网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

7 |% s3 K# x2 {# ?7 ~$ t

附scrdec1.3源代码[c代码]：

/**********************************************************************/ /* scrdec.c - Decoder for Microsoft Script Encoder */ 2 d- k( ]- ?: X/* Version 1.3 */ /* */ : J. ]0 [8 ^9 v9 h* Y1 c/* COPYRIGHT: */ /* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ - g7 Z. }+ D5 l/* Some changes by Joe Steele to correct minor stuff */ * a/ ]3 s* z9 C3 \& n/* */ /* DISCLAIMER: */ /* This program is for demonstrative and educational purposes only. */ /* Use of this program is at your own risk. The author cannot be held */ /* responsible if any laws are broken by use of this program. */ ( l& g1 S1 ]# B4 Q# m. u/* */ /* If you use or distribute this code, this message should be held */ /* intact. Also, any program based upon this code should display the */ /* copyright message and the disclaimer. */ 1 ?% f7 W; e. d* o' t, d: T5 t/**********************************************************************/

#include ) w5 ?; [7 [; z1 W0 z' ?#include #include

#define LEN_OUTBUF 64 ' g) k) H' E+ C0 s3 a5 \( b- L#define LEN_INBUF 1024

: X( |% ~- X* g) r: e* J. M

#define STATE_INIT_COPY 100 #define STATE_COPY_INPUT 101 #define STATE_SKIP_ML 102 #define STATE_CHECKSUM 103 #define STATE_READLEN 104 #define STATE_DECODE 105 #define STATE_UNESCAPE 106 % H) r) u. x- L2 y5 s& u#define STATE_FLUSHING 107 #define STATE_DBCS 108 ! M! {! q( @8 A8 \#define STATE_INIT_READLEN 109

9 P {) Y% u" F. `6 T

unsigned char rawData[292] = { 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 6 |' z- L& |% a" y 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 8 {% N% A. Q" ~; U; k& Y 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 8 H+ U z3 u, F; f- J0 C# u6 s 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, " s* j( w7 r6 e3 ^% k( x+ h2 T0 W 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 4 G3 q+ {5 B# @9 O 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, ' R3 f4 J( W8 H4 O 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, / C$ e! z8 [# F; ?7 o2 r 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, & C. x6 |. K" Y( A9 u 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, " Y& O2 O' s* w( H1 d* c4 c 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, 4 [& p/ O- i9 f8 T# |3 B8 @0 u 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 6 k$ Y3 r# {# q; W& D 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, 1 S b7 ]* e, K& `& P; U0 L& o5 a7 [% g6 | 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, : M0 R5 K1 K% T4 K. K 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, ; Q( s- @% m! i$ v) @- F" x 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, / \- r, {- w. D: e 0x51,0x67,0x2f / }5 k5 y/ @: i& K} ;

( C7 P( A' K/ W, x3 t Y' Y- Y. M9 m

const unsigned char pick_encoding[64] = { 1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, - U5 K( x- P7 W1 u, z# u1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 8 |" b) \0 A6 @9 P1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 };

. i, |# v- W. t" b! e

unsigned char transformed[3][128]; int digits[0x7b];

+ W4 N8 Y; b6 p7 {, [& e

unsigned char unescape (unsigned char c) { 4 x/ }0 ?# T" [ _; ~4 Q static unsigned char escapes[] = "#&!*$"; static unsigned char escaped[] = "\r\n<>@"; int i=0;

$ z4 D1 |; J3 N+ T

if (c > 127) / Q* T" I( }( k s6 E0 G( |7 @ return c; while (escapes) { 8 P3 ?$ C% g) O" q A$ z if (escapes == c) return escaped; i++; } ; M8 u6 U* A1 N. J% n" F, x return '?'; }

void maketrans (void) # J# v, y% Y% [{ ' r" y. P, l" r+ z1 X* z8 ^ int i, j;

- f+ D' c# p" |

for (i=31; i<=127; i++) for (j=0; j<3; j++) transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; * e( ?" C7 ?# b( h}

韩冰

case STATE_COPY_INPUT: if (inbuf == marker[m]) { / f7 G8 S! W! i' Z1 o3 M i++; 4 c# V) m. l/ q5 ` m++; # {$ |/ G P$ ` } else f6 h. F, z( s { 1 c4 `7 c# `4 m0 S- \( P if (m) { k = 0; state = STATE_FLUSHING; $ h) G( f( x0 u V \8 ^% u } else outbuf[j++] = inbuf[i++];

