网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

0 b5 ^& h2 e3 x

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

+ f9 j1 ^' v5 W3 a) C6 k d+ ~

附scrdec1.3源代码[c代码]：

1 [8 W- ~0 m+ d! Z

/**********************************************************************/ 4 L q9 Q! Z* I: t/* scrdec.c - Decoder for Microsoft Script Encoder */ /* Version 1.3 */ / p2 V" T* |3 M2 X( r/* */ # k2 a& z" r# x8 D* j/* COPYRIGHT: */ % d) Q V+ l8 E# y- _/* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ /* Some changes by Joe Steele to correct minor stuff */ # O* c w+ w! L C. L! C/* */ /* DISCLAIMER: */ /* This program is for demonstrative and educational purposes only. */ + S' d( B0 B! o$ V2 k/* Use of this program is at your own risk. The author cannot be held */ /* responsible if any laws are broken by use of this program. */ 9 }& u( J* V. V+ j% d) t/* */ ! e: C e" F6 V0 D% e/* If you use or distribute this code, this message should be held */ /* intact. Also, any program based upon this code should display the */ /* copyright message and the disclaimer. */ /**********************************************************************/

0 E9 O0 c7 ^8 l) L

#include #include #include

) w$ l+ U5 ~" D1 a6 C& F& [8 r9 i, A# D

#define LEN_OUTBUF 64 #define LEN_INBUF 1024

#define STATE_INIT_COPY 100 5 u; ]- f) c$ p# W3 `, x#define STATE_COPY_INPUT 101 #define STATE_SKIP_ML 102 5 d a) c7 F- m2 g' w" v#define STATE_CHECKSUM 103 #define STATE_READLEN 104 , c2 v6 f* m6 |. O5 F; I4 h! A#define STATE_DECODE 105 + F- L9 V7 M/ m, n#define STATE_UNESCAPE 106 #define STATE_FLUSHING 107 ; G% ~- b. \# G; ?: O; n#define STATE_DBCS 108 #define STATE_INIT_READLEN 109

. t5 q8 c- E% D+ F1 \

unsigned char rawData[292] = { 0 }/ ^9 \) v s4 h7 R& O 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, ) L# Z' h1 P3 C8 t+ Y: L; R 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, , d/ C8 S2 ]6 a# `# k/ n+ _' y# l 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, . o) c1 s6 o7 I 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, J8 `8 T0 E, h3 |3 F5 ~; `$ s 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 5 g8 W$ {) k. a h8 q8 l) D% n 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, ; F( O( R0 m5 y o) [8 g5 j 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, ! z5 ?/ q2 p2 s 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, I1 a# W0 n+ k8 G( t 0x51,0x67,0x2f ( Z- G- L: u$ a9 a4 s} ;

const unsigned char pick_encoding[64] = { 1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, # D" A% P2 f1 l' B1 y1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 1 X5 j' E- [* G1 S/ @, B1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, $ U: J' }( p; B3 c9 A, [- M1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 };

6 z5 @2 f* s" V4 s6 J: d" B

unsigned char transformed[3][128]; 3 ~6 Y+ S) f1 X4 U8 K$ Zint digits[0x7b];

# a% S: Q: T) y

unsigned char unescape (unsigned char c) 8 X, X2 s" ]9 i{ % g. W6 p4 x5 @5 d$ l static unsigned char escapes[] = "#&!*$"; ) D& t$ D: H4 A- S' M$ @, b6 j static unsigned char escaped[] = "\r\n<>@"; int i=0;

4 ]( ]# I$ p: v: X9 D

if (c > 127) + q2 h# Y" c5 m. l- Q" |7 K return c; 9 w" q0 _. y: A' }6 T9 s while (escapes) $ ]# S1 b$ t- U% Z, h7 P { if (escapes == c) return escaped; ! u ~6 C0 u% j+ y0 J* u& t) i3 H! ^ i++; ( |% [' m) P, r. v } return '?'; ! g, W2 B. O) V0 ~ X7 `}

void maketrans (void) { int i, j;

$ e# S( p+ Q! J

for (i=31; i<=127; i++) 5 N r+ P6 f( b# ]! g( s for (j=0; j<3; j++) 4 C5 K, F! e1 [: g' |1 ~8 } transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; 2 h0 d1 {- b( M; C6 W8 y. w}

韩冰

void makedigits (void) / s; ]- Y! g6 q: J{ int i;

for (i=0; i<26; i++) { $ z9 G' z3 h0 j digits['A'+i] = i; digits['a'+i] = i+26; % k" t8 B# G: n# W1 Z1 `* p; y } for (i=0; i<10; i++) digits['0'+i] = i+52; digits[0x2b] = 62; digits[0x2f] = 63; }

unsigned long int decodeBase64 (unsigned char *p) + n! _' |+ o! j1 I! u: m4 O6 `{ unsigned long int val = 0;

