网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

6 C0 d* l' ~" u8 |/ g' S

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

附scrdec1.3源代码[c代码]：

; u( `3 G6 `5 m( o" \8 k6 d* j

/**********************************************************************/ * e# U3 f/ s, _/* scrdec.c - Decoder for Microsoft Script Encoder */ /* Version 1.3 */ 7 v- I8 t* q& U/ r/* */ /* COPYRIGHT: */ /* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ " N: w2 x# a" i/* Some changes by Joe Steele to correct minor stuff */ /* */ 6 c8 \! J8 F: O/* DISCLAIMER: */ /* This program is for demonstrative and educational purposes only. */ /* Use of this program is at your own risk. The author cannot be held */ 5 _; Y u* r1 D, L- w* a8 M/* responsible if any laws are broken by use of this program. */ 9 z* t9 c0 ]9 t9 ^. s/* */ 0 b+ z' R; ?6 I% [0 b O2 o3 Z/* If you use or distribute this code, this message should be held */ 0 s0 y+ }0 a' H) L" I. F/* intact. Also, any program based upon this code should display the */ /* copyright message and the disclaimer. */ 7 V( d6 P+ p2 p, M8 ^/**********************************************************************/

#include & Q- ^) E! H# ]& r#include #include

#define LEN_OUTBUF 64 #define LEN_INBUF 1024

#define STATE_INIT_COPY 100 #define STATE_COPY_INPUT 101 % r0 _8 m" c1 ?4 E2 \#define STATE_SKIP_ML 102 ; p, F; `0 L* C- @+ J% j#define STATE_CHECKSUM 103 #define STATE_READLEN 104 9 D$ O: c, J/ k7 e$ d#define STATE_DECODE 105 #define STATE_UNESCAPE 106 % F* g1 W6 ^( P, O#define STATE_FLUSHING 107 2 r4 Z1 h% Q) n( _8 O#define STATE_DBCS 108 #define STATE_INIT_READLEN 109

unsigned char rawData[292] = { ; k) y4 Y; q% R4 x% n [ 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, ! M3 v6 h+ ~8 u) ]5 n# I 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, + n9 k. S# _ ~8 s+ L 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, 5 }- `3 T' |: `" b3 \- _# J 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, $ d/ |/ b# w. j$ A" ^4 d 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, . Y# o: ^7 H1 A6 ?) b" d; d' N 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, % X9 Q/ \0 A8 r6 B6 W/ K- o7 p+ K 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, 9 h- A5 u, A) t+ D7 ~4 C6 E 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, ! o# g6 S- E) @7 V) g 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, 2 w: N3 ] x& E% b8 _ 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, & ~% ?) i5 x. Q2 \% M0 X 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, $ f; f8 w# E$ P- V% e9 ` 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 9 o ^& y8 I% Y5 n1 B 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, ; Y; h, b' N! G' H9 | 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, ; C d& H! C# ?' p6 d 0x51,0x67,0x2f } ;

const unsigned char pick_encoding[64] = { " W/ ?6 D, O% b1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 };

unsigned char transformed[3][128]; + g" e# a1 L( a0 u5 c& U% Yint digits[0x7b];

( \7 e: h( G O- L

unsigned char unescape (unsigned char c) - w3 {5 g% r- P7 h/ p Z' s{ static unsigned char escapes[] = "#&!*$"; static unsigned char escaped[] = "\r\n<>@"; 2 g' J8 B$ Y8 h4 t: c int i=0;

if (c > 127) return c; while (escapes) { if (escapes == c) return escaped; i++; } ' P( a' L# R( E$ r return '?'; }

& ~" ], Y% g- f2 ]' V

void maketrans (void) % X8 F4 M" c }3 }. ]" J{ int i, j;

/ D# p7 H$ s1 d' _5 a

for (i=31; i<=127; i++) % B( E* ]7 q6 ?* t for (j=0; j<3; j++) transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; }

韩冰

void makedigits (void) 9 ^2 {. X. P5 Q& ]: M( b( h{ int i;

for (i=0; i<26; i++) ! h8 n, s& _3 D' j { ' j! z* p& \; g7 h4 S digits['A'+i] = i; + L1 ~8 h/ k8 C digits['a'+i] = i+26; } - s3 A" C) Q! A5 f8 |% Z Y v: h( W for (i=0; i<10; i++) 4 m/ A! G* }: w* A% n% Y q digits['0'+i] = i+52; digits[0x2b] = 62; digits[0x2f] = 63; }

unsigned long int decodeBase64 (unsigned char *p) ; U g7 x2 @* _) U+ A. W{ unsigned long int val = 0;

