网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

7 N5 X- w* N% T5 N3 l6 ^1 |( s

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

- U/ A* F% x Q; [, b( X

附scrdec1.3源代码[c代码]：

/**********************************************************************/ /* scrdec.c - Decoder for Microsoft Script Encoder */ - I2 `7 X6 w' ^% O! J/ V/* Version 1.3 */ % ^* Q7 l) N) R( b* |/* */ / T9 o" H1 v7 w! Y/* COPYRIGHT: */ /* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ * Q |) e* f2 ~/* Some changes by Joe Steele to correct minor stuff */ 4 b. v5 X5 F7 z2 b0 I7 Q+ U/* */ " }2 u1 y4 w- |: f m8 E/ \/* DISCLAIMER: */ ( v5 @# V* M7 ]2 m6 U/* This program is for demonstrative and educational purposes only. */ /* Use of this program is at your own risk. The author cannot be held */ /* responsible if any laws are broken by use of this program. */ /* */ : J1 s0 u( ~7 R9 r" Q& n" V \0 b5 ~/* If you use or distribute this code, this message should be held */ /* intact. Also, any program based upon this code should display the */ 6 Y- s* Y# T$ j: L3 O/* copyright message and the disclaimer. */ 0 |: N$ g6 T) |/**********************************************************************/

#include #include 2 ~8 U+ y* O: M#include

#define LEN_OUTBUF 64 #define LEN_INBUF 1024

" I3 V& e4 r9 w( s* I8 d4 z# Q- l

#define STATE_INIT_COPY 100 #define STATE_COPY_INPUT 101 #define STATE_SKIP_ML 102 , D. P/ w6 J A ^8 ? \' i" _#define STATE_CHECKSUM 103 #define STATE_READLEN 104 ' r: L) \- s, ~: P#define STATE_DECODE 105 #define STATE_UNESCAPE 106 #define STATE_FLUSHING 107 #define STATE_DBCS 108 : }7 Q1 ]0 V1 Q M* c- ^#define STATE_INIT_READLEN 109

8 z O. ]1 Y/ n# T

unsigned char rawData[292] = { 6 l6 c/ y5 Q: m5 I# L 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, * d3 k3 g: S: l& i0 m 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, ' [! |; H) Q' y: {( _- n 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, 4 j* D$ w5 [0 P 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, - z4 u4 j$ Q' Z0 B9 n' W 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 7 N" I! W1 T. s% t& c( u3 Z6 ~& z 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, ) R o" w/ }. X- i3 u T+ w 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, $ a9 k/ J4 } G9 }3 z Y 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, ( S' s9 k7 p7 u6 W! K 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 3 X! u& X+ O7 Y" \4 d) I" r 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 2 i8 V( O2 G) }# e+ f 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, 0x51,0x67,0x2f 2 A. e& s8 U' o* e* H} ;

0 k" ]0 W& {1 }% T1 [ ~/ h3 L6 X( |

const unsigned char pick_encoding[64] = { 1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 0 a( [. a" d/ f I1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 };

* G/ I( U V9 Z+ q

unsigned char transformed[3][128]; 0 e8 _+ M9 c+ Z* ?5 Q) Y" Aint digits[0x7b];

; @7 [+ ~1 g7 N1 D

unsigned char unescape (unsigned char c) 1 Z, A; N, H9 Q( l' {{ ! T; D7 D1 S( \9 C static unsigned char escapes[] = "#&!*$"; 6 ?5 r, u: x% H9 q1 q6 w static unsigned char escaped[] = "\r\n<>@"; / `) z& C$ \# G. j9 A int i=0;

8 z# x; i% `. A8 B6 w. t5 d8 Z! G

if (c > 127) return c; . E! U9 I$ a4 Q! y& d" D+ H while (escapes) { if (escapes == c) / O* x y2 f8 o" n0 ^* Z return escaped; i++; } return '?'; ! E& S0 G8 t" j Y}

void maketrans (void) { ( g; I6 Q) F4 T0 Z* F' B9 o- ^' I int i, j;

for (i=31; i<=127; i++) for (j=0; j<3; j++) G9 Q5 g4 I) \- B7 R transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; ! H5 t% B$ ? f1 ^4 Q# w8 ]/ g}

韩冰

void makedigits (void) 9 K; ~6 d& y" e+ ]{ & |3 p+ A' [3 Q; M int i;

for (i=0; i<26; i++) 3 d. D0 j6 w1 r { digits['A'+i] = i; 8 }* K, p/ f. k: g0 P# T digits['a'+i] = i+26; ( t* H2 @% t) G6 t1 J O } for (i=0; i<10; i++) digits['0'+i] = i+52; digits[0x2b] = 62; digits[0x2f] = 63; }

unsigned long int decodeBase64 (unsigned char *p) { unsigned long int val = 0;