} # ^1 U$ T/ G7 U3 `2 ? if (m == ml) ! h: o( `& K% F& }2 ^$ Y state = STATE_INIT_READLEN; break;

case STATE_FLUSHING: 2 }% d4 f4 U) f outbuf[j++] = marker[k++]; ; U6 F \6 u* j8 }3 G m--; $ Y+ b0 p! L8 J$ j g if (m==0) state = STATE_COPY_INPUT; 9 Z$ Y1 ~# e- ~* |5 a& n/ P break; case STATE_SKIP_ML: i++; ; R6 N) O$ M U; L, F) J0 L% K if (!(--ml)) state = nextstate; 3 I. s N) C* |7 D2 m( k U' G break;

case STATE_INIT_READLEN: 6 U& y0 _: m$ J% a ml = 6; state = STATE_READLEN; break;

case STATE_READLEN: 7 ~8 B' G" X' S lenbuf[6-ml] = inbuf[i++]; # x% w- }7 p- K% Y8 L+ [5 K if (!(--ml)) { " A5 `0 h' \* v1 i len = decodeBase64 (lenbuf); ; G1 e, p) Z- C! y/ J; `2 o m = 0; 0 e! O c+ Z$ g) | ml = 2; state = STATE_SKIP_ML; nextstate = STATE_DECODE; } 8 f( s$ q+ X% s8 K4 [+ P break;

case STATE_DECODE: if (!len) { ml = 6; state = STATE_CHECKSUM; 4 T& J' F: y5 g6 H; [+ b break; 7 O( u2 ~8 p. w! R) S } ' m7 s0 @7 y" o Y* o: b2 L$ k if (inbuf == _blank>'@') ( D4 Z" x# _9 [) w5 j9 K- W state = STATE_UNESCAPE; 6 }7 [- N; [. X5 h- j, e5 \# f3 C else 7 ~4 Q/ m2 V0 B" c4 Y { # a9 c% y. Z- a8 k6 d" M0 C$ ^3 Y if (inbuf < 0x80) { 8 l% p& F- o' {. h outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; / u, G7 z/ C8 r* j1 x$ w csum += c; : a$ V) E. I5 w9 W" P# ] m++; 4 Q$ }* s! X# Y& e4 i8 J } ' n6 ^2 r% n+ O5 ]% }: { else $ M0 e5 r* S4 J3 c9 {0 o { . T9 r; L9 {1 ?1 F outbuf[j++] = inbuf; if ((cp) && (isLeadByte (cp,inbuf))) , {+ K. N" F+ \4 s state = STATE_DBCS; }

} i++; ; a0 C9 z: N5 v' e; { len--; break;

case STATE_DBCS: 9 s0 i6 R: J/ l1 S" p" A outbuf[j++] = inbuf[i++]; 0 g1 z3 | m. b/ @! I state = STATE_DECODE; break; case STATE_UNESCAPE: outbuf[j++] = c = unescape (inbuf[i++]); csum += c; len--; ' L, D' c9 e, w: I m++; state = STATE_DECODE; ) D) J- [+ R0 c2 V4 J break;

case STATE_CHECKSUM: csbuf[6-ml] = inbuf[i++]; if (!(--ml)) { 5 I2 \" L6 ?4 C8 a csum -= decodeBase64 (csbuf); if (csum) 7 s0 K) D- ~$ y0 | { //printf ("Error - Incorrect checksum! (%lu)\n", csum); //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] 7 V. C$ x9 H2 {$ B5 I( A } m = 0; ml = 6; state = STATE_SKIP_ML; nextstate = STATE_INIT_COPY; . A& ~/ @- q# O/ L9 {4 p } 3 y: K9 n3 y. d; r, A. D break;

default: : J* A- \5 S6 C9 A printf ("Invalid state: %d\n", state); 5 [, f, Q) |2 o. l break; ; u4 V9 T' N6 L7 @ } } fwrite (outbuf, sizeof (char), j, outfile); fclose (infile); fclose (outfile); 7 ~8 U0 _! @! n' K return 0; }

* v9 Z+ r/ c( c7 q- B2 zint main (int argc, char **argv) * r# K# s; E" J* s0 B9 Q6 ^" \: D) D2 Z{ ; _$ s- T4 ?0 e9 q int cp = 0;

if (argc < 3) { ; _" x4 N3 ~( T" [$ k printf ("Decoder for Microsoft Script Encoder v1.3\n" % y' k+ M2 v7 w( y* V) Q "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" 3 y1 @4 o& @3 _# N "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" "Usage: scrdec13 [codepage]\n\n" "Code pages can be 932 - Japanese\n" 9 q* L8 o) W9 }: f4 N- w! e# w " 936 - Chinese (Simplified)\n" 4 q) H0 r* M4 X! l0 X- a7 T " 950 - Chinese (Traditional)\n" " 949 - Korean (Wansung)\n" 4 w+ G O% ^) X& Q " 1361 - Korean (Johab)\n" "Any other code pages don't need to be specified.\n"); return 10; 7 l4 C+ ]2 p# [$ X }

if (argc > 3) cp = atoi (argv[3]); / [) B$ [8 J$ | return ScriptDecoder (argv[1], argv[2], cp); 3 O- e: L* _5 f1 h$ r5 ?}

