网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

) x4 M/ P& K- `: C

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

' p, | b n7 _$ t3 a) x2 V% [( U

附scrdec1.3源代码[c代码]：

6 [ F9 m' u/ h( o9 S

/**********************************************************************/ /* scrdec.c - Decoder for Microsoft Script Encoder */ 9 E+ y, N( O2 D! {5 R/* Version 1.3 */ /* */ /* COPYRIGHT: */ 8 V, r; q4 y6 v* U4 k4 V/* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ /* Some changes by Joe Steele to correct minor stuff */ ( x/ F& e5 q" ^9 J# P/* */ 9 I7 ?3 o. w2 U7 B2 [& [$ a# y/* DISCLAIMER: */ /* This program is for demonstrative and educational purposes only. */ . ?- S& d! n* e* ]7 p5 H9 a/* Use of this program is at your own risk. The author cannot be held */ 6 J5 B& J2 O$ O1 V( i7 J/* responsible if any laws are broken by use of this program. */ 2 C' ?& b" l3 s; S1 H8 [5 |/* */ /* If you use or distribute this code, this message should be held */ /* intact. Also, any program based upon this code should display the */ 2 l q& n* z0 ^/* copyright message and the disclaimer. */ /**********************************************************************/

#include #include #include

#define LEN_OUTBUF 64 #define LEN_INBUF 1024

#define STATE_INIT_COPY 100 6 [+ c$ A0 o$ Q: l/ Q/ d/ @#define STATE_COPY_INPUT 101 ; R9 y+ ~( @* w9 X' N9 [. C#define STATE_SKIP_ML 102 #define STATE_CHECKSUM 103 0 k' ^( ]1 f; T6 E8 h7 {7 L#define STATE_READLEN 104 ( ?5 X2 A' e9 ^#define STATE_DECODE 105 3 A/ P# h/ W9 z. V0 R5 ^#define STATE_UNESCAPE 106 8 U5 l, G' H& g#define STATE_FLUSHING 107 #define STATE_DBCS 108 9 P" P( u8 J/ Y9 G( X#define STATE_INIT_READLEN 109

unsigned char rawData[292] = { 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 1 W( h6 Q" y t9 V$ F) Z: R% z9 P! x( ] 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, % K! c6 R& M) x8 ~ 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 7 S8 Z- _4 ^1 D, x1 @, S 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, , {% H( }- P' ^$ t1 k- G3 e 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, 2 {- Y/ Z) G1 H7 g4 Z 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, * c7 F' o+ ~, k% Y2 ?, P 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, # s: [; E% l# R8 \ 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, . v$ s" k8 E2 n1 ] 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 8 P1 }1 x7 N+ p8 p. D4 G 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, 4 ~6 c$ C& b7 i4 \" j 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, ) m! w% W4 Z N& ?' s7 E 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, + l& Q! Z6 f* A! O 0x51,0x67,0x2f } ;

9 U0 b- N. b2 @3 s0 h

const unsigned char pick_encoding[64] = { 1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 6 \8 {$ u* r F5 A: n/ e" x1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 * e; r/ ?$ v8 n+ t, Q};

% I/ G# z6 v% R- T

unsigned char transformed[3][128]; 2 m4 Y. B1 o/ @$ P# x# H8 ^int digits[0x7b];

unsigned char unescape (unsigned char c) { static unsigned char escapes[] = "#&!*$"; ' J' n$ e9 V L) I static unsigned char escaped[] = "\r\n<>@"; int i=0;

: F& M# C/ o5 ]5 ~2 k

if (c > 127) return c; while (escapes) { / m) B- i' k r% s if (escapes == c) . g5 j' Z, ?: h" S C% U( l return escaped; % r& P, `4 n- i% w F: L i++; / u" @* z2 n6 D: w$ { } return '?'; 1 t& ?# o0 g* F5 }}

I, l3 y9 m4 q9 O$ R0 N0 s

void maketrans (void) 4 K R/ z, H# c' _% t1 @{ int i, j;

for (i=31; i<=127; i++) 8 X e3 n6 o# t4 z7 d4 E for (j=0; j<3; j++) transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; }

韩冰

void makedigits (void) { int i;

for (i=0; i<26; i++) { digits['A'+i] = i; digits['a'+i] = i+26; } ; ]# ~( d. o9 c8 }5 g, F: E2 i for (i=0; i<10; i++) digits['0'+i] = i+52; digits[0x2b] = 62; " k% k' C6 H2 _4 O digits[0x2f] = 63; 0 b' x0 ?; n; b& k# Z0 T. j% J }}

unsigned long int decodeBase64 (unsigned char *p) { * D" n5 X9 M4 E4 E+ i/ j4 E unsigned long int val = 0;

