网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

+ d; c$ S9 D' W/ Z( h" q# ?, \

附scrdec1.3源代码[c代码]：

/**********************************************************************/ /* scrdec.c - Decoder for Microsoft Script Encoder */ + g ]1 n; w7 L) X A/* Version 1.3 */ ( W6 i: q! x, r; `3 a8 O/* */ 0 W# K! Y" J( w0 W, v. c& [( j" E/* COPYRIGHT: */ / z# ~0 x9 `% M8 j' f/* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ /* Some changes by Joe Steele to correct minor stuff */ & J! V: \/ W7 d% a3 ^- n/* */ /* DISCLAIMER: */ /* This program is for demonstrative and educational purposes only. */ /* Use of this program is at your own risk. The author cannot be held */ /* responsible if any laws are broken by use of this program. */ /* */ /* If you use or distribute this code, this message should be held */ ; t4 x7 ]$ M0 S8 @2 H- H3 A/* intact. Also, any program based upon this code should display the */ /* copyright message and the disclaimer. */ ' ~' Y! r6 l& K1 e/**********************************************************************/

, G9 G# v' s. f9 Q

#include #include 3 q' z9 ~3 x$ K( J' L) [ h#include

#define LEN_OUTBUF 64 #define LEN_INBUF 1024

0 U. e! Y$ {" _& ]( t, u* ]

#define STATE_INIT_COPY 100 #define STATE_COPY_INPUT 101 #define STATE_SKIP_ML 102 + B) p1 ]% t. F5 k# l9 s! U, i#define STATE_CHECKSUM 103 / M2 e9 [. W; P7 {" S; z0 Q#define STATE_READLEN 104 ! r4 F9 y/ a% q6 T; b! \3 @#define STATE_DECODE 105 #define STATE_UNESCAPE 106 6 m9 p' ~: G1 G& k j$ ^! u#define STATE_FLUSHING 107 #define STATE_DBCS 108 & T9 H) l( M. s. E `#define STATE_INIT_READLEN 109

6 |4 P/ A3 X) H' b5 N

unsigned char rawData[292] = { 7 U2 G, Z1 G3 E, o* B6 Z+ ?& w 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, 3 I7 |; ^1 x. | 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, - ?! y6 x1 u+ v' \2 h4 H 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, " T% B. @( s- J! e 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 5 q5 O! |: k- J* ?% t0 D 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, ! W8 Y7 `% ^9 l" ?$ A' J3 e$ c( X& P/ K 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, , c+ Z* h5 H1 S/ D4 l 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, ) q. V8 x. N) Z0 X 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, ' x/ t3 U5 y% r" U 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, ' Y8 Y, }, e4 S2 C% W 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, 0x51,0x67,0x2f } ;

const unsigned char pick_encoding[64] = { 1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, % V" e+ g0 v+ Y4 _2 W3 ?1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, ( b" E Z0 H$ ^- o& B1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 + z& _8 P* b) B$ ?& j};

) ?8 {' t% o0 l9 P

unsigned char transformed[3][128]; % A! G4 X0 G, N9 B) dint digits[0x7b];

, _1 l8 p/ d3 p/ \/ V( D

unsigned char unescape (unsigned char c) 3 Q. _& B9 D. C& J+ B& G{ static unsigned char escapes[] = "#&!*$"; static unsigned char escaped[] = "\r\n<>@"; int i=0;

# ~6 G" F/ i$ i' Y" ]. s

if (c > 127) % I3 o& C) z( [& B7 K8 l; d return c; while (escapes) # A& q: Q$ R; r8 ]3 Q { - w) ?; P7 O% L* L if (escapes == c) return escaped; 8 z/ i- f! G- y5 ?- V i++; & _+ Y' g; x/ {0 I3 h+ t } . x# t2 k5 B+ |# _ return '?'; }

void maketrans (void) 9 T, ^7 O, L' x* F{ - g* J% z( k" o+ L0 n3 ` int i, j;