val += (digits[p[0]] << 2); 5 p3 Y4 w# K( a3 E0 s val += (digits[p[1]] >> 4); val += (digits[p[1]] & 0xf) << 12; 7 N0 h; A2 o; l, ~$ F2 }5 c& I! b- u val += ((digits[p[2]] >> 2) << 8); val += ((digits[p[2]] & 0x3) << 22); val += (digits[p[3]] << 16); 4 i$ L/ E' j, c val += ((digits[p[4]] << 2) << 24); val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 - i; M5 W& X5 a 10 ( W2 Y/ ~, `+ `% U; P ba98 fedc 0 R0 E/ k# K ]( j( ]* w8 g( F 76 543210 ! ~. b8 g4 ^" p$ o/ Y) Y$ I fedcba 98---- 8 Y' K8 o4 @" _5 d' F3 w6 X5 R: j |- LSB -||- -||- -| |- MSB -| */ & X j9 s8 L K) }; t( @ return val; }

int isLeadByte (unsigned int cp, unsigned char ucByte) 9 C8 S+ @* `! g6 e7 ^{ - \8 T7 n! ~4 `+ l8 s$ w /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f $ h6 E; N1 Z$ E* Y% f! _& v/ R 0xe0-0xfc 936 - Simplified Chinese GBK - 0xa1-0xfe + V0 W4 c) s: n9 }/ D2 C- B- ` 949 - Korean Wansung - 0x81-0xfe + [9 g, f* r1 l 950 - Traditional Chinese Big5 - 0x81-0xfe 1361 - Korean Johab - 0x84-0xd3 0xd9-0xde ! R+ v* v, h0 A0 D5 y) M) d- Q5 V 0xe0-0xf9 */ switch (cp) { case 932: if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; ) W* e5 c2 m& x9 ^' l3 k else return 0; case 936: * P" U+ @& X. \8 r if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; else return 0; case 949: case 950: if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; case 1361: 1 X3 {* P4 P( p6 O if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; " b6 t& P% x& q& N if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; else return 0; default: return 0; }

}

int ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) { : _0 `4 x& Z2 x5 x+ h2 `0 W' {( @. g unsigned char inbuf[LEN_INBUF+1]; unsigned char outbuf[LEN_OUTBUF+1]; unsigned char c, lenbuf[7], csbuf[7]; $ u- A; D* |$ A3 ?% Z unsigned char marker[] = "#@~^"; & h4 s; m/ {; @ int nextstate, state = 0; 8 y6 J. F( _: @1 K( e7 i int i, j, k, m, ml = 0; unsigned long int csum = 0, len = 0; FILE *infile, *outfile;

infile = fopen (inname, "rb"); outfile = fopen (outname, "wb"); if (!infile || !outfile) { $ R" V+ u3 p8 o3 F8 W9 L( h printf ("Error opening file!\n"); return 10; 6 j5 T" B, P9 D# M" {# C9 E } maketrans(); & J7 U1 ~% t+ D+ B- {, b makedigits(); memset (inbuf, 0, sizeof (inbuf)); memset (outbuf, 0, sizeof (outbuf)); " F# p& b/ E7 ` memset (lenbuf, 0, sizeof (lenbuf)); state = STATE_INIT_COPY; ! ]: f ]" v& L i = 0; ; H/ c. ^& ?% }! _ j = 0;

while (state) { ! H6 y- n( s+ |: z if (inbuf == 0) { " r5 b$ ~3 X# u. i! ]4 u ?& B* [ if (feof (infile)) / a$ {7 M2 Z2 E m. A break;

memset (inbuf, 0, sizeof (inbuf)); fgets (inbuf, LEN_INBUF, infile); i = 0; - ~- A2 w3 d8 B. R/ S continue; 2 d* K# O0 }- e, q }

if (j == LEN_OUTBUF) " m0 x1 n* n1 o { , \- X `3 q# r% m fwrite (outbuf, sizeof(char), j, outfile); + I# K% D* L7 o j = 0; + B+ B6 y% J8 X& L4 ] }

switch (state) ( r6 \# N1 ]" J { case STATE_INIT_COPY: ml = strlen (marker); m = 0; 7 U4 n0 v/ z T4 Y, \: D2 m state = STATE_COPY_INPUT; , F- R& H+ T8 K5 ]/ h# u) ` break;

韩冰

case STATE_COPY_INPUT: - C( i5 [/ e1 B# l/ C2 u if (inbuf == marker[m]) ; v6 z. h5 r( y* h8 N { i++; 7 G( J; }0 A. F6 Z' l( @# P m++; 7 T/ q' T( g( p" f6 ? } else { if (m) { # b2 ]0 z# R) x. N8 G# v0 [0 o$ T+ X2 ? k = 0; 5 D' u. o# F, d" V. ]/ b& H' m2 i state = STATE_FLUSHING; } else 3 I7 a, ~+ j' D" _* _ U. ~ outbuf[j++] = inbuf[i++];