val += (digits[p[0]] << 2); val += (digits[p[1]] >> 4); val += (digits[p[1]] & 0xf) << 12; val += ((digits[p[2]] >> 2) << 8); , ]; A0 i* x: J1 x6 d7 c val += ((digits[p[2]] & 0x3) << 22); 9 B( w' ~2 Q% S val += (digits[p[3]] << 16); val += ((digits[p[4]] << 2) << 24); # d$ n$ p, X# x1 M( _5 z val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 4 P, k5 |; q0 @; ^' X% l, z 10 ba98 - N2 A; d& g. r9 F8 I1 C" T, k! R fedc 76 543210 fedcba 98---- 4 o% _* M2 x, q( ?3 `1 r4 V |- LSB -||- -||- -| |- MSB -| */ return val; 4 J* h( |: y2 ?* f}

int isLeadByte (unsigned int cp, unsigned char ucByte) * Y" [; \: @2 o! u( a{ 7 q# p/ \4 ^2 @8 w- v /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f . O. \ d# k5 _9 v 0xe0-0xfc 4 K' p9 H. `9 f4 _: C& H3 Z f9 Z3 R 936 - Simplified Chinese GBK - 0xa1-0xfe 949 - Korean Wansung - 0x81-0xfe x$ J, F- X3 l' Z0 ` W8 ] 950 - Traditional Chinese Big5 - 0x81-0xfe 1361 - Korean Johab - 0x84-0xd3 0xd9-0xde 0 o# y9 y/ E* k" C P1 [) a7 Z 0xe0-0xf9 */ 2 `- i5 m$ a5 _ switch (cp) { case 932: if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; 6 V7 v, ^* r; \$ ]1 a( w0 L" ? if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; else return 0; ; c M' g# j; y7 r1 Y- V8 v" ] case 936: if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; ) u" h% j" [. T' h h @9 Z: c else return 0; $ s" f0 C3 C& e/ N5 s7 a case 949: 0 Y" K2 n- m: D+ |7 w case 950: if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; ) J/ B3 \* H7 \ else return 0; case 1361: if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; # w4 e) L$ W1 g) t5 u. r1 `. p" M if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; : j0 x% s1 I" r if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; " Y) q6 U) g! F4 H6 j else return 0; % H/ l# ]5 a4 r4 c& B# n default: / m+ u2 B" s8 V( b* C return 0; }

}

0 @+ A$ v. D4 ]int ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) { 3 i6 H( e$ n d2 _. F5 D X. _5 a1 c unsigned char inbuf[LEN_INBUF+1]; unsigned char outbuf[LEN_OUTBUF+1]; 3 W" S0 [; ?9 s unsigned char c, lenbuf[7], csbuf[7]; unsigned char marker[] = "#@~^"; ) o9 ^9 z; R) { int nextstate, state = 0; : k+ p$ i; k/ ^ int i, j, k, m, ml = 0; ) {1 R. }+ `/ V unsigned long int csum = 0, len = 0; FILE *infile, *outfile;

infile = fopen (inname, "rb"); 6 v- Z# y. u* g/ E* p. \/ I+ J outfile = fopen (outname, "wb"); if (!infile || !outfile) / F/ p, L. u! B% [ { printf ("Error opening file!\n"); % u) E# ^" c5 v9 J return 10; } % ^% p# ^8 N+ K: K/ Z" ^* x maketrans(); makedigits(); memset (inbuf, 0, sizeof (inbuf)); ' C: d: _! C! @% W# ~7 J memset (outbuf, 0, sizeof (outbuf)); memset (lenbuf, 0, sizeof (lenbuf)); state = STATE_INIT_COPY; i = 0; ' \' F/ h6 e% x- ~% D9 ^ j = 0;

while (state) / l. ]' N* Q* c4 b! | ^2 v { if (inbuf == 0) { $ d1 j& `: H* c7 i: T% r if (feof (infile)) 6 ^7 j% S$ ]+ v; a% x break;

memset (inbuf, 0, sizeof (inbuf)); fgets (inbuf, LEN_INBUF, infile); i = 0; : }2 r* G& q' L continue; }

if (j == LEN_OUTBUF) { fwrite (outbuf, sizeof(char), j, outfile); 4 V" ~2 k. u0 R2 U% T/ f& M W- V j = 0; }

switch (state) { case STATE_INIT_COPY: ml = strlen (marker); : X) Z3 s2 y2 u m = 0; , @/ ?% q+ U% i state = STATE_COPY_INPUT; break;

韩冰

case STATE_COPY_INPUT: if (inbuf == marker[m]) { i++; m++; - |7 F3 }, |, F } else { if (m) - u$ i9 l3 q {6 _2 N6 P: Z4 Y @1 M { 1 N. p- ^5 P$ A# J, n k = 0; 0 [' z; S* k1 C0 `4 F state = STATE_FLUSHING; } else ; Y2 }' @7 {: y, Y outbuf[j++] = inbuf[i++];

