网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

6 Y4 O- W4 O* F9 v% f9 r+ f

附scrdec1.3源代码[c代码]：

. B4 E8 y* J: g$ U6 B) S' z* p, U* i

/**********************************************************************/ /* scrdec.c - Decoder for Microsoft Script Encoder */ /* Version 1.3 */ 1 q n$ P [6 f, C8 Q8 c5 F$ i/* */ /* COPYRIGHT: */ 8 U V: S q; ~6 j/* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ /* Some changes by Joe Steele to correct minor stuff */ /* */ /* DISCLAIMER: */ /* This program is for demonstrative and educational purposes only. */ # y% m3 g* [( [. t. |; ^. j/* Use of this program is at your own risk. The author cannot be held */ /* responsible if any laws are broken by use of this program. */ % R- M' l9 q+ }/* */ /* If you use or distribute this code, this message should be held */ /* intact. Also, any program based upon this code should display the */ 4 A# M4 P, V3 |; @: [' A3 n- [/* copyright message and the disclaimer. */ : g( X- D) r2 w$ x" ^ F( `( E/**********************************************************************/

: n, L$ ]8 ` m7 w6 l3 W

#include #include 6 k2 c2 p- k4 R$ B/ ^#include

& s. M. @7 s7 c6 w, `' |6 F: u. g

#define LEN_OUTBUF 64 / r* T$ f, n' I! B d5 K- S#define LEN_INBUF 1024

) \# Z# B9 d( K% _/ T4 n# C

#define STATE_INIT_COPY 100 8 w% m4 s9 h' d( d9 S: ?#define STATE_COPY_INPUT 101 # ^( @$ D \" D3 U6 E! _#define STATE_SKIP_ML 102 #define STATE_CHECKSUM 103 #define STATE_READLEN 104 ; c" i4 u e* C; {/ G7 r V#define STATE_DECODE 105 1 k) ]% ]. f1 T% p#define STATE_UNESCAPE 106 #define STATE_FLUSHING 107 9 g( z8 ^$ P( S% t! T#define STATE_DBCS 108 E& H# x2 o. N) F" f# S#define STATE_INIT_READLEN 109

: `/ Y9 P4 p' O5 I$ T

unsigned char rawData[292] = { 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 8 j$ x6 o, a2 z6 M# }$ V: @/ I 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, - ]# m4 @% o. r; j4 h 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, . e, ?5 @& ~ u" ?7 @ 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, ; V, ^! o3 n! q6 [9 S5 r* H 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, + q' Q4 P! R8 l; v- u 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, q' a9 E- A0 v; n% ? 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, : b9 H. K; U; n: h. r 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, ) ~. m8 i8 v" h, V5 q 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, i3 A0 c x- { 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 4 ?! [( m2 J* Y0 V1 y1 V A( a 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, 6 P: [: a# B$ X) Y f: d% n% w 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 8 t7 U/ B' }5 ^ E( T 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, - f/ p! N4 M x, o2 c 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, 4 L5 @9 ]$ q# M1 g2 m4 v. ]* [- L. y 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, 0x51,0x67,0x2f 4 ~/ {. E5 q ?, o1 |0 c} ;

const unsigned char pick_encoding[64] = { 1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, ; s, T4 P0 d- |& L1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, * W& I7 f4 S1 V" _' z1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 };

unsigned char transformed[3][128]; int digits[0x7b];

& T1 o/ I7 n. G, ~6 A

unsigned char unescape (unsigned char c) & l9 ^5 y1 {& Y0 ~; F" V{ static unsigned char escapes[] = "#&!*$"; static unsigned char escaped[] = "\r\n<>@"; / S f) _9 v9 }. }/ ^2 x int i=0;

5 N2 G, w( T* L6 v

if (c > 127) 4 j8 f4 v% N# ?8 I$ s" s return c; 7 s* H( s* w. ~2 [ while (escapes) 0 y% e% E& l4 H2 y) v9 i2 e { ; m8 }1 H- q6 \6 T0 \6 P$ Z if (escapes == c) 8 D! `5 X; H0 K4 r4 ]9 c9 I/ A# z- { return escaped; i++; * u8 j7 n* w; r2 s/ g } * h+ l a m# t return '?'; }

void maketrans (void) { int i, j;

for (i=31; i<=127; i++) for (j=0; j<3; j++) 7 u. ^+ ]$ x2 C/ p8 R' T' d" ]# K transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; }

