER="https://your-kms.server.com" \
LOCKED_APP_ID="app_prod_01" \
LOCKED_LICENSE_ID="lic_john_doe" \
node entrypoint.cjs

3. Generate Offline License (No KMS Server)

If you don't want to host a KMS server, you can generate a hardware-locked offline license for your client:

locked license <CLIENT_HWID> <MASTER_KEY_HEX>

This will produce a client.license file. Your client can then run:

LOCKED_LICENSE_FILE="./client.license" node entrypoint.cjs

For advanced client configurations, please refer to the advanced-security/ADVANCED_SECURITY_DOCS.md included in this repository.

License

MIT / Proprietary.