网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

附scrdec1.3源代码[c代码]：

: g9 {- B" ?- y( G! i4 W0 k p

/**********************************************************************/ /* scrdec.c - Decoder for Microsoft Script Encoder */ 6 S1 h0 C: u7 V/* Version 1.3 */ /* */ /* COPYRIGHT: */ /* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ /* Some changes by Joe Steele to correct minor stuff */ & I) Y6 }! f9 X9 |6 w+ I1 D/* */ 1 L0 {) k# y. K/* DISCLAIMER: */ /* This program is for demonstrative and educational purposes only. */ /* Use of this program is at your own risk. The author cannot be held */ # ]! r$ F0 L2 O3 E& }$ x& @9 I/* responsible if any laws are broken by use of this program. */ /* */ /* If you use or distribute this code, this message should be held */ 3 \1 s/ E6 R8 j' ]) O! v( V: |6 j/* intact. Also, any program based upon this code should display the */ 2 b) k) T4 w% q- d) h _( I# C: ?/ S7 K/* copyright message and the disclaimer. */ /**********************************************************************/

#include $ \7 I/ R9 g5 T9 X% u L! `#include #include

#define LEN_OUTBUF 64 . W) K [$ Y4 |! ?. w6 E& W#define LEN_INBUF 1024

#define STATE_INIT_COPY 100 1 V2 u1 d- Q" r#define STATE_COPY_INPUT 101 . {6 q- |7 V A#define STATE_SKIP_ML 102 6 T, l9 \1 e) T" A m, M#define STATE_CHECKSUM 103 & t# S; D. {. e ^0 W }2 g& B: w6 c#define STATE_READLEN 104 / }3 t! k: j: d P! _7 U3 O" Q#define STATE_DECODE 105 ( h# X- ` W3 k#define STATE_UNESCAPE 106 #define STATE_FLUSHING 107 #define STATE_DBCS 108 8 I6 N) I% `# Z& Z" v% y7 j. A, I#define STATE_INIT_READLEN 109

unsigned char rawData[292] = { 0 V* |. k1 S1 Q/ _0 b 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, % ^2 N5 ?& {4 T0 _% B 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, ; w y& X% g! `6 c- t 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, / `$ D1 `& G5 c$ ? 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 3 g4 K5 O$ d ^) c5 ^1 D9 b 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, ( Q- `* Y; M: w+ Y& I 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, + k) L( x9 m& Y, d4 @- z 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, 0x51,0x67,0x2f 7 z9 G1 e) r8 |3 |+ y4 t( F} ;

const unsigned char pick_encoding[64] = { 1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 4 x9 M/ a: ?% h% s1 ^$ H; h( ^1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 2 t) Q; @& }8 o' Q; E1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 };

unsigned char transformed[3][128]; . L- h1 J T* R, P! gint digits[0x7b];

! }& @- i& ~/ E

unsigned char unescape (unsigned char c) { 6 I: _) m+ ~; E! ^% b static unsigned char escapes[] = "#&!*$"; : P7 E6 t( ?/ |6 ]6 n static unsigned char escaped[] = "\r\n<>@"; int i=0;

& x& }- V* g( |

if (c > 127) return c; while (escapes) ( u( M& w6 }9 F+ Z6 C3 R- O { if (escapes == c) return escaped; i++; . a3 [0 t. r( Q2 s$ E } return '?'; }

! s! s" U: ?9 F: y- i) V( U6 u2 r# T

void maketrans (void) { ! ]- D. V+ q1 c, r$ c int i, j;

: d9 n% Z1 N4 @

for (i=31; i<=127; i++) 8 I6 n- Q$ b: o2 e for (j=0; j<3; j++) . C& k0 F( U) o+ }1 ` transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; }

韩冰

void makedigits (void) { int i;

for (i=0; i<26; i++) { digits['A'+i] = i; 6 S8 W3 R# h5 n7 W) `6 e4 U digits['a'+i] = i+26; ! s' }+ \% k& f) W( k } } for (i=0; i<10; i++) digits['0'+i] = i+52; 2 Y V1 ~* Q5 Q) k+ d digits[0x2b] = 62; digits[0x2f] = 63; ; \: C* a( y D2 {* k* k- N}

unsigned long int decodeBase64 (unsigned char *p) { ; O# W# ~" y3 n, s unsigned long int val = 0;

val += (digits[p[0]] << 2); val += (digits[p[1]] >> 4); 9 U# ]3 N( i) A val += (digits[p[1]] & 0xf) << 12; val += ((digits[p[2]] >> 2) << 8); . u# T n. L+ U val += ((digits[p[2]] & 0x3) << 22); val += (digits[p[3]] << 16); val += ((digits[p[4]] << 2) << 24); val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 c) M+ Z6 N" ?; s! X C' H 10 7 p& k( i; L0 T4 H; c* s' V- w3 I) P ba98 * C% H# U* c& ] fedc 76 9 G2 @) B9 j( f; f0 S, [, U. b 543210 fedcba 98---- |- LSB -||- -||- -| |- MSB -| , p6 l1 H7 B( W; M. k+ I */ return val; : i. E/ q& G" p0 W" S7 m% }: g}