val += (digits[p[0]] << 2); 7 m8 m- F/ o+ E3 v) r$ L val += (digits[p[1]] >> 4); 3 L: D; e7 ^/ @ val += (digits[p[1]] & 0xf) << 12; val += ((digits[p[2]] >> 2) << 8); 6 S: L$ N1 v1 t. b- Q val += ((digits[p[2]] & 0x3) << 22); val += (digits[p[3]] << 16); val += ((digits[p[4]] << 2) << 24); val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 10 2 l1 j/ m1 `# ? S) O" a7 O ba98 / w8 k3 R6 D9 k fedc 76 1 @8 i) z2 R. _) e6 y% b 543210 5 L+ y$ P5 b- S& q, d fedcba 98---- |- LSB -||- -||- -| |- MSB -| */ return val; }

int isLeadByte (unsigned int cp, unsigned char ucByte) { /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f 0xe0-0xfc * e# a2 C5 o3 z- A. Z 936 - Simplified Chinese GBK - 0xa1-0xfe - E+ c6 Q. U$ F- y( ` 949 - Korean Wansung - 0x81-0xfe 950 - Traditional Chinese Big5 - 0x81-0xfe 1361 - Korean Johab - 0x84-0xd3 2 x/ n/ |8 H$ u' h7 ^3 p+ P- ]+ y 0xd9-0xde 0xe0-0xf9 */ 9 S, G: X& r ^- `8 l$ q switch (cp) { , N* J8 y: P2 {$ t; l9 A; Q3 V/ A& z8 N6 V case 932: if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; 2 s* Z, K' D2 ~+ E) a if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; else return 0; case 936: if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; 6 i( i% p8 A+ {; Q2 H3 S else return 0; ; X! h% s* z. T3 J) y1 }) m case 949: case 950: if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; 4 V5 A8 H9 q1 \ case 1361: if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; else return 0; default: return 0; }

}

Q/ W0 f @, g/ A: i! E# T; rint ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) 5 N/ ~( |8 W0 p$ l1 u- _{ 5 C" i: C/ r+ t2 V1 E8 T unsigned char inbuf[LEN_INBUF+1]; unsigned char outbuf[LEN_OUTBUF+1]; unsigned char c, lenbuf[7], csbuf[7]; unsigned char marker[] = "#@~^"; 0 ]- k0 u, T$ N4 [; u4 _: T int nextstate, state = 0; ; G3 h/ {; h, s5 @" W- u int i, j, k, m, ml = 0; ) \7 o. f8 i! ^# r unsigned long int csum = 0, len = 0; 6 r, s5 X- {0 d FILE *infile, *outfile;

infile = fopen (inname, "rb"); outfile = fopen (outname, "wb"); if (!infile || !outfile) # |* I: P+ c4 t9 x: n { # O. a- ~" y- l# H- p8 b1 h printf ("Error opening file!\n"); return 10; } ; ]7 s3 c; t4 b0 H1 s& S: k) s / a- j3 B4 e% S5 P6 z3 V maketrans(); : v! R. R2 l0 F9 m5 |/ i makedigits(); : Z; [! o- R+ W% m7 h* H memset (inbuf, 0, sizeof (inbuf)); # U5 }* q7 M% D4 |3 ]' ~3 ]& F memset (outbuf, 0, sizeof (outbuf)); memset (lenbuf, 0, sizeof (lenbuf)); 2 Z, e [. F5 L- M: k state = STATE_INIT_COPY; ; g+ ?: H" B& [ i = 0; & F1 P. O2 j# x6 z. Q! t j = 0;

while (state) { 4 w9 `/ R) L- a if (inbuf == 0) { , {: o7 p, X' T) D, P! H( v if (feof (infile)) break;

memset (inbuf, 0, sizeof (inbuf)); ' D9 [5 e+ W" O) s7 t0 X( s# D fgets (inbuf, LEN_INBUF, infile); ! ]; C: X8 a) U7 p5 p8 B( r3 Q7 L* x i = 0; 1 V2 m' a3 r+ E1 V# M continue; }

if (j == LEN_OUTBUF) . ]: s& C3 L1 @) {' S/ h* }3 } { " f' Y4 I: Z& J' k fwrite (outbuf, sizeof(char), j, outfile); j = 0; }

switch (state) { ) c0 Z' r$ i7 @ case STATE_INIT_COPY: ml = strlen (marker); m = 0; state = STATE_COPY_INPUT; 4 s" V7 N: c: d) ~/ g2 _0 O% \0 E break;

韩冰

case STATE_COPY_INPUT: & k* }' g f6 m if (inbuf == marker[m]) { & _% R0 O: B$ ~; T$ ~ i++; m++; 4 r/ ~4 B" R1 H+ v3 x } else 1 Z; h* u: e4 {: h; i1 @ { 7 F% P C+ i1 Z; K# A% V |$ i if (m) { k = 0; . |0 D; B( j0 j3 x( J9 D3 Q/ G state = STATE_FLUSHING; } ' c. v! b# W' P* C" R0 S else outbuf[j++] = inbuf[i++];