8 x# |$ `4 I/ ~7 o3 C

for (i=31; i<=127; i++) 1 j% W$ L2 x( {7 Y |2 C for (j=0; j<3; j++) h% Z0 N# d6 w transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; }

韩冰

void makedigits (void) & p- J5 V4 |" J5 M{ int i;

for (i=0; i<26; i++) / q d+ h$ S0 S6 x) y+ | { 1 K( Q* K c8 e) L digits['A'+i] = i; : }2 n7 _, S0 q/ R- j6 j% h! ] digits['a'+i] = i+26; ! C5 H+ X! K( u0 F1 p6 j/ E O; W } 7 p5 A; o- h" z) ~6 p) ?" h9 ` for (i=0; i<10; i++) 7 m! c. ?. }2 x6 D. @: {* a, P digits['0'+i] = i+52; 7 S5 H" [& r2 ]) W' `2 | digits[0x2b] = 62; N5 a5 T$ [. g# \0 X) p digits[0x2f] = 63; L& [- V+ y; s: B}

unsigned long int decodeBase64 (unsigned char *p) + ~, k4 \3 }0 u2 A! W{ unsigned long int val = 0;

val += (digits[p[0]] << 2); val += (digits[p[1]] >> 4); val += (digits[p[1]] & 0xf) << 12; val += ((digits[p[2]] >> 2) << 8); * S U) n& Z! W' }3 B# q8 ] val += ((digits[p[2]] & 0x3) << 22); - K+ h3 i3 {) F3 N: X val += (digits[p[3]] << 16); val += ((digits[p[4]] << 2) << 24); " d8 L8 t7 N0 w2 q" D2 |6 H val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 4 H4 \/ E. Y8 F: R3 g 10 5 n+ t2 b6 J0 T# D" \, z9 J ba98 - k& O3 L! S+ k; u% M- f4 E$ F! T fedc 76 543210 fedcba 98---- |- LSB -||- -||- -| |- MSB -| , Y+ [2 r. j* z+ w8 L */ return val; }

int isLeadByte (unsigned int cp, unsigned char ucByte) ; F1 r: h; ]+ n2 u" t. }$ f9 I% ?{ /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f 0xe0-0xfc 0 V. P9 ?( s7 c2 d+ x: } 936 - Simplified Chinese GBK - 0xa1-0xfe 2 p+ J' x2 u( V4 C+ Z$ H! D 949 - Korean Wansung - 0x81-0xfe N# x3 C, |. y" [+ C; ^, L 950 - Traditional Chinese Big5 - 0x81-0xfe 1361 - Korean Johab - 0x84-0xd3 0xd9-0xde 0xe0-0xf9 */ + c5 W" y* b- P' @5 L) G9 h: U& q' B switch (cp) 8 d1 B2 L1 c9 G4 ], J { case 932: if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; + t& I8 F) o8 q$ R( L0 ~- F if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; d9 H6 f. ]% u else return 0; ) U! N& i7 s! A8 r. L case 936: if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; ) b6 `3 m3 Y( o! m! K6 p. B else return 0; , Y9 x, k& r2 \# }% m4 L6 w case 949: + a, e1 {! i6 L. L% P case 950: $ [ f4 e% g. J: V& i if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; case 1361: 7 j n/ r3 f7 c0 j! I if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; ; E0 t. S' A% j% Y( b0 M$ A- {8 B if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; " ]2 P& w; L" {& m6 u if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; " v- h9 C! j; a( L else return 0; % s. S. `" q% _" M5 }* P default: return 0; }