val += (digits[p[0]] << 2); val += (digits[p[1]] >> 4); val += (digits[p[1]] & 0xf) << 12; 3 r }- W" ~4 m# Z& }. ] val += ((digits[p[2]] >> 2) << 8); ) \+ \( i! A/ P! u val += ((digits[p[2]] & 0x3) << 22); 2 s) V+ c. [- B" y7 M: k val += (digits[p[3]] << 16); val += ((digits[p[4]] << 2) << 24); # {! t( W0 S) w9 i3 D val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 10 ( e) z: M0 Z6 q9 P7 Q) R6 I' t ba98 fedc & V$ b) S) l. v 76 543210 . p8 N$ a, C9 ]/ U0 k/ b5 M fedcba 98---- |- LSB -||- -||- -| |- MSB -| $ a/ D* z* b. Z+ T8 c3 C */ % m! L, c: f" J( o1 E( F* t5 B return val; : }- F& L' A* }5 Z}

int isLeadByte (unsigned int cp, unsigned char ucByte) 7 ?. c* B# e, e! c9 k. X9 O{ / k1 R' w) L+ r! M/ \6 i /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f 0xe0-0xfc , r' w% F1 [, ^ 936 - Simplified Chinese GBK - 0xa1-0xfe 949 - Korean Wansung - 0x81-0xfe ' q% ]5 m: y0 {( w 950 - Traditional Chinese Big5 - 0x81-0xfe 1 k2 r* L6 H" _- o& `' y 1361 - Korean Johab - 0x84-0xd3 0xd9-0xde 0xe0-0xf9 */ 1 f0 j A- D% M5 C- c switch (cp) ' d& U+ M8 n5 g) C8 y { case 932: if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; 4 g+ W5 J: ]9 _& E; Y8 } if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; else return 0; 8 X/ W/ w/ T4 W4 r: h( b case 936: if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; else return 0; 2 o' t S' `4 R+ e+ O case 949: case 950: if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; case 1361: if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; 7 g( B$ p1 q& C if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; - ^+ l `) k. e( z1 n else return 0; : {3 R9 G5 E9 H" H/ t default: return 0; }

}

int ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) { unsigned char inbuf[LEN_INBUF+1]; unsigned char outbuf[LEN_OUTBUF+1]; 0 G2 {7 d1 b& n' L; t1 q unsigned char c, lenbuf[7], csbuf[7]; unsigned char marker[] = "#@~^"; int nextstate, state = 0; int i, j, k, m, ml = 0; ; E, o0 o: i. j" p# J+ h* d unsigned long int csum = 0, len = 0; 1 e& @: p' o) Q8 }* I FILE *infile, *outfile;

infile = fopen (inname, "rb"); " n! Q( H4 b0 y: H/ g# k outfile = fopen (outname, "wb"); 7 ^8 y" u. o; {7 G( r7 q8 @ Y if (!infile || !outfile) ; ]# o% d2 U) l) d& K) u/ b* \- K { ' _6 \2 k* _9 l8 N# N5 z printf ("Error opening file!\n"); return 10; , N0 J4 m2 {* E& u M ^7 r, } } $ ? d0 a" Q) {! F# U3 K9 `" I maketrans(); makedigits(); 2 \% e8 J' F/ ] f$ M memset (inbuf, 0, sizeof (inbuf)); memset (outbuf, 0, sizeof (outbuf)); ; c: e5 u( d. s2 C memset (lenbuf, 0, sizeof (lenbuf)); : I( D j n+ V& K9 c state = STATE_INIT_COPY; / {4 {" ?9 Z3 n7 _, ? i = 0; j = 0;

while (state) { if (inbuf == 0) 9 S9 o$ {6 T+ e: `: M) s- n { , @& S A* N, f6 d if (feof (infile)) 5 E/ [( |+ d2 m9 ?4 |5 e) N break;

memset (inbuf, 0, sizeof (inbuf)); fgets (inbuf, LEN_INBUF, infile); " c6 \! v) I' [+ D i = 0; ! I/ u, l* P4 S7 v7 o) f0 i. P z continue; [& l& D9 k+ M9 O* h* ~ }

if (j == LEN_OUTBUF) z1 [, M9 { [* m { fwrite (outbuf, sizeof(char), j, outfile); ; |2 i6 ]( w0 w j = 0; }

switch (state) { ( a% A D5 u0 P! Q9 `- U( t/ D case STATE_INIT_COPY: 8 X3 g; _ D1 N6 f6 @& e# H' c ml = strlen (marker); m = 0; state = STATE_COPY_INPUT; 5 k) Q2 |" N; f break;

韩冰

case STATE_COPY_INPUT: & I5 y! w7 w: @! e" l4 ?5 A if (inbuf == marker[m]) { 2 }6 a- i! Q. ] i++; % X& ^: W- H1 q' m& j3 Q m++; $ E% C( M- q) R3 P; u4 p2 ~ } $ `" `9 K9 D2 a else 5 x1 Y3 D5 y* r7 b: ]: b: s { 7 O' d* i6 b, {, o if (m) { k = 0; / e% w* P& q0 G& m/ m9 z2 @1 y state = STATE_FLUSHING; 2 K) l% `; Z! } } ; Q& ~/ Y y7 t& u, F4 I else outbuf[j++] = inbuf[i++];