int isLeadByte (unsigned int cp, unsigned char ucByte) 9 ?: N& y. ^' I8 ?& H{ ; v/ S: o6 D1 r0 a% g! F' J' L /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f " P7 j8 c+ m; @ ]1 V3 \+ r7 H 0xe0-0xfc 8 }$ \- f; W4 ~8 i% n; E& O 936 - Simplified Chinese GBK - 0xa1-0xfe % ~- Q7 {9 u q5 z: E$ D- _5 s7 n 949 - Korean Wansung - 0x81-0xfe 950 - Traditional Chinese Big5 - 0x81-0xfe 1361 - Korean Johab - 0x84-0xd3 0xd9-0xde 0xe0-0xf9 */ switch (cp) { 7 y6 T2 }. ^9 V% I; o, B' t) a( [+ B6 s case 932: - V8 z$ H4 ]4 _- w7 m if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; F9 V1 t/ S7 ?( w" }- z' M% E6 | else return 0; case 936: if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; ! @0 l! ]' p, S3 | else return 0; case 949: $ W( b/ _' p9 M( S1 p; a4 E case 950: 4 |- r/ y/ ]; O+ A if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; 3 S; p. Q. c8 w* e- D case 1361: - i1 Y* _9 u! J: Z if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; F/ R* `6 J; t8 K, W if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; else return 0; ; x. l4 i" A0 Y" o& q default: return 0; - M8 [2 h6 s7 N* V3 l; {8 ]6 j3 } }

}

int ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) 5 Y8 r# G ^( @$ z" \5 Y2 A{ unsigned char inbuf[LEN_INBUF+1]; - q3 a0 I3 R J! T unsigned char outbuf[LEN_OUTBUF+1]; unsigned char c, lenbuf[7], csbuf[7]; # R5 o& n4 K7 U unsigned char marker[] = "#@~^"; int nextstate, state = 0; ; _; Q4 m! Y" |% z2 u2 E4 m- s0 j& X: L int i, j, k, m, ml = 0; unsigned long int csum = 0, len = 0; ) z( X7 b, u5 ? FILE *infile, *outfile;

infile = fopen (inname, "rb"); . C& X0 ^7 c6 _1 Y5 M" u- b outfile = fopen (outname, "wb"); . F1 v& [+ A3 T) V% _# y0 g: a if (!infile || !outfile) & n9 ~+ H( \2 M5 C { # x5 O; ?( G1 t8 G printf ("Error opening file!\n"); 6 [: Q; T# x9 F; D& _ return 10; } maketrans(); 8 {; O* q4 Q2 p* n! r/ E& U makedigits(); 7 E: K; [/ o% B+ P7 S memset (inbuf, 0, sizeof (inbuf)); memset (outbuf, 0, sizeof (outbuf)); / V. ]9 o: {6 N0 w6 [ w% |" j memset (lenbuf, 0, sizeof (lenbuf)); / m& H; w Z$ c 7 b2 u5 u7 a$ V1 t4 X! w2 Q1 l( E state = STATE_INIT_COPY; 0 J, r1 `) n9 x# ^2 S* ?& x i = 0; ' e8 O' X8 q# ~ w4 C [ j = 0;

while (state) { if (inbuf == 0) { if (feof (infile)) 3 ]- r# a% g ^7 o v break;

memset (inbuf, 0, sizeof (inbuf)); fgets (inbuf, LEN_INBUF, infile); i = 0; ( a/ x& _& u0 R4 v n& N continue; }

if (j == LEN_OUTBUF) { fwrite (outbuf, sizeof(char), j, outfile); 3 O1 E* Q/ M; j5 F' G% P+ r j = 0; l2 F- @/ m) A, N% g" L" N }

switch (state) 8 W* y% p7 {% o4 I' ~* R9 l8 e { 8 A& ]1 b7 V6 Z# U( K( C case STATE_INIT_COPY: . |( v7 A/ t) {% ~ ml = strlen (marker); m = 0; state = STATE_COPY_INPUT; t9 e0 f& V. x) l break;

韩冰

case STATE_COPY_INPUT: : A# N# s$ K1 ]9 p4 V# J if (inbuf == marker[m]) { 4 f4 z# W" M, x8 L4 D i++; ! H4 o N. U# [- v2 y7 Y7 } ^ m++; } else { : W: l! f- D: c# `* _+ m if (m) { 8 ~8 N, U5 m7 X8 b9 X0 F k = 0; % j3 D0 d* Y( b8 r state = STATE_FLUSHING; } S3 P0 {- k# z- f else # x4 G+ w; m: E% B9 |1 }. T outbuf[j++] = inbuf[i++];

