网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

' i1 `. u4 x) U: p4 n0 {1 n

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

' j9 M' L. `1 f) a$ F. M1 P

附scrdec1.3源代码[c代码]：

/**********************************************************************/ /* scrdec.c - Decoder for Microsoft Script Encoder */ /* Version 1.3 */ + j/ j$ k0 T# i4 E: ~) \9 J: V/* */ 0 P8 C2 Q: A( i* ~; x$ q- Z/* COPYRIGHT: */ /* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ /* Some changes by Joe Steele to correct minor stuff */ /* */ /* DISCLAIMER: */ /* This program is for demonstrative and educational purposes only. */ : f/ {3 w% l8 L0 Y/* Use of this program is at your own risk. The author cannot be held */ ; q7 J. T6 m% U, h- u/* responsible if any laws are broken by use of this program. */ 8 v9 d# X3 ?" a; A V' T/* */ /* If you use or distribute this code, this message should be held */ * Q& o6 m" \. W/* intact. Also, any program based upon this code should display the */ /* copyright message and the disclaimer. */ /**********************************************************************/

: D h0 M6 H' c' B2 P

#include #include #include

% t* G# i9 {) p2 R0 Q! G

#define LEN_OUTBUF 64 #define LEN_INBUF 1024

4 k" R8 l' H! ^7 y6 u! f

#define STATE_INIT_COPY 100 T7 ~( c) p' v#define STATE_COPY_INPUT 101 4 c: f0 P' }- i4 c#define STATE_SKIP_ML 102 4 b9 A" J) L4 \( K0 _. b5 O, B2 T#define STATE_CHECKSUM 103 #define STATE_READLEN 104 " }- |1 |' q9 v C2 g#define STATE_DECODE 105 #define STATE_UNESCAPE 106 5 Z* @& A3 }8 U% `% c8 L! E#define STATE_FLUSHING 107 7 J- ^- `2 F+ _4 w#define STATE_DBCS 108 " K7 [" ~7 Q% |$ i) }+ |#define STATE_INIT_READLEN 109

unsigned char rawData[292] = { 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 7 X$ G* d' a9 ]. O 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, $ Q" G% D% u$ T9 l% o( f7 N 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, / p2 F8 x; p) z0 ^2 d' K' A) c' I8 @ 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, ; c+ w Y& I5 n. w+ Z( C1 k7 } 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, 1 i* A2 ~3 F, J! ?; y1 Q 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, * G, D o" G: g5 C! c5 [ 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, * G2 \( o0 y6 S3 ^: S 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, 4 r* G9 Q) x# N/ H3 x; P+ u( T 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 1 Z7 q6 T5 s$ O+ E* m! s 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 7 q, ^ I( z+ v. l 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, ' {- X) F; R8 T9 a 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, $ Z- B. A N5 j9 H$ B/ y4 E3 X& o* l 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, 0x51,0x67,0x2f $ l6 h# g7 h; \6 S} ;

, \: h2 R) Q8 B; y) t$ }

const unsigned char pick_encoding[64] = { 1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 2 e" O3 {* p: Z( f2 T1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 ; F2 C# P# S" |, |& T" F};

9 |, K- J# V% a! ^1 }

unsigned char transformed[3][128]; int digits[0x7b];

9 v" c8 r* M( l7 a

unsigned char unescape (unsigned char c) { / h; W# J* j8 h0 | static unsigned char escapes[] = "#&!*$"; static unsigned char escaped[] = "\r\n<>@"; 4 |2 \! E; I) o! X, T$ h int i=0;

if (c > 127) " g9 s+ ?& z; J1 d6 A return c; while (escapes) { / {" L2 A+ e& A, \) v. ] if (escapes == c) 8 i& _8 j* ]6 [% z return escaped; ) G, O" m# B7 Z! p; \. R i++; # t" o' K) f$ N+ X } return '?'; 7 t/ @9 k4 _% `& L}

void maketrans (void) ! M+ q4 I( w3 H% C# I G! W3 E: Y{ int i, j;

for (i=31; i<=127; i++) for (j=0; j<3; j++) transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; 1 g% c0 m$ r6 x7 Z, L}

韩冰

void makedigits (void) { int i;

for (i=0; i<26; i++) " t- x5 v: I6 m+ A) ? f3 ] { ! P9 }; M$ c9 B) k digits['A'+i] = i; % g( r6 S5 T' P, \+ L0 `- O5 r digits['a'+i] = i+26; ( z3 v" _4 A" [4 F+ T% m7 @ } ) G6 V3 D" u6 \; w for (i=0; i<10; i++) digits['0'+i] = i+52; digits[0x2b] = 62; digits[0x2f] = 63; }

unsigned long int decodeBase64 (unsigned char *p) 5 R3 D* A3 R+ B6 K5 s{ O, N1 i9 u u. B$ } unsigned long int val = 0;