} if (m == ml) 6 ]& E3 g: z8 l% G# a; x) W+ } state = STATE_INIT_READLEN; 3 C' i! e: h! U3 c break;

case STATE_FLUSHING: outbuf[j++] = marker[k++]; " ~" S, \7 Q, Q; C m--; if (m==0) . F6 Y) u/ I; X7 B3 X state = STATE_COPY_INPUT; 7 `9 j1 |, M. x$ }9 f a6 Y' b break; _2 p: m- c6 x: r3 R case STATE_SKIP_ML: i++; " L) Q+ D4 k: d if (!(--ml)) 2 q/ C$ Y$ K& h/ \. q state = nextstate; 6 t; G& }. W/ r' X$ N N# |/ G break;

case STATE_INIT_READLEN: 2 F! n; Z8 e0 o; ]6 G ml = 6; state = STATE_READLEN; break;

case STATE_READLEN: 9 ]' c$ V' N+ s) {4 y2 U( I! F lenbuf[6-ml] = inbuf[i++]; if (!(--ml)) . q4 ~& Q. q0 e4 n { len = decodeBase64 (lenbuf); m = 0; ml = 2; Y6 q5 n- Q9 Y' t; ^. o: z state = STATE_SKIP_ML; - m( @& m$ d; U" A nextstate = STATE_DECODE; * U$ Z" Q$ O1 ]; u: \+ j } + I# K% P+ }9 B( p break;

case STATE_DECODE: $ Q8 W/ l3 `7 ~ N7 Y if (!len) { / Z+ _; r2 a% C% h$ i0 S ml = 6; state = STATE_CHECKSUM; break; ' k& C& F5 q a9 x* J4 F } ' g6 b1 T% V& k0 J# p- A if (inbuf == _blank>'@') state = STATE_UNESCAPE; & V* j' n2 r( U. L. P4 ^ else 9 p P& c8 b8 L1 G e4 r7 z8 v, W { & e; W! Y" Y8 z* f% S0 ^" ? if (inbuf < 0x80) { outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; ^) `3 R0 M1 A# V# H7 ^0 p csum += c; 6 v% B$ c: @' y m++; } else { $ i) Y6 b' D) a) Q outbuf[j++] = inbuf; : r8 Y( ^# H: Z if ((cp) && (isLeadByte (cp,inbuf))) - a ]" i$ R4 o+ E state = STATE_DBCS; $ E3 j) F( A, q! H }

} $ I5 o# S( _& P% J& h3 a i++; len--; break;

case STATE_DBCS: outbuf[j++] = inbuf[i++]; 5 n4 L* Q) l2 K! Q$ D8 f2 q6 `8 L state = STATE_DECODE; break; # D1 O- w5 a- Q. E e$ ] case STATE_UNESCAPE: / V: {1 n& g8 v5 r: [ outbuf[j++] = c = unescape (inbuf[i++]); 9 o. n$ j7 S7 Q9 J, P+ e csum += c; len--; m++; state = STATE_DECODE; break;

case STATE_CHECKSUM: 0 U, [& u2 T( F/ ]/ ~7 x- j2 I8 r% k csbuf[6-ml] = inbuf[i++]; # U1 y8 n8 D# j- G; A# ] if (!(--ml)) { csum -= decodeBase64 (csbuf); if (csum) { , U8 t u$ k5 B& |0 h+ }, f3 F //printf ("Error - Incorrect checksum! (%lu)\n", csum); //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] } ) w: l" @% G/ ~( D' k m = 0; ml = 6; state = STATE_SKIP_ML; nextstate = STATE_INIT_COPY; } break;

default: printf ("Invalid state: %d\n", state); $ I7 z& M1 }, T' M break; } } 2 ]) y9 }* P7 \* W1 t) m6 H- p fwrite (outbuf, sizeof (char), j, outfile); : i# S/ P" J4 Q) U' H fclose (infile); 7 R$ |1 Z7 q! U* T* N fclose (outfile); return 0; 2 H' R& F4 x; e; v, p2 G+ F9 ]}

int main (int argc, char **argv) { ( ~; G) }' ]/ b* |9 L int cp = 0;

if (argc < 3) ( ]! i7 ?' }& K D) u }! c { : z; `' d4 H! K" a" G; q6 J8 f/ r( p printf ("Decoder for Microsoft Script Encoder v1.3\n" "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" : ^* `, ~( v) d' M' a0 T* A "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" "Usage: scrdec13 [codepage]\n\n" 1 J/ k# a, A* O% ~ "Code pages can be 932 - Japanese\n" 4 E0 Z4 A) Z) Q3 K " 936 - Chinese (Simplified)\n" % ^* b! e( b9 o* M- z+ D " 950 - Chinese (Traditional)\n" 4 K4 I. s" J6 d. D " 949 - Korean (Wansung)\n" ( @: [: T3 E7 m- q8 P " 1361 - Korean (Johab)\n" "Any other code pages don't need to be specified.\n"); return 10; }

if (argc > 3) $ t# J2 Y o! ]; A4 H# { cp = atoi (argv[3]); * v/ \8 r6 i; f9 |0 p+ U: I return ScriptDecoder (argv[1], argv[2], cp); 7 S. X$ k6 O9 U}