}

int ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) ( r4 y+ E* z$ t{ unsigned char inbuf[LEN_INBUF+1]; 9 ^1 l( f0 c e5 B8 \* ?3 ?" a& t unsigned char outbuf[LEN_OUTBUF+1]; unsigned char c, lenbuf[7], csbuf[7]; unsigned char marker[] = "#@~^"; int nextstate, state = 0; " `, d, w) [% E% w; c9 J0 Q int i, j, k, m, ml = 0; unsigned long int csum = 0, len = 0; FILE *infile, *outfile;

infile = fopen (inname, "rb"); outfile = fopen (outname, "wb"); 8 U. ?7 M7 w' X+ H3 X if (!infile || !outfile) , ~) @9 I- h; x' c$ s% u/ n { 8 B" d+ x- r+ \) T9 D( [; [ printf ("Error opening file!\n"); return 10; ) ]$ H9 ~, o- n; u/ u7 E$ q* l/ n } ' v3 v+ o% G! x$ u7 @. p3 d! V8 T maketrans(); makedigits(); % R/ b% `2 S2 M6 V memset (inbuf, 0, sizeof (inbuf)); memset (outbuf, 0, sizeof (outbuf)); 7 q1 m1 f) I( p; _) N memset (lenbuf, 0, sizeof (lenbuf)); % r( K: ~/ W- k7 c) P* L* p state = STATE_INIT_COPY; - p: i! E( @ L3 ~: o i = 0; * L3 L% D8 m+ E& r0 u j = 0;

while (state) : h7 J7 v3 q: F6 |8 S. u { ' T7 ^) ~6 K5 V& x. Y. V8 V* Z if (inbuf == 0) { if (feof (infile)) ) l2 N2 a7 u0 E break;

memset (inbuf, 0, sizeof (inbuf)); }" g3 R( I% [5 D$ m: ~ fgets (inbuf, LEN_INBUF, infile); i = 0; 7 ]7 j: \4 p. x# M$ J continue; }

if (j == LEN_OUTBUF) 0 F* r5 Q$ Y) w. l { fwrite (outbuf, sizeof(char), j, outfile); j = 0; }

switch (state) 6 a" q, e" X& R0 {! Z, L! D" o/ E { 7 T# H9 m$ J: s8 @. [ case STATE_INIT_COPY: 0 q1 T; Y' s# H, }0 a& f+ m ml = strlen (marker); 6 {! l& K0 [# \7 D7 o3 v# r m = 0; state = STATE_COPY_INPUT; break;

韩冰

case STATE_COPY_INPUT: 0 r4 O9 T7 A' W/ H5 }9 N if (inbuf == marker[m]) ) W' \0 m9 G Y' m { i++; 9 v* q4 B! n+ Q! Y! e7 T m++; : U" I* F5 ]5 Z" W } b1 l; i+ ~' s else { if (m) { k = 0; state = STATE_FLUSHING; * y/ b/ b) o5 _" C& K } ! U8 m2 e- ?* y' z" K else outbuf[j++] = inbuf[i++];

} / b9 o& t; ^. r! ^, a4 H1 @3 G if (m == ml) . B0 L) x6 F" N; \7 ?/ G5 i state = STATE_INIT_READLEN; ! d. c) _ w3 I break;

case STATE_FLUSHING: outbuf[j++] = marker[k++]; ; @" b0 z8 M% `( R m--; ! j# f' t$ a7 `3 A# l if (m==0) 0 Q9 t/ P* R% y! T; ^ state = STATE_COPY_INPUT; break; 1 p+ p1 B3 Y8 b8 E6 s 4 u/ I; s q* Y, C# @! @ case STATE_SKIP_ML: i++; , i w& D) S ? if (!(--ml)) 7 k8 @ \' G( t6 _ state = nextstate; break;

case STATE_INIT_READLEN: / N0 }$ x! F9 o1 T ml = 6; F( z4 j/ T$ n+ }3 i3 ] state = STATE_READLEN; / L& }- `9 y {2 Q break;

case STATE_READLEN: lenbuf[6-ml] = inbuf[i++]; if (!(--ml)) { len = decodeBase64 (lenbuf); m = 0; 4 i" V9 g! b k2 s ml = 2; 8 G4 K; E* E. x+ S8 T state = STATE_SKIP_ML; nextstate = STATE_DECODE; % ?" `" |2 t% B4 E t+ w5 I } ; r- c* b2 O- W) ] break;