val += (digits[p[0]] << 2); - a0 H8 b0 H# N* j7 @ val += (digits[p[1]] >> 4); 8 t& I; i. n2 _4 T val += (digits[p[1]] & 0xf) << 12; val += ((digits[p[2]] >> 2) << 8); val += ((digits[p[2]] & 0x3) << 22); val += (digits[p[3]] << 16); ; Z& z* ^" _& a/ J- F val += ((digits[p[4]] << 2) << 24); ( f' p) ?; F% ]! [9 w val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 10 ba98 fedc ! S: P, g' n/ F& e( m 76 , r' F1 q- L# U0 D* L 543210 $ c3 R! v) E7 f6 j+ E7 A0 T fedcba 98---- 2 I4 A; S( E( n; a9 F9 ~ |- LSB -||- -||- -| |- MSB -| 3 A; c- ^, \3 z3 r1 z+ R */ return val; }

int isLeadByte (unsigned int cp, unsigned char ucByte) { /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f 0xe0-0xfc 4 L& o7 C3 g" T0 {* D+ t 936 - Simplified Chinese GBK - 0xa1-0xfe 949 - Korean Wansung - 0x81-0xfe 950 - Traditional Chinese Big5 - 0x81-0xfe 1361 - Korean Johab - 0x84-0xd3 0xd9-0xde $ p0 t! h$ s& d 0xe0-0xf9 */ $ N1 P. y# ?& @* @1 C switch (cp) ! ^* `9 v8 T! }3 x0 R1 | l6 _" R { case 932: & q" {3 k& z0 S1 i. r! u/ k2 N if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; 3 P. x; r+ G" G; A% T* } else return 0; 6 P" h4 A( D! g' d' D- x/ h6 h! o case 936: " _( g: w2 ]& i if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; - w- ^& K4 x+ U) M else return 0; case 949: case 950: , n7 U) X& t3 ?5 B if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; case 1361: if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; . ^; Z; `. T9 U# n. P5 f% y6 Z if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; % J! l1 ~% e1 e D- A if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; 9 C0 A6 l8 q5 t4 a E2 X else return 0; ! I, P, B" ^2 ^8 Q3 }0 N+ T% S default: return 0; }

}

/ p- G' ~4 C8 hint ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) { unsigned char inbuf[LEN_INBUF+1]; 8 G; T. V7 ^3 a7 L6 i. V unsigned char outbuf[LEN_OUTBUF+1]; unsigned char c, lenbuf[7], csbuf[7]; ) s0 L2 _5 S h* h unsigned char marker[] = "#@~^"; int nextstate, state = 0; 3 r# I1 o+ ^8 ` int i, j, k, m, ml = 0; ) t; p6 z9 \: n6 A) S unsigned long int csum = 0, len = 0; % P' | y0 W6 b FILE *infile, *outfile;

infile = fopen (inname, "rb"); outfile = fopen (outname, "wb"); if (!infile || !outfile) { ; |+ z4 O5 _7 h printf ("Error opening file!\n"); / `& O; r; C4 `) T, p1 f return 10; } 3 P4 f9 x* z/ a4 A* {0 _+ B maketrans(); ! n( [0 Y8 ^9 v makedigits(); memset (inbuf, 0, sizeof (inbuf)); ' w% S& a% c* }: h1 k& G memset (outbuf, 0, sizeof (outbuf)); 2 n1 z8 f( A; k: f memset (lenbuf, 0, sizeof (lenbuf)); 1 ~3 Q: w* d. }: P) T. a8 m6 D state = STATE_INIT_COPY; i = 0; j = 0;

while (state) { n0 J: E5 Z+ {- G1 g/ ~. ` if (inbuf == 0) + e2 X/ V5 ~4 A- o) J { ( Y! \$ u9 G& H% L9 \ if (feof (infile)) break;

memset (inbuf, 0, sizeof (inbuf)); fgets (inbuf, LEN_INBUF, infile); + O6 H$ I6 A4 k! ?9 y6 q i = 0; continue; & Q" x* Z" K: Z5 Q, b }

if (j == LEN_OUTBUF) / e- r3 T& f8 e6 x# H0 O { ) @5 P/ f) |0 V7 B' b% b fwrite (outbuf, sizeof(char), j, outfile); j = 0; . G C6 ?6 P7 t8 g* I& r4 l }

switch (state) { [+ y. @& q2 Q8 c* x( p case STATE_INIT_COPY: ! F! t/ V+ H$ a- H ml = strlen (marker); , Q: `) s, ?# ~1 I0 b; \& q, p2 t m = 0; . J3 O% X) i3 i, p4 d1 r( F9 f+ k8 Y state = STATE_COPY_INPUT; ( x1 C* H! A$ B# F" {& B: Y! i+ {+ y break;

韩冰

case STATE_COPY_INPUT: if (inbuf == marker[m]) - Z0 x8 i) ^7 D/ k) x u; I { 5 O# p( g5 v. h8 U9 Z6 v6 V i++; ) Y4 `& n8 M5 | m++; } else % E( c' e5 O, m5 o; w/ O) P { - S( v& p' O' Y7 [& x( M if (m) ! `( J( j$ P* L8 { { k = 0; state = STATE_FLUSHING; ! y( s( D* F4 c3 J. E* p } else . l* [. b, L. ]' N$ u outbuf[j++] = inbuf[i++];

