feat: plugin-check-certificate.js

plugins/Generic/plugin-check-certificate.js

@@ -0,0 +1,75 @@
+/**
+ * 本插件使用微软工具：https://learn.microsoft.com/en-us/sysinternals/downloads/sigcheck
+ */
+const DOWNLOAD_URL = 'https://download.sysinternals.com/files/Sigcheck.zip'
+const PATH = 'data/third/check-my-certificate'
+
+/* 触发器 手动触发 */
+const onRun = async () => {
+  await checkOS()
+  const output = await Plugins.Exec(PATH + '/sigcheck.exe', ['-nobanner', '-accepteula', '-tuv', '-c'])
+  if (output.includes('No certificates found')) {
+    const img = await Plugins.Readfile('data/.cache/imgs/notify_success.png', { Mode: 'Binary' })
+    // prettier-ignore
+    await Plugins.alert(Plugin.name, `<center>
+      <img src="data:image/png;base64,${img}">
+      恭喜，未发现不安全的证书！
+    </center>`, {type: 'markdown'})
+    return
+  }
+
+  const lines = output.trim().replaceAll('"', '').split('\n').slice(3)
+  const list = lines.map((line) => {
+    const [Store, Subject, Status, ValidUsage, Issuer, SerialNumber, Thumbprint, Algorithm, ValidFrom, ValidTo] = line.split(',')
+    return { Store, Subject, Status, ValidUsage, Issuer, SerialNumber, Thumbprint, Algorithm, ValidFrom, ValidTo }
+  })
+  const img = await Plugins.Readfile('data/.cache/imgs/notify_error.png', { Mode: 'Binary' })
+  // prettier-ignore
+  await Plugins.alert(Plugin.name, `<center>
+  <img src="data:image/png;base64,${img}">
+  糟糕，发现 ${list.length} 个未经验证的有效证书！
+  </center>
+
+  > 不必过于担心，但是建议进一步验证证书是否有害！
+  
+  | 证书颁发者 | 状态 | 有效期 |
+  | --- | - | ---- |
+  ${list.map(v => `|${v.Issuer}|${v.Status}|${v.ValidTo}|`).join('\n')}
+  `, {type: 'markdown'})
+}
+
+/* 触发器 安装 */
+const onInstall = async () => {
+  await checkOS()
+  const { update, success, destroy, error } = Plugins.message.info('正在下载...', 1200 * 1000)
+  try {
+    const TMP_FILE = 'data/.cache/Sigcheck.zip'
+    await Plugins.Download(DOWNLOAD_URL, TMP_FILE, {}, (progress, total) => {
+      update('下载中...' + ((progress / total) * 100).toFixed(2) + '%')
+    })
+    update('正在解压...')
+    await Plugins.UnzipZIPFile(TMP_FILE, PATH)
+    await Plugins.Removefile(TMP_FILE)
+    success('安装成功')
+  } catch (err) {
+    error('下载失败：' + (err.message || err))
+  } finally {
+    await Plugins.sleep(1000)
+    destroy()
+  }
+  return 0
+}
+
+/* 触发器 卸载 */
+const onUninstall = async () => {
+  await checkOS()
+  await Plugins.Removefile(PATH)
+  return 0
+}
+
+const checkOS = async () => {
+  const { env } = Plugins.useEnvStore()
+  if (env.os !== 'windows') {
+    throw '暂未支持非 Windows 系统'
+  }
+}

plugins/generic.json

@@ -238,6 +238,21 @@
     "install": false,
     "installed": false
   },
+  {
+    "id": "plugin-check-certificate",
+    "name": "系统证书安全检测",
+    "description": "检测系统是否具有未经验证的证书！",
+    "type": "Http",
+    "url": "https://raw.githubusercontent.com/GUI-for-Cores/Plugin-Hub/main/plugins/Generic/plugin-check-certificate.js",
+    "path": "data/plugins/plugin-check-certificate.js",
+    "triggers": ["on::manual"],
+    "menus": {},
+    "configuration": [],
+    "status": 0,
+    "disabled": false,
+    "install": true,
+    "installed": false
+  },
   {
     "id": "plugin-system-proxy-guard",
     "name": "代理守卫",