韩冰

void makedigits (void) 1 C5 e" n% a+ H0 j7 ]! X{ int i;

for (i=0; i<26; i++) { digits['A'+i] = i; digits['a'+i] = i+26; ; W+ {! D8 H* Q X* C8 f5 J } 1 }: e( }+ T# x9 A) d% k% {6 R& b for (i=0; i<10; i++) digits['0'+i] = i+52; 9 l9 ~& G% R: `- S& [1 ? digits[0x2b] = 62; 6 O) f; K4 P4 M, y digits[0x2f] = 63; }

unsigned long int decodeBase64 (unsigned char *p) 1 x) q+ P6 v. l; Q! V% A& f, s" n{ unsigned long int val = 0;

val += (digits[p[0]] << 2); val += (digits[p[1]] >> 4); 2 c8 q5 b9 D2 S8 @6 N$ I val += (digits[p[1]] & 0xf) << 12; ( g8 `. t0 {, ]6 I0 b9 Y8 r1 F0 O val += ((digits[p[2]] >> 2) << 8); 0 y% e0 v% ]) U9 E: @. z val += ((digits[p[2]] & 0x3) << 22); 0 [1 k5 z0 @9 h' t6 j' y val += (digits[p[3]] << 16); ; y$ J' s' a+ o0 }" R val += ((digits[p[4]] << 2) << 24); val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 10 4 o$ D1 n. K8 n: w ba98 % o' l: i7 Y e3 n1 X0 {3 o fedc - j# H, s# t# w1 d% d: J+ m 76 543210 0 D! E( r7 H) B, d- G/ N fedcba 98---- ) @8 C# a# `2 {0 {% ]' L* C! D& y |- LSB -||- -||- -| |- MSB -| + q0 F+ R0 F; ^+ A */ return val; }

int isLeadByte (unsigned int cp, unsigned char ucByte) { # Y' p0 \% p; ^" J /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f 0xe0-0xfc 936 - Simplified Chinese GBK - 0xa1-0xfe - c' \9 g \. V 949 - Korean Wansung - 0x81-0xfe 950 - Traditional Chinese Big5 - 0x81-0xfe 9 a/ H) J" _" h7 m+ N. U! a 1361 - Korean Johab - 0x84-0xd3 0xd9-0xde ! |4 n. C. w; b/ R. u 0xe0-0xf9 */ 9 Q6 g3 h ^+ J, D" t switch (cp) ; C8 c+ J& b, a* Z; O: g3 u* S { case 932: if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; 8 \) Z2 o1 S# ?: z6 t8 S if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; 5 O$ Y- n# Z3 }1 O2 n! d+ |' N' V else return 0; * ?. ^' l" I9 Z8 S) c case 936: ' e5 ?$ K) ?' Z6 n' Z- F if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; " }' }0 Z2 V* ^ G( D9 E else return 0; 5 y% @7 G/ L* W case 949: : A* x0 F$ g6 j$ |1 t2 Z case 950: - F4 z1 b, s: b, {4 w7 d E if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; % u$ w+ n# v7 k. e case 1361: 2 i. h& x. z) g# s7 G+ w5 F6 C if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; " `2 ? O& w7 p4 w if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; & N( J4 o! F5 n1 l+ N5 A if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; else return 0; default: return 0; }

}

' J9 n' I7 `* [! e. T9 ?& yint ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) { % g; i1 {) B8 N) ?9 @. | unsigned char inbuf[LEN_INBUF+1]; 8 [ B" \: Z3 ^$ @5 W0 z- l unsigned char outbuf[LEN_OUTBUF+1]; 2 j9 b7 P$ u3 d, Q unsigned char c, lenbuf[7], csbuf[7]; 1 U. [, _. `- F' K unsigned char marker[] = "#@~^"; int nextstate, state = 0; int i, j, k, m, ml = 0; unsigned long int csum = 0, len = 0; : |) ]" }' \6 P3 b! L FILE *infile, *outfile;

infile = fopen (inname, "rb"); outfile = fopen (outname, "wb"); if (!infile || !outfile) { / R3 |6 \2 F* H% a printf ("Error opening file!\n"); 2 k4 y/ r; f2 E+ M# M return 10; . _; J! u c9 z" F1 d9 F } / O N0 @- L5 I. g& x/ s3 f5 p1 d maketrans(); makedigits(); 4 g% q/ e$ o( r" T) r8 i2 P1 T memset (inbuf, 0, sizeof (inbuf)); memset (outbuf, 0, sizeof (outbuf)); memset (lenbuf, 0, sizeof (lenbuf)); state = STATE_INIT_COPY; $ E" G" {2 q7 u) [ i = 0; j = 0;

while (state) { : k6 i2 Q! ~7 S2 ] if (inbuf == 0) . L. \7 X X6 a { p; a8 ?1 ]- i; c% ~, F0 R if (feof (infile)) ) \" A2 v7 l' Z2 k: \ break;

memset (inbuf, 0, sizeof (inbuf)); fgets (inbuf, LEN_INBUF, infile); 3 K w: b: ^9 {9 @* O" x& K: x i = 0; " x; Q @4 y* ~$ _ continue; % G9 O4 T3 |3 @/ v: V2 h# ` }

if (j == LEN_OUTBUF) { fwrite (outbuf, sizeof(char), j, outfile); j = 0; }

switch (state) 1 i* j) G5 D5 `1 U+ ~) e6 M q! p. Z { case STATE_INIT_COPY: ml = strlen (marker); m = 0; state = STATE_COPY_INPUT; & F) D$ [9 V' X s8 s break;