网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

. w* _8 A* p% U( `; l0 v

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

附scrdec1.3源代码[c代码]：

/**********************************************************************/ * [/ {8 {$ P! y. F/* scrdec.c - Decoder for Microsoft Script Encoder */ /* Version 1.3 */ 9 W6 f1 ^ z# X) S6 O' ]/* */ /* COPYRIGHT: */ : p/ T: P4 o0 e. t, M/* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ /* Some changes by Joe Steele to correct minor stuff */ /* */ 7 t! @0 t1 R5 `6 F! k' O G, Q9 e/* DISCLAIMER: */ * C+ ~: A/ j( P5 v/* This program is for demonstrative and educational purposes only. */ / ?8 J [7 Y! }! x) N/* Use of this program is at your own risk. The author cannot be held */ $ } D+ d5 Q( K6 ~/* responsible if any laws are broken by use of this program. */ /* */ ( q$ d5 `& W; G$ t! r/* If you use or distribute this code, this message should be held */ /* intact. Also, any program based upon this code should display the */ /* copyright message and the disclaimer. */ /**********************************************************************/

#include Z- H1 G( x" l* p7 K8 j#include #include

#define LEN_OUTBUF 64 #define LEN_INBUF 1024

#define STATE_INIT_COPY 100 - ~1 g: l4 v2 X' b#define STATE_COPY_INPUT 101 #define STATE_SKIP_ML 102 * H3 T6 f2 L: _4 I+ U: p" Y# r#define STATE_CHECKSUM 103 * j" f Y2 H4 {#define STATE_READLEN 104 3 t7 H0 W" S# g7 H& P3 i) R#define STATE_DECODE 105 0 P7 F e3 L0 a4 J: ^9 L#define STATE_UNESCAPE 106 #define STATE_FLUSHING 107 + G/ P+ A1 i; ^) [; F+ A#define STATE_DBCS 108 #define STATE_INIT_READLEN 109

( C2 M' b" K2 | z

unsigned char rawData[292] = { 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, : u$ {2 a, ~% ~8 B/ `$ o 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, ' F$ [( Q' q: {) } 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, % J" t! w4 p6 k) ~. u 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, P [8 k0 P% u8 Y6 i: u D0 h 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 2 Y/ y! d9 u" F, | 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 9 B: _! X! s h' j* E2 L9 t U 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, + `: M9 z& J |8 i, b 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, 2 j0 A3 ^/ l$ L0 s" O 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, 3 W2 L( B G- l) F0 g* k 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, 5 |* W+ I X# A 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, # e; C7 I6 _' T& ?9 X/ | 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, 3 L9 Q0 ? Q A. g& X8 l 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 1 M& ^, B3 d! H. s 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, & y2 g# B9 Q+ |8 B9 T/ Y 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, 0x51,0x67,0x2f } ;

const unsigned char pick_encoding[64] = { ' z4 L) E0 ^, W1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, " x, O' M0 R8 V n, l; f# f1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 + s1 j8 O7 j( {1 L: R+ j};

/ w% d* Z& c+ @* A5 T0 a

unsigned char transformed[3][128]; int digits[0x7b];

) M, \( T5 G/ y

unsigned char unescape (unsigned char c) { 1 ?# }5 o1 c& D! H# {) m0 d static unsigned char escapes[] = "#&!*$"; static unsigned char escaped[] = "\r\n<>@"; int i=0;

( g+ r7 A% P8 B) k" R j

if (c > 127) return c; 5 X+ Y+ s: T* L# J9 q9 ]) a- p while (escapes) % ?9 g8 q# \7 A$ @: R' } { 4 v: z- Z/ H0 P: u" a if (escapes == c) & w6 P% ?5 C2 d. H return escaped; ' I& d A& h. \" c; j6 C/ A2 Y i++; } h/ q& k( E$ s7 G% a return '?'; 7 ^! Y) a: B( F1 ] ]}

void maketrans (void) { & D1 ~" K! }, a1 u# S6 s) Z* ^ int i, j;

for (i=31; i<=127; i++) ( \! ]/ `( _' Y ^. A7 G for (j=0; j<3; j++) ' _0 c- d( j9 V0 J transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; ) [1 _3 q" N) G6 Q' H7 h& W}