} 2 z8 G2 c8 l7 s: R( a6 Q if (m == ml) state = STATE_INIT_READLEN; break;

case STATE_FLUSHING: outbuf[j++] = marker[k++]; m--; 1 T) S) r# @5 Q2 E- {) X* L if (m==0) state = STATE_COPY_INPUT; break; ( ^. L; j* I f9 C. T case STATE_SKIP_ML: i++; if (!(--ml)) state = nextstate; break;

case STATE_INIT_READLEN: 5 Z& l3 v: {6 V2 O. z7 L ml = 6; state = STATE_READLEN; break;

case STATE_READLEN: # f: Y# q0 {8 Z lenbuf[6-ml] = inbuf[i++]; # l' {# U& O% t3 V' v& ~ if (!(--ml)) 8 ]# _# u, A/ m { ( ^# ]) k) q5 i: Y! t3 l. s len = decodeBase64 (lenbuf); - }. A1 M" Q' m4 v! M m = 0; ml = 2; % M y' S5 i- Y* Y( z state = STATE_SKIP_ML; 9 O. B( q/ K" P nextstate = STATE_DECODE; } break;

case STATE_DECODE: if (!len) $ e) p0 _$ Y% w. O1 I; U* B { B* h4 X% L% C F9 F' l ml = 6; , f5 R. t+ W: ^2 h. G state = STATE_CHECKSUM; break; } , f9 _9 _% m3 T, v- n# c if (inbuf == _blank>'@') state = STATE_UNESCAPE; else . O9 k0 L" L4 j/ ?' r3 W { + L% j+ _+ h, W4 j! n" x if (inbuf < 0x80) 0 Z ] Z* a, W9 c6 G/ f2 \4 | { outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; 5 T- t4 z+ L+ H! N7 N1 \0 u4 Y) |, v4 m csum += c; m++; * ~* l5 ?+ k) Y6 k r. h9 o+ k. [ } else : P; L: u) \. O3 Y; ~% K { outbuf[j++] = inbuf; if ((cp) && (isLeadByte (cp,inbuf))) % I _) t" j4 p$ m( X state = STATE_DBCS; }

} 0 V! j E# G; K) J3 v4 l3 z i++; len--; break;

case STATE_DBCS: 6 L. k1 Z9 W) k; F4 o# ?3 ]0 [& s6 ?# T outbuf[j++] = inbuf[i++]; 8 J1 _" S' G/ V( v8 A state = STATE_DECODE; break; , q) {' w; p, R; w& v6 r % p* [. B6 B+ D9 V case STATE_UNESCAPE: outbuf[j++] = c = unescape (inbuf[i++]); , I2 }/ s" j* Q) R. R- y3 S csum += c; len--; m++; 9 s' w h0 `$ }: q0 E6 j state = STATE_DECODE; break;

case STATE_CHECKSUM: csbuf[6-ml] = inbuf[i++]; if (!(--ml)) 2 o( d- `. D" L- z/ E3 {6 b: \ { csum -= decodeBase64 (csbuf); 2 c, i( o! N0 o2 X; s8 M3 v if (csum) ; @. u- r) _/ H% G { - q& u# m" R! w: ]% w; s7 Z0 z //printf ("Error - Incorrect checksum! (%lu)\n", csum); 8 V. [) ?2 B; x( _9 j //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] & p9 k7 J% i' p: F: I } m = 0; 5 X |* q- a% I1 W ml = 6; state = STATE_SKIP_ML; 9 o9 v0 \0 M2 u2 } p nextstate = STATE_INIT_COPY; } break;

default: printf ("Invalid state: %d\n", state); break; } " r/ V: j$ Y2 p1 K) z } 9 @& ?: F# W* U2 v& r/ H " I' o" d$ h4 z! q2 E- m+ C5 C fwrite (outbuf, sizeof (char), j, outfile); % g& S% O+ s- g+ E% N4 F fclose (infile); fclose (outfile); . c# O$ J, i3 D0 V) H return 0; m3 _4 f8 z$ j; d; K}

int main (int argc, char **argv) { int cp = 0;

if (argc < 3) 2 y" w) I: |$ I1 S/ I' H+ { { printf ("Decoder for Microsoft Script Encoder v1.3\n" / H- p. v( e1 c- Z6 r "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" 7 N% x/ h$ l0 R* l" W "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" ! d9 k4 \8 D9 S' n2 q# x5 S" c "Usage: scrdec13 [codepage]\n\n" ! K0 W. s' [1 f, ^9 @7 ` "Code pages can be 932 - Japanese\n" 0 @% v R" I5 w " 936 - Chinese (Simplified)\n" " 950 - Chinese (Traditional)\n" " 949 - Korean (Wansung)\n" ; `; H5 |3 c3 k x- m6 X# x3 H " 1361 - Korean (Johab)\n" "Any other code pages don't need to be specified.\n"); 2 ]8 c# x H& N9 F return 10; + O4 \& m% O7 i; y1 y7 M, _ }

if (argc > 3) % Q4 u7 `0 z' M, ?6 K" f cp = atoi (argv[3]); # i. K! ?! Y* A* @: v) `! Q% e return ScriptDecoder (argv[1], argv[2], cp); ( V- w) s- U3 @/ l8 @9 R}