} if (m == ml) 0 e8 q# `4 I: f/ o! c+ k state = STATE_INIT_READLEN; 0 m# V6 `* D; Q, `( R- {* C break;

case STATE_FLUSHING: / O9 ]% Y& C1 o, h3 g outbuf[j++] = marker[k++]; m--; % I" ~/ S& f3 k, `6 n, q0 \: X if (m==0) state = STATE_COPY_INPUT; & |: e: j5 |0 D4 K5 t5 U# u# b! P break; " ^3 W3 {- G, x8 W- u& @ case STATE_SKIP_ML: / q3 p5 l7 q1 l7 {6 h/ O6 k; e* @ i++; if (!(--ml)) 3 Y: {3 o3 H# B; V" I state = nextstate; break;

case STATE_INIT_READLEN: ' g$ }+ W( n( ^* m ml = 6; state = STATE_READLEN; 1 K" J2 g/ N0 ^ R6 G# J: u+ w6 b break;

case STATE_READLEN: lenbuf[6-ml] = inbuf[i++]; if (!(--ml)) ! c8 ~8 s1 ~; ^6 R! q2 A) U { len = decodeBase64 (lenbuf); * c6 h& E5 ^3 K% E, K9 j9 j m = 0; ml = 2; state = STATE_SKIP_ML; 3 d* E0 N, o* q _# C. q. k2 H nextstate = STATE_DECODE; , I& Y" p: ?% n9 d5 u } 3 S7 X: W) b; P break;

case STATE_DECODE: $ H2 P8 k$ O4 d, J. u+ { if (!len) { ml = 6; * f/ {2 q, s3 p s. }- G state = STATE_CHECKSUM; break; } if (inbuf == _blank>'@') : w& e4 ?2 S: [ ^# R( n& l state = STATE_UNESCAPE; 9 ^& O, v, o: a0 P w' Y7 ^ else { c+ x3 }7 r7 a, @' T0 K8 H, D if (inbuf < 0x80) { outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; csum += c; 2 {, _, g% ~3 C1 H5 e m++; & v' }; \8 s3 q. h; V% Q/ R8 k( X } else 7 Y& x6 {" n' k2 z4 r { 6 q5 _. H! M, t) i* O outbuf[j++] = inbuf; , d Z8 x. I4 T( B if ((cp) && (isLeadByte (cp,inbuf))) 9 h. o8 m/ ]/ d8 s1 d state = STATE_DBCS; }

} i++; 7 F+ A' r1 u5 Q% V" c, j* x, Q len--; break;

case STATE_DBCS: outbuf[j++] = inbuf[i++]; % f' z( s" K" x0 R j state = STATE_DECODE; 9 q* @2 s8 h8 `! f0 ~ break; case STATE_UNESCAPE: ( S0 F, h" g7 t, {0 { outbuf[j++] = c = unescape (inbuf[i++]); + A' a% w# G8 w- |7 Y, \: d; S; r csum += c; len--; 1 q2 u1 \5 Y1 @0 c m++; state = STATE_DECODE; break;

case STATE_CHECKSUM: 9 M- g r: P- q: f" ~) S4 s csbuf[6-ml] = inbuf[i++]; 9 O4 S. d, ?: l9 G) S if (!(--ml)) . P3 o& Y2 d0 T* ^& n; `' ^4 F { 2 W# Z) I7 G2 w7 B5 T- u8 e csum -= decodeBase64 (csbuf); * u' e" C& s, Y( u8 Y if (csum) { //printf ("Error - Incorrect checksum! (%lu)\n", csum); ( t+ F3 }4 f4 v //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] i1 J2 ?* s- F% n5 Z } 6 ?' Z; {4 U. M4 r& D6 @ m = 0; 2 j9 K7 |+ N* Y! N% e ml = 6; state = STATE_SKIP_ML; ; t3 S, f" H( t+ L! | nextstate = STATE_INIT_COPY; 0 j; m8 U) o) b' P1 V; a4 f) }1 @ } break;

default: printf ("Invalid state: %d\n", state); & C- G0 L& X1 }3 H- B break; } } % z& A; D5 N5 W% Y; P7 ^3 z: [ fwrite (outbuf, sizeof (char), j, outfile); fclose (infile); % a2 Q0 v/ {9 G! Z; R2 @9 v P fclose (outfile); ) o0 }: v! N; R return 0; }

8 E# w' @' G- L* d) @& i" O. C9 }% Oint main (int argc, char **argv) * w9 Z4 }' A) y0 U9 I- d' _{ int cp = 0;

if (argc < 3) { printf ("Decoder for Microsoft Script Encoder v1.3\n" " b/ {7 E) L% F s% y- K5 v; O3 q, d "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" - r7 Y6 \8 @2 c3 N9 p5 k "Usage: scrdec13 [codepage]\n\n" "Code pages can be 932 - Japanese\n" " 936 - Chinese (Simplified)\n" % C: W8 i# L& q I* s1 x! T" ]: @ " 950 - Chinese (Traditional)\n" 7 m$ _; J" C- s f* ~ " 949 - Korean (Wansung)\n" ! g* t. N; i) J& ^2 S+ ~( ] " 1361 - Korean (Johab)\n" "Any other code pages don't need to be specified.\n"); . n9 S6 R5 b2 e$ D; S& \ return 10; }

if (argc > 3) cp = atoi (argv[3]); return ScriptDecoder (argv[1], argv[2], cp); }