韩冰

void makedigits (void) { % p7 h1 A( O6 D1 z3 ~, T; P int i;

for (i=0; i<26; i++) % v' b* P. M b. K7 N9 Y! s { : l' A T/ w& d digits['A'+i] = i; digits['a'+i] = i+26; + r# _# G% V- e6 H0 b- e8 A } for (i=0; i<10; i++) digits['0'+i] = i+52; 7 x0 r+ G. D0 z: `/ ^4 X% @! L' @7 W digits[0x2b] = 62; digits[0x2f] = 63; 5 r: t; p1 ]9 H& G# ~& p/ i}

unsigned long int decodeBase64 (unsigned char *p) , E! Q z9 G7 a3 E9 t4 T) b{ unsigned long int val = 0;

val += (digits[p[0]] << 2); val += (digits[p[1]] >> 4); val += (digits[p[1]] & 0xf) << 12; / j& i/ G1 x1 [9 Z4 e# B val += ((digits[p[2]] >> 2) << 8); val += ((digits[p[2]] & 0x3) << 22); ! b* D; T' t) ?% [ val += (digits[p[3]] << 16); val += ((digits[p[4]] << 2) << 24); ; p' }: ^& Q. f1 `7 w val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 5 K/ s0 c5 c# ~8 m3 ] 10 ba98 ' j) t2 b9 Q1 t6 e# F0 B) w fedc $ q- N; j7 R3 S6 f1 v) d/ v 76 / i' @7 p! ^! N# l | 543210 fedcba 98---- |- LSB -||- -||- -| |- MSB -| */ & R; y! ?1 m8 R( }, s9 w return val; 4 W7 a& ?6 V) c, m, {}

int isLeadByte (unsigned int cp, unsigned char ucByte) % ^4 r/ O6 o9 { u5 M, l{ /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f / U& J! X9 A# s2 A 0xe0-0xfc 936 - Simplified Chinese GBK - 0xa1-0xfe ; ?1 @7 _# Q8 |% R 949 - Korean Wansung - 0x81-0xfe Q( ]& ?8 w1 O/ ^* z 950 - Traditional Chinese Big5 - 0x81-0xfe 1361 - Korean Johab - 0x84-0xd3 ! p" f0 Z K4 f& l, M 0xd9-0xde t G$ L! Q# Q: e& x0 \. ^0 q 0xe0-0xf9 */ & U& v) R2 X4 a switch (cp) J* B' q4 i' M { case 932: : a# @6 \4 t! p% S K if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; else return 0; case 936: if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; else return 0; case 949: * |. W! M m$ {4 u4 [ case 950: if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; case 1361: if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; . [# I+ y2 ^# K$ T if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; - n! n* s: { z else return 0; : h7 s: u6 h7 V6 [ default: + F7 q; B1 s& A; Y return 0; $ O1 G/ y/ A6 d9 s# F }

}

int ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) : e1 k1 q6 t& y0 u7 D/ v' c* d- u{ unsigned char inbuf[LEN_INBUF+1]; 3 e l3 @% } X2 b) P2 c unsigned char outbuf[LEN_OUTBUF+1]; 9 p. m1 }8 T( u6 X) i6 m unsigned char c, lenbuf[7], csbuf[7]; ) {6 D+ p' d, k( G unsigned char marker[] = "#@~^"; 2 @2 C. H/ |4 {* ^. ~8 F& h) n int nextstate, state = 0; ( x7 L+ V ^* A4 c) F6 s8 i int i, j, k, m, ml = 0; unsigned long int csum = 0, len = 0; 9 B% {" s: T _5 c FILE *infile, *outfile;

infile = fopen (inname, "rb"); l7 s5 N6 s4 K outfile = fopen (outname, "wb"); if (!infile || !outfile) 2 A/ }8 }5 ~3 m$ z2 p2 N+ \5 X { printf ("Error opening file!\n"); return 10; } ' W4 |1 U7 H' t8 _9 h 8 I6 W' K) Y P maketrans(); makedigits(); 9 J% X1 j: j! ~! p/ Z memset (inbuf, 0, sizeof (inbuf)); ! A; {" R w! N. h" s memset (outbuf, 0, sizeof (outbuf)); memset (lenbuf, 0, sizeof (lenbuf)); 9 i! P z' g5 Y ) P" |/ C( v* S state = STATE_INIT_COPY; i = 0; j = 0;

while (state) 5 O3 K% F$ ^9 ?! X& G- a7 P { 0 n% d3 v+ H( [ U if (inbuf == 0) 8 z' F; i; H- v8 u* C. B- s% k, U { % T, r% ]3 Y' f1 e+ N3 a9 _ if (feof (infile)) break;

memset (inbuf, 0, sizeof (inbuf)); fgets (inbuf, LEN_INBUF, infile); i = 0; : @' a" g( d5 P& Q! r continue; 9 w" x/ H# ~' \7 n! N0 H }

if (j == LEN_OUTBUF) ) t6 R4 w7 b4 l: Q8 e) A { fwrite (outbuf, sizeof(char), j, outfile); j = 0; }

switch (state) { " T7 Q5 C; U+ T9 [. D case STATE_INIT_COPY: ml = strlen (marker); 3 T9 ~! |6 j! _, O m = 0; ; @+ X5 Q6 q' o7 _ C state = STATE_COPY_INPUT; 8 j$ K' C5 O4 V$ n break;

韩冰

case STATE_COPY_INPUT: $ g* M o3 V% e3 Q, } if (inbuf == marker[m]) # C0 T( G! X; g2 ]( Y { & x* T) G$ j7 Q" r: h i++; m++; & W2 `2 F' p6 I; O; Y+ Q } else n- }! @! h6 X% v' e( r; B/ s { if (m) % u% Z, U8 G# j { 5 n7 Y d x4 ~5 e k = 0; state = STATE_FLUSHING; ( J, c' b% Y$ R, F8 I } ! S( H+ z7 R8 O$ d else outbuf[j++] = inbuf[i++];