} Z9 \; ]8 _1 j4 T if (m == ml) T1 U8 e4 \; Q; y) n state = STATE_INIT_READLEN; break;

case STATE_FLUSHING: 0 m8 S! B: e# H- p- e% F outbuf[j++] = marker[k++]; z( E* |6 b0 f- }3 ~/ i m--; if (m==0) state = STATE_COPY_INPUT; * s) T4 G1 ~3 {' z break; , L$ s2 A8 q1 U case STATE_SKIP_ML: i++; ! Y- {$ Q4 o$ I6 M- m/ _& V7 U( ] if (!(--ml)) state = nextstate; ! R% y n% ~- C9 l7 Q; v9 h break;

! | ^! L- Z2 s$ r0 e case STATE_INIT_READLEN: " I& T' F' A- L/ d6 { ml = 6; state = STATE_READLEN; 8 Q# M. [; Q0 G, D# ]5 x* }) ? break;

case STATE_READLEN: 7 j% \& ^' Y N lenbuf[6-ml] = inbuf[i++]; 2 ?) \3 _# F8 l if (!(--ml)) # x) W+ j% _" }1 d% o" |- p { len = decodeBase64 (lenbuf); m = 0; , @6 U( {7 d4 w* \& q ml = 2; 0 v( J$ ?0 d" X" ~# N state = STATE_SKIP_ML; nextstate = STATE_DECODE; } 1 X% W$ x% j2 @0 i. B2 ?* r' w U break;

case STATE_DECODE: if (!len) @4 r+ P ?: n5 W* F { ml = 6; state = STATE_CHECKSUM; 1 \3 l- x- _ |& R0 z$ ? break; % p7 i5 [7 Z9 N7 e } : n, k8 i y. i if (inbuf == _blank>'@') state = STATE_UNESCAPE; else { if (inbuf < 0x80) { 8 G2 v; U/ K! ?% x/ V3 {: `1 k outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; csum += c; 0 o0 G! B# A6 ?% Q8 v. s- Q m++; } 7 {+ u7 `0 y7 k1 [4 Z' ?" w: B( L else ' ^ }; n, ?# e: C0 @# a" X0 Q' U { " Z' Y. \( ~- o% | outbuf[j++] = inbuf; if ((cp) && (isLeadByte (cp,inbuf))) state = STATE_DBCS; 9 f0 L9 w2 U4 r C. u; `8 x }

} i++; len--; + ?0 r0 K; @! O' {5 c( l break;

case STATE_DBCS: outbuf[j++] = inbuf[i++]; , F! x) E0 n( f$ L state = STATE_DECODE; / [& L# s4 l/ c/ G1 P- w" Y" j( C break; case STATE_UNESCAPE: 9 `1 L. l6 S7 b outbuf[j++] = c = unescape (inbuf[i++]); : ?9 g- W1 C. ]& T csum += c; 1 O c3 j3 ^, a! N2 s7 { len--; m++; state = STATE_DECODE; 7 I* I7 M4 D/ H/ `- a w3 u break;

case STATE_CHECKSUM: csbuf[6-ml] = inbuf[i++]; if (!(--ml)) { ' f" z7 {) n Y8 {* |* ^ csum -= decodeBase64 (csbuf); ; o" ?2 T/ R- z. a- A0 `- L/ D( w if (csum) { : X5 [+ l) h0 M8 M1 ] //printf ("Error - Incorrect checksum! (%lu)\n", csum); //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] } 6 R& R2 O6 R: ^+ u m = 0; / D0 @% U8 w' a* z1 J ml = 6; 3 k' t& G, R* @- X F state = STATE_SKIP_ML; nextstate = STATE_INIT_COPY; } break;

default: printf ("Invalid state: %d\n", state); % s1 B% C6 O# H break; } 8 x7 T' F9 W4 }) K( F' c6 S } 2 u: V6 _+ p c% \% }+ d7 | fwrite (outbuf, sizeof (char), j, outfile); fclose (infile); fclose (outfile); 6 E0 n: F7 J$ E7 P0 w& ~ return 0; }

2 _( |' B" _7 U1 `8 C2 p8 B3 iint main (int argc, char **argv) { g# f4 x9 F: L! \* o int cp = 0;

if (argc < 3) & e- B& P0 E! _. W# e; E1 X { * |% o- K$ x. g printf ("Decoder for Microsoft Script Encoder v1.3\n" "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" "Usage: scrdec13 [codepage]\n\n" ; a2 l/ t) q" C3 i) ^' j+ J "Code pages can be 932 - Japanese\n" 6 g. D- r( }5 R' N8 [4 f " 936 - Chinese (Simplified)\n" ) [$ o2 h& K! M% L2 n6 N% X " 950 - Chinese (Traditional)\n" 6 B, }: k7 K* p* l " 949 - Korean (Wansung)\n" 6 y. K/ L# L/ m$ r " 1361 - Korean (Johab)\n" ! n( Q+ r% R( @( x "Any other code pages don't need to be specified.\n"); 2 g' |7 z e/ ~. V( ~6 h8 f- y. E return 10; ) v/ }( ?+ M F1 [. B }

if (argc > 3) cp = atoi (argv[3]); return ScriptDecoder (argv[1], argv[2], cp); & A% ^; R# d3 N5 V3 o3 C}