} 3 w5 ~- ^$ o U6 L+ x9 z if (m == ml) 6 L1 n( f8 V" j+ `6 D7 W state = STATE_INIT_READLEN; break;

case STATE_FLUSHING: 3 {( I3 i0 R8 J4 U1 A4 Y outbuf[j++] = marker[k++]; m--; ( }% t" q$ h- S* z9 L2 J/ j if (m==0) state = STATE_COPY_INPUT; 1 A/ G4 v% J# q! G2 o" B6 @7 f @7 c break; ! q! k: x/ C, T. ]1 Z4 c$ m case STATE_SKIP_ML: . c! f- h5 l9 n7 v i++; 1 {9 k1 F! x6 e" Q+ ~! h if (!(--ml)) state = nextstate; break;

case STATE_INIT_READLEN: ml = 6; state = STATE_READLEN; 7 Q) t3 b# g/ Q& z& N8 A I8 ~% f break;

case STATE_READLEN: : g4 O+ m% Q& G- ?# R, d% x lenbuf[6-ml] = inbuf[i++]; if (!(--ml)) ; H3 o6 M B2 C# p5 F% |6 }6 } { 4 ?: \/ z4 y% n; k len = decodeBase64 (lenbuf); m = 0; 5 Z0 o: |% Q1 P h' c ml = 2; state = STATE_SKIP_ML; nextstate = STATE_DECODE; / f7 |* E2 V* Z n& x' U5 g } break;

case STATE_DECODE: if (!len) + ]- D5 A3 a' r* T3 E5 z { ml = 6; 7 U- T5 t1 j; L7 A+ `5 V state = STATE_CHECKSUM; 2 Y6 g3 s, A1 j break; } if (inbuf == _blank>'@') . o% `0 a8 E: p: C" E% k2 z& a state = STATE_UNESCAPE; else { / e$ _* y% L% t1 v if (inbuf < 0x80) { 2 \' A: t U) d6 z& T+ L1 w% }( w outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; csum += c; 2 D l4 B& q1 P' O; s, k m++; } else { outbuf[j++] = inbuf; if ((cp) && (isLeadByte (cp,inbuf))) : [; d5 N5 z! y* @% v3 Z& t state = STATE_DBCS; }

} 8 {4 R8 }+ x, u% M9 i* n9 j i++; len--; # P6 _1 t/ ] i" R5 l break;

case STATE_DBCS: 3 H, i* b4 ~9 J" o outbuf[j++] = inbuf[i++]; state = STATE_DECODE; * l* y. E) v* [) j0 N& z8 D break; case STATE_UNESCAPE: outbuf[j++] = c = unescape (inbuf[i++]); csum += c; len--; m++; 8 b; M# ~! h5 R$ i9 S- i& a4 ? state = STATE_DECODE; break;

case STATE_CHECKSUM: / u7 A) p/ A4 t( j# ?; | csbuf[6-ml] = inbuf[i++]; if (!(--ml)) { csum -= decodeBase64 (csbuf); if (csum) ! v8 D6 h8 q V) v' I6 r { % s6 n( U, @* `7 I- e* y //printf ("Error - Incorrect checksum! (%lu)\n", csum); 3 ^# u* _# d, d0 u5 T* U+ R& C //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] } ) F9 i: B* ?/ _ m = 0; . T5 V* v# Y* t ml = 6; 0 f. y5 g# I% Q8 i/ Q( b/ r state = STATE_SKIP_ML; nextstate = STATE_INIT_COPY; 6 h8 {& b7 Q9 b. W* {' t } ' D. G: Q: v, G% @ break;

default: printf ("Invalid state: %d\n", state); F7 h( Y( Y% Q1 T7 Y break; } } 7 D; g6 D4 r) r7 w0 z fwrite (outbuf, sizeof (char), j, outfile); fclose (infile); fclose (outfile); d9 E1 _8 i/ J return 0; ; H, j6 u$ c" J9 s* y}

* M8 q/ ]( e: _6 r1 E! A9 I5 ^; `( Qint main (int argc, char **argv) { int cp = 0;

if (argc < 3) { printf ("Decoder for Microsoft Script Encoder v1.3\n" "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" "Usage: scrdec13 [codepage]\n\n" 7 d, S% K/ R5 } u& l, ] "Code pages can be 932 - Japanese\n" 5 M- Q; t+ F( [( s, V R " 936 - Chinese (Simplified)\n" 4 ~: j' [- |( c: O0 g8 N " 950 - Chinese (Traditional)\n" 0 v3 ]/ m/ n; o+ Y( M " 949 - Korean (Wansung)\n" - l% ]" ^# p& U2 ^6 K* W " 1361 - Korean (Johab)\n" 2 r9 B4 Q D: `+ a; `0 g "Any other code pages don't need to be specified.\n"); & K1 ^0 [8 Q; z( N \% U5 ?9 w3 L return 10; }

if (argc > 3) , B$ {! e D7 Y% j cp = atoi (argv[3]); 8 {6 D5 ~( p, b, H/ n return ScriptDecoder (argv[1], argv[2], cp); }