韩冰

void makedigits (void) { int i;

for (i=0; i<26; i++) { digits['A'+i] = i; digits['a'+i] = i+26; / W5 n$ ]! K6 e: l* d } : c' Y+ C& q7 z; ?/ g S for (i=0; i<10; i++) 1 S8 W2 t5 T0 S4 r) z# E digits['0'+i] = i+52; + S3 A3 E. @7 ] digits[0x2b] = 62; digits[0x2f] = 63; }

unsigned long int decodeBase64 (unsigned char *p) { ! i' V: i/ J+ Z, k1 v unsigned long int val = 0;

val += (digits[p[0]] << 2); ; O' j6 h4 j8 ^1 N' s val += (digits[p[1]] >> 4); val += (digits[p[1]] & 0xf) << 12; val += ((digits[p[2]] >> 2) << 8); " r% t; a! Q: |9 W val += ((digits[p[2]] & 0x3) << 22); val += (digits[p[3]] << 16); 7 @: T( O5 Q4 W; v val += ((digits[p[4]] << 2) << 24); ) l1 I* M( A4 o$ ~# ^ val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 & Q6 W( y8 z) C4 [+ ` 10 ba98 fedc 76 543210 1 [" D2 B# J n2 f. G fedcba 98---- " A) z2 W# F! H" e0 o" Q |- LSB -||- -||- -| |- MSB -| ( w, r# {8 [- L7 D% A+ [ */ return val; }

int isLeadByte (unsigned int cp, unsigned char ucByte) { $ |8 b9 g. O* n- S2 K# e /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f & d1 r1 H+ j$ p 0xe0-0xfc . u: t# g( e! T% k' h: J 936 - Simplified Chinese GBK - 0xa1-0xfe ' N/ J0 ^ A1 D2 {( R5 @5 z; y 949 - Korean Wansung - 0x81-0xfe ' w/ x* [( Q& C6 d- i' ?+ O 950 - Traditional Chinese Big5 - 0x81-0xfe 1361 - Korean Johab - 0x84-0xd3 1 s, S+ Q7 Y6 B 0xd9-0xde 0xe0-0xf9 */ switch (cp) { case 932: if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; else return 0; case 936: if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; else return 0; case 949: case 950: if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; ) k8 K% w5 S: J: ?% j- ~ else return 0; case 1361: * z" e/ p! u- p) K if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; else return 0; 0 F. V d/ S' k0 L# O: p4 o default: return 0; , k8 s$ P7 J: M" k/ B: G4 q }

}

1 v6 Q' a0 T0 ~# s# W8 Wint ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) / f9 F; b/ k4 X6 h{ 6 `( y) f* U7 r' Q/ e$ ?0 w# ]" @' G unsigned char inbuf[LEN_INBUF+1]; unsigned char outbuf[LEN_OUTBUF+1]; 9 C; C2 b3 W& T) ^3 Y( t unsigned char c, lenbuf[7], csbuf[7]; unsigned char marker[] = "#@~^"; int nextstate, state = 0; int i, j, k, m, ml = 0; unsigned long int csum = 0, len = 0; FILE *infile, *outfile;

infile = fopen (inname, "rb"); ' h w# w% F9 l6 |6 y' Q outfile = fopen (outname, "wb"); if (!infile || !outfile) { # M( N& o6 }& F% r+ x! V* I+ | printf ("Error opening file!\n"); * p9 r( r% n( v1 [# f+ F return 10; } 5 |( p# E$ p6 c maketrans(); 9 Q& d1 O. b# R makedigits(); , `, M- F, z9 j" I memset (inbuf, 0, sizeof (inbuf)); : {) s; c7 d4 ~* Z+ W6 N$ _ memset (outbuf, 0, sizeof (outbuf)); memset (lenbuf, 0, sizeof (lenbuf)); ( x' h [" [5 J' f* K state = STATE_INIT_COPY; i = 0; j = 0;

while (state) { if (inbuf == 0) 0 |$ r1 U- I5 I! o( f* x4 P { if (feof (infile)) break;

memset (inbuf, 0, sizeof (inbuf)); . P) z. f7 W- ^' X* i& z- Q6 R fgets (inbuf, LEN_INBUF, infile); i = 0; continue; }

if (j == LEN_OUTBUF) { 0 q5 v, X: E7 Z- [ fwrite (outbuf, sizeof(char), j, outfile); j = 0; }

switch (state) 0 ~$ z ~; E; v- @% h; T { case STATE_INIT_COPY: ml = strlen (marker); 9 d& @$ `9 X8 h+ `. K m = 0; 9 u) J$ J! W6 j+ Q% v state = STATE_COPY_INPUT; break;

韩冰

case STATE_COPY_INPUT: if (inbuf == marker[m]) { 0 Z) S3 P( ~/ G q8 `& Q7 W8 [ i++; 3 z% L' @& E9 N* a m++; , ^/ h; ^0 _, i( t( H } 8 N$ K$ u& v- V else + l1 n. Q' S% s { if (m) { 6 z3 B# _; G+ V# Q$ l' `. {5 X k = 0; state = STATE_FLUSHING; & K3 n, |8 t- A% ?1 ~ } % X2 z2 ~, D6 R% ~8 V9 v3 |, j else outbuf[j++] = inbuf[i++];