case STATE_DECODE: 1 Y5 J. ]) |& K" W' m1 ~4 S" o if (!len) ) U3 B& X- ^! s* C) ^2 i2 b: `. E" c- l8 d { + b: b7 X0 f- b; s ml = 6; 5 @- r) k6 u% U0 |) h# y state = STATE_CHECKSUM; ' c( g0 W7 f+ t- f break; # b, f; F/ B) H# F' s& w9 M9 r } + A4 S0 q1 H3 N4 j% i; C3 G; @. K6 f if (inbuf == _blank>'@') / |, P9 b4 @* c* G$ \ state = STATE_UNESCAPE; else " E. J3 L$ t2 D& E { : M1 Z' T% _* t9 w+ m if (inbuf < 0x80) 8 S* {+ n. x M8 t { outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; . F) v% N7 a/ j4 H3 s# t6 ` csum += c; m++; ( z% L# f6 K) m } 6 J8 F* o, e2 J( p" W$ G H" E else - R4 d' b5 w- C- e* _" u2 W* g { outbuf[j++] = inbuf; if ((cp) && (isLeadByte (cp,inbuf))) ( |. N" F. o" J% p3 d; O: a& _ state = STATE_DBCS; }

} 2 X: ?9 M1 p: g; b3 _6 V i++; len--; break;

case STATE_DBCS: ( L/ |! k) Q6 F outbuf[j++] = inbuf[i++]; state = STATE_DECODE; " w+ P$ I( m* v& c0 \1 | break; - S3 U9 K# k5 z+ A case STATE_UNESCAPE: outbuf[j++] = c = unescape (inbuf[i++]); csum += c; , A+ ]" ~/ @3 H0 P ? len--; / J: z1 T% e+ Y( ^1 J0 {% a m++; . n. @( T9 \* c5 u" @ state = STATE_DECODE; . ^$ j* c2 [% B! g& F3 j6 i1 @0 f break;

case STATE_CHECKSUM: , ~" Y! ?$ h) |% r- k* k. M' l- @ csbuf[6-ml] = inbuf[i++]; if (!(--ml)) { 0 \6 V6 o- m) T. d9 X7 K7 u csum -= decodeBase64 (csbuf); - N7 l7 G) X' x4 s r( ~& f! z& [ if (csum) { //printf ("Error - Incorrect checksum! (%lu)\n", csum); : x6 F% p# G2 |: g+ l //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] 0 x8 E) q- f0 F- m% V4 Q } m = 0; ml = 6; state = STATE_SKIP_ML; nextstate = STATE_INIT_COPY; / j" {* U: i. P9 ~) Z; N } % e5 {0 U9 x2 V/ A6 J break;

default: : k+ K, v4 }% B! c* a5 F printf ("Invalid state: %d\n", state); break; } ' B% y: }# Q' @/ t } ) k! q P/ t# M+ [( x* s. d2 ]3 I * ^4 u: L$ { o9 ^0 y o0 t fwrite (outbuf, sizeof (char), j, outfile); E$ E- j' q4 H( K* L fclose (infile); fclose (outfile); return 0; }

int main (int argc, char **argv) 0 {* _" W8 ` ~- v' R0 o{ int cp = 0;

if (argc < 3) 8 B( o: k) W6 E7 u { : F4 z7 E3 R. G9 |% s. f4 ? printf ("Decoder for Microsoft Script Encoder v1.3\n" "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" : V) @% _' F% K2 M: u6 d5 ?! m "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" 4 A2 ?8 f& e, k' M "Usage: scrdec13 [codepage]\n\n" . p* _5 g4 l+ h, b& J, L. B9 d' { "Code pages can be 932 - Japanese\n" ; m w' t# h( Z) O+ b( t- ? " 936 - Chinese (Simplified)\n" " 950 - Chinese (Traditional)\n" 3 q3 q$ p/ x1 M+ w9 x " 949 - Korean (Wansung)\n" " 1361 - Korean (Johab)\n" 1 b0 X9 ?" T: ?$ e "Any other code pages don't need to be specified.\n"); return 10; 8 r* y G/ k1 V; \1 B/ F }

if (argc > 3) cp = atoi (argv[3]); return ScriptDecoder (argv[1], argv[2], cp); }