} if (m == ml) state = STATE_INIT_READLEN; break;

case STATE_FLUSHING: T5 ]- ~/ q7 j6 u2 J outbuf[j++] = marker[k++]; 1 E) i6 g( Y- I6 L. a8 X5 q m--; + M+ ?% D/ l* h- ^3 t if (m==0) state = STATE_COPY_INPUT; break; case STATE_SKIP_ML: i++; * G$ H/ U# j: U4 a9 D if (!(--ml)) 5 O5 @6 r# |" U- D state = nextstate; break;

case STATE_INIT_READLEN: ml = 6; state = STATE_READLEN; break;

case STATE_READLEN: lenbuf[6-ml] = inbuf[i++]; if (!(--ml)) { + ^" \. c G2 M' K# a- Q6 ^ len = decodeBase64 (lenbuf); m = 0; ml = 2; state = STATE_SKIP_ML; 2 e& A) J* x" S# Y4 v9 e7 l/ d nextstate = STATE_DECODE; } 5 l0 u F: ?5 j V# u& [0 H break;

case STATE_DECODE: ; F4 X# D% I9 H4 `' w3 L" J. | if (!len) { ml = 6; , N4 p* n3 Y/ L; P b state = STATE_CHECKSUM; : o* h- {9 P" a- }* w' s break; ) H- M! L# @4 t+ c" v3 R } $ R4 F6 m" G& w& B: D, `& l& T if (inbuf == _blank>'@') * _& q3 Z& n: s5 z, h& V: G6 l7 _ state = STATE_UNESCAPE; else ! r) T! f2 [9 p! \9 E+ ` { F+ b: H8 _1 p# [% g# Q; T: i if (inbuf < 0x80) 3 t0 q/ _9 `0 _3 f ]; V5 v* d { ; P1 |, ?7 Q: j9 T outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; ( h$ T/ |+ @4 ` [ csum += c; * z+ }9 d; Z3 m8 _/ P9 B! K m++; } else 0 l$ T" j0 m* r1 G' S5 K { outbuf[j++] = inbuf; 9 S4 Z1 q/ N- s+ S7 ?/ B2 a if ((cp) && (isLeadByte (cp,inbuf))) % d* J8 ?& l+ s& ] state = STATE_DBCS; 4 V2 d$ y- k4 H% b4 _0 H }

} i++; len--; break;

case STATE_DBCS: outbuf[j++] = inbuf[i++]; state = STATE_DECODE; 2 V' i7 f, U; z break; # B. [! j f/ m8 t8 S) g3 D case STATE_UNESCAPE: 5 R' L8 j! X; D6 h2 f: F2 m% \ outbuf[j++] = c = unescape (inbuf[i++]); csum += c; len--; m++; state = STATE_DECODE; 9 Z0 f* I8 J4 }7 |) q9 j break;

case STATE_CHECKSUM: csbuf[6-ml] = inbuf[i++]; if (!(--ml)) { 7 a) E" Y8 z8 M7 Y7 h csum -= decodeBase64 (csbuf); - l8 L5 x3 h9 B if (csum) ( ~! f4 `* x( Y- B. g9 Q { . ~& i: d% I0 D* E" E3 R+ h //printf ("Error - Incorrect checksum! (%lu)\n", csum); - M9 a$ V e l* y //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] 4 ?1 L& c1 u8 _3 a( q3 L2 \ } k; E! S5 P; S8 S0 G9 a m = 0; ml = 6; & ^* R8 i9 U9 T state = STATE_SKIP_ML; nextstate = STATE_INIT_COPY; } : i1 ?$ s: o B& Z break;

default: ' ?0 @5 z* O8 E- I% U printf ("Invalid state: %d\n", state); break; / B) {+ G( ?, W: a } } , C0 f! x3 ]/ f7 s7 H fwrite (outbuf, sizeof (char), j, outfile); 2 R. L: D# g+ n M/ j U2 j+ ` fclose (infile); fclose (outfile); ! S y( D: Y' U return 0; / N8 {4 K) ]! l; v+ X}

8 y" `$ O8 H p1 S0 Gint main (int argc, char **argv) , ^4 n: U( m0 `. ^" K3 P6 \{ ; W, E+ z$ U+ B, s0 f5 w- I4 u int cp = 0;

if (argc < 3) 1 H6 d; f/ E+ p& T { ; b+ d3 p5 t/ r/ i+ n0 N printf ("Decoder for Microsoft Script Encoder v1.3\n" ; O5 B7 j% d4 K8 u "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" "Usage: scrdec13 [codepage]\n\n" p6 f8 h* e, \8 |! ^, ^ "Code pages can be 932 - Japanese\n" 8 P# a2 Z1 T9 ]- [3 H2 ^( L$ {/ G " 936 - Chinese (Simplified)\n" " 950 - Chinese (Traditional)\n" " 949 - Korean (Wansung)\n" / M8 m0 s/ P$ K( l ^ " 1361 - Korean (Johab)\n" "Any other code pages don't need to be specified.\n"); ; t3 C- c" F3 `' B5 z return 10; }

if (argc > 3) cp = atoi (argv[3]); return ScriptDecoder (argv[1], argv[2], cp); }