} ! }; \# h8 H0 a& D" i, C if (m == ml) : d" c ~$ s" R* ?0 [( Y' S state = STATE_INIT_READLEN; 2 f, r! z$ r- S3 w2 U2 r6 o8 i break;

case STATE_FLUSHING: outbuf[j++] = marker[k++]; ; @5 i$ x' F; S7 y& u) v m--; if (m==0) state = STATE_COPY_INPUT; break; 3 C9 b1 r# M+ Q" `$ w9 K case STATE_SKIP_ML: i++; if (!(--ml)) state = nextstate; break;

case STATE_INIT_READLEN: ml = 6; * B# J! C5 u, V, m& z7 E5 v state = STATE_READLEN; . r' M8 J: ^. B$ R$ e break;

case STATE_READLEN: lenbuf[6-ml] = inbuf[i++]; if (!(--ml)) Y, E% v* D- m1 k, H$ x6 H: f { 0 Y; ~# f, U7 h4 W1 ]) E a6 d! X5 k len = decodeBase64 (lenbuf); m = 0; ml = 2; , d2 e* L0 K, Q9 e6 I' | state = STATE_SKIP_ML; nextstate = STATE_DECODE; } $ n f; Z, |2 D break;

case STATE_DECODE: if (!len) { / Y4 \: R- ?' ~# E6 z' _9 L! g ml = 6; 8 w- n" Z4 @5 t/ c- A state = STATE_CHECKSUM; break; } if (inbuf == _blank>'@') ( @* ?$ U6 m8 L4 u$ T4 [; V state = STATE_UNESCAPE; else { if (inbuf < 0x80) { : B8 l' W8 g; l outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; . H1 s; z3 M. I+ y3 o5 R$ { csum += c; " G" O# m# X! q- c m++; $ X6 J/ ]4 Q8 K } else { ' _. b Q. u3 n) q, n" I outbuf[j++] = inbuf; 8 u B1 w! @3 n9 } if ((cp) && (isLeadByte (cp,inbuf))) state = STATE_DBCS; ! G* d3 e) o! H R$ h' _+ h! Y% f }

} ) s) x; \" M" a/ g/ z i++; len--; break;

case STATE_DBCS: ) c. C a( n2 _9 y7 @- D outbuf[j++] = inbuf[i++]; ' f* l) A9 I5 s2 |" { state = STATE_DECODE; 3 \; i5 M0 z- g& E8 d3 i7 R break; % I1 @; M6 t* {! P. J4 Q case STATE_UNESCAPE: outbuf[j++] = c = unescape (inbuf[i++]); 8 V: V1 ~8 P+ N9 L) f9 z- g" r csum += c; len--; m++; 6 Y; K8 X) p- w5 ?& U+ R. ? state = STATE_DECODE; " Q+ C/ n: v/ J# i3 n break;

case STATE_CHECKSUM: + {0 w" A, x& G: }- S2 \+ O csbuf[6-ml] = inbuf[i++]; 3 ^+ \) p% m( I7 T if (!(--ml)) { # L$ Y8 X+ a: z- j* b6 w csum -= decodeBase64 (csbuf); if (csum) { //printf ("Error - Incorrect checksum! (%lu)\n", csum); ! _; c: {2 V% U //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] } m = 0; $ q/ d* z4 J# @1 A3 S. ~ ml = 6; state = STATE_SKIP_ML; nextstate = STATE_INIT_COPY; } : T5 {1 @+ l; v1 t7 E/ ] break;

default: 4 r5 m- j6 r1 n printf ("Invalid state: %d\n", state); ( W1 ]( p/ c% o0 N$ x5 a0 X# d break; 5 J" U N# Q, s1 m5 n+ }( S6 V3 A' } } } . `3 e# ~% y1 {3 g; W/ H" B fwrite (outbuf, sizeof (char), j, outfile); 1 ~/ N# [, \2 c9 y7 T! |" u( p fclose (infile); & \) \4 G# x" g- Z1 n fclose (outfile); ) P" C0 }' I [, w; L return 0; }

$ g$ K! b! f' Oint main (int argc, char **argv) * v d; ?5 k* J: Z" c{ int cp = 0;

if (argc < 3) { & A2 c' n* W; j, Y3 x printf ("Decoder for Microsoft Script Encoder v1.3\n" "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" "Usage: scrdec13 [codepage]\n\n" 4 v% A i0 \) i! Y; W7 n6 ]1 a "Code pages can be 932 - Japanese\n" . k2 g" h& z1 ~) z4 C " 936 - Chinese (Simplified)\n" 4 n1 g6 j" S/ { " 950 - Chinese (Traditional)\n" : O7 ^4 z: Y% M/ k& S " 949 - Korean (Wansung)\n" - {5 v7 [ ~/ {% _; P " 1361 - Korean (Johab)\n" "Any other code pages don't need to be specified.\n"); return 10; ( l2 G( c1 H& |# _" }5 T }

if (argc > 3) cp = atoi (argv[3]); , [/ U. x+ s& z' j. o3 `/ j1 t+ t return ScriptDecoder (argv[1], argv[2], cp); }