} if (m == ml) state = STATE_INIT_READLEN; 8 L+ i( | A5 l break;

case STATE_FLUSHING: 4 f) C4 x7 s4 Z; ^2 I$ z outbuf[j++] = marker[k++]; m--; if (m==0) # K9 x( ^% n& K+ m- o state = STATE_COPY_INPUT; ( p/ g- S6 g. f- |& |2 { break; " ^9 e) e: i# K/ ] case STATE_SKIP_ML: i++; ! K) [$ d% R( `7 ^# [# b if (!(--ml)) state = nextstate; break;

case STATE_INIT_READLEN: ml = 6; 6 N' Q7 B; M+ g. Q; O" A: i& t' Z state = STATE_READLEN; break;

case STATE_READLEN: 4 U. S" A4 R7 z3 q, b) Z/ [ lenbuf[6-ml] = inbuf[i++]; ! s" V' S: X/ H# y if (!(--ml)) { ! U' Q0 N& \7 E* x len = decodeBase64 (lenbuf); 2 q1 S$ k9 {- K m = 0; ml = 2; 0 k" ^! v4 }# W! k- k% l5 R state = STATE_SKIP_ML; nextstate = STATE_DECODE; * P+ Y9 a& a2 E* `5 m, X } 4 T! ?: `+ f) l8 d" ~ break;

case STATE_DECODE: if (!len) 3 o% P [* ?& v' M, H { ; t3 _* Q( d: A0 z- Q# {5 }3 w ml = 6; state = STATE_CHECKSUM; ! Z* \1 ^' E# K- p break; & E4 f" M+ [7 m$ S } & m3 Q/ f9 ~4 T8 l; w, A7 H if (inbuf == _blank>'@') state = STATE_UNESCAPE; ' N, u7 {% Z! e else & r9 w* x$ A) q! I9 s4 r { , O# ]3 G7 N. e if (inbuf < 0x80) { ! l5 q/ j+ P8 L5 p+ M( P9 K outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; 9 F5 z- e+ e, c# G csum += c; m++; } else { outbuf[j++] = inbuf; if ((cp) && (isLeadByte (cp,inbuf))) state = STATE_DBCS; 2 x& c- U) e" S, |- U }

} i++; len--; ; O* E" x3 c/ Z break;

case STATE_DBCS: ' d; T+ h: u! W7 ] outbuf[j++] = inbuf[i++]; state = STATE_DECODE; + x! N$ u. _" g. j2 |* C break; case STATE_UNESCAPE: 9 p% X5 K( l2 ^+ ^- b+ M) a outbuf[j++] = c = unescape (inbuf[i++]); csum += c; len--; & S3 J3 J: b) V m++; ) X: h/ F+ `, |! X( a2 F state = STATE_DECODE; 9 M* G: ^) O3 i9 C. i& V* z break;

case STATE_CHECKSUM: 2 H- X9 L) L/ f: G) l) ~9 j csbuf[6-ml] = inbuf[i++]; $ D/ \, Y3 S- _: F7 G; W if (!(--ml)) { ' S8 B& k/ a2 p4 o% R: H csum -= decodeBase64 (csbuf); / m. u) ^: L! Z0 g! I5 @8 J4 x if (csum) 6 G3 U- m% q/ y% @. Q+ H4 W* | { 5 c: t5 l- l ]* h) N( T" j //printf ("Error - Incorrect checksum! (%lu)\n", csum); //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] 9 s$ d, s* O" r; F4 b9 J) e& T) X } 5 y0 S/ }/ Y3 |, ^4 _0 {" i m = 0; ml = 6; state = STATE_SKIP_ML; nextstate = STATE_INIT_COPY; } 8 V7 ?& |0 R$ B- t4 ? break;

default: printf ("Invalid state: %d\n", state); break; " p/ N: p1 s( Q } } fwrite (outbuf, sizeof (char), j, outfile); fclose (infile); fclose (outfile); return 0; }

& a- Z3 ~& U0 p% V5 k4 o5 A- Kint main (int argc, char **argv) 4 `! {7 G9 s. t$ `{ 3 @% ^; \0 c% s {$ p$ \: l: f int cp = 0;

if (argc < 3) { printf ("Decoder for Microsoft Script Encoder v1.3\n" "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" "Usage: scrdec13 [codepage]\n\n" 6 Q) ?& D: R9 ^# n' L "Code pages can be 932 - Japanese\n" + N' J6 l. F7 N3 L( g H+ g " 936 - Chinese (Simplified)\n" " 950 - Chinese (Traditional)\n" " 949 - Korean (Wansung)\n" " 1361 - Korean (Johab)\n" "Any other code pages don't need to be specified.\n"); 3 _# I* O( ~& _ return 10; $ u: N5 P% d4 q, J5 G3 W( k }

if (argc > 3) cp = atoi (argv[3]); ! d0 `5 |5 r) H3 g return ScriptDecoder (argv[1], argv[2], cp); }