网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

! x% T' {+ v3 d5 y

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

8 S! E4 [( o v& O; i2 G

附scrdec1.3源代码[c代码]：

, n* M2 u: a/ r

/**********************************************************************/ , ~- f* q/ Y9 u1 a' @/* scrdec.c - Decoder for Microsoft Script Encoder */ 4 h% M) d9 K8 }' k2 L) \0 f/* Version 1.3 */ . x: J; P$ z+ }& C2 w$ j: O/* */ /* COPYRIGHT: */ ! U1 e$ _9 E3 ? h I* y4 p v/* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ 4 k2 }# O" G# T6 ?2 ^* M) b/* Some changes by Joe Steele to correct minor stuff */ 2 b5 F4 @4 ^ `/* */ /* DISCLAIMER: */ /* This program is for demonstrative and educational purposes only. */ / A3 [* I. Z% J) N4 ]& h. b/* Use of this program is at your own risk. The author cannot be held */ /* responsible if any laws are broken by use of this program. */ - c# h# N$ e' X/* */ /* If you use or distribute this code, this message should be held */ /* intact. Also, any program based upon this code should display the */ /* copyright message and the disclaimer. */ ; {' [6 [8 v, b; z6 Y! }/**********************************************************************/

#include ! }/ @: d2 }1 r4 k- [" T#include #include

#define LEN_OUTBUF 64 #define LEN_INBUF 1024

& s, y0 r( k9 W! \, G2 e

#define STATE_INIT_COPY 100 #define STATE_COPY_INPUT 101 * B f' ?$ B6 S3 |. y. p#define STATE_SKIP_ML 102 ) P. o; G+ i# ^+ r) d# G7 i: R" B% Y. u#define STATE_CHECKSUM 103 #define STATE_READLEN 104 #define STATE_DECODE 105 & y' {( ]9 d: I- f( D' D! ^" |, c#define STATE_UNESCAPE 106 . f& A" V1 H. p* ^+ s6 H#define STATE_FLUSHING 107 4 x, [' F* t H' m#define STATE_DBCS 108 #define STATE_INIT_READLEN 109

* k% i+ _# p/ I' q+ W

unsigned char rawData[292] = { % V5 |% i y0 T0 { 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, 5 V$ }0 r6 Q5 y) i) D 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, % k& ^2 ~5 N1 n; t: K# ?: q, q" S 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, 6 y7 ~0 V2 L% u$ g 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, / x) k6 `* `7 l2 S 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, 0 t# P# y7 F1 i 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 7 F% ]- e7 z' F B 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, " q& }) m% x* o: u: t+ ] 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, # L* e( O) z' P1 D$ }% k: k 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, * C3 f, z/ m& A 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, $ p! _/ ~* v; ]" O5 A5 L 0x51,0x67,0x2f } ;

const unsigned char pick_encoding[64] = { 1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 };

# l# N* \3 L2 o; T9 W

unsigned char transformed[3][128]; int digits[0x7b];

unsigned char unescape (unsigned char c) ' e m: J% _! k3 @' D$ [{ static unsigned char escapes[] = "#&!*$"; static unsigned char escaped[] = "\r\n<>@"; int i=0;

if (c > 127) , v0 f/ u, i4 E ]5 ? return c; while (escapes) { 3 q$ }' `- {; ~7 q if (escapes == c) 3 {+ a, E# a6 G8 R$ @: ?8 \ return escaped; + i F0 b ~, c$ ^ i++; } % G4 z3 F0 p, G0 F return '?'; }

void maketrans (void) 4 k& Q# E7 k# P: J. y. X; `{ - L$ W9 @6 v! X, M9 x/ K- X int i, j;

for (i=31; i<=127; i++) 7 A% O* H# {& S5 X" W" z for (j=0; j<3; j++) , B m! ?: b& Z- ~ transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; }

韩冰

case STATE_COPY_INPUT: if (inbuf == marker[m]) { ' l4 P3 v9 y% V! N9 G, Q i++; m++; 0 r8 R) g! W( w2 w. T } $ p, O' Y9 j2 J/ I else 6 `/ ]- _- c K8 a6 l9 b { 7 V# J- R) t# N4 y6 ^* e if (m) ( G3 m2 n% U4 j4 Y! m { k = 0; 3 Y" p- | ?) B. H# L state = STATE_FLUSHING; } else outbuf[j++] = inbuf[i++];

} 8 d* @/ ~7 D/ z N2 O( t1 |- F if (m == ml) state = STATE_INIT_READLEN; 4 r. G2 v4 W/ ?5 X* ? break;

case STATE_FLUSHING: outbuf[j++] = marker[k++]; m--; . ^/ R4 c' Y1 _ if (m==0) state = STATE_COPY_INPUT; 9 z, u) A' N% ]. ?1 Z7 l break; case STATE_SKIP_ML: i++; 2 P2 m& w" M% s! k/ n if (!(--ml)) ) _+ x9 F7 X5 I8 W5 }. M state = nextstate; break;

1 d% n9 }) \5 l case STATE_INIT_READLEN: ml = 6; , l8 z7 v+ t; d5 R- p2 `1 R+ B- _ state = STATE_READLEN; break;

case STATE_READLEN: % O; _+ \) j% E( \( W5 g$ V/ X+ ~ lenbuf[6-ml] = inbuf[i++]; 8 T' M" u1 d+ z% c. b, K if (!(--ml)) { len = decodeBase64 (lenbuf); m = 0; 0 Z& U* c T* t/ ^) }3 M- J, t ml = 2; ' m' T6 }7 L" v T state = STATE_SKIP_ML; nextstate = STATE_DECODE; 2 w7 ]9 |5 r0 J. ?+ j7 E) [0 F3 e& } } 1 D& ?. k4 u2 D) ?2 J( Q* [ break;

case STATE_DECODE: . w2 ?: m v% x7 Z) M if (!len) A7 U' ]% c' d+ E# O5 Z6 y/ T' t { ml = 6; state = STATE_CHECKSUM; break; } ; }9 a* y3 U7 M1 N+ P% _ if (inbuf == _blank>'@') state = STATE_UNESCAPE; i" V4 q; c' T: y$ S1 V else { & N1 m% y2 w& e7 B: p) N& X8 w if (inbuf < 0x80) { outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; csum += c; / y L8 R0 J2 S$ o5 O) |9 i m++; ; X9 _' G. m8 A, P O C } else { outbuf[j++] = inbuf; if ((cp) && (isLeadByte (cp,inbuf))) * C0 _ ^% M( L4 i9 ?( X' C7 n state = STATE_DBCS; 0 V4 [: g/ t& B$ W. z$ V, [ }

} i++; len--; + x5 _; w0 n5 B2 m" Q5 @# A break;

case STATE_DBCS: outbuf[j++] = inbuf[i++]; & v8 h: v# G1 T* D state = STATE_DECODE; * p8 G- O/ V4 Y( B: e$ S break; 8 M% m# T& q6 R$ D, g# m 1 Q" @) A( Q8 e! ~: Y+ _ case STATE_UNESCAPE: ! D e+ P# T5 X outbuf[j++] = c = unescape (inbuf[i++]); / o+ n4 S& i& V& Z; H csum += c; len--; m++; ) R* U: _" `8 m; o state = STATE_DECODE; break;

case STATE_CHECKSUM: 4 i0 Q% i7 h) }( g& {% h5 y csbuf[6-ml] = inbuf[i++]; 1 g/ n) O; \5 T6 l if (!(--ml)) { csum -= decodeBase64 (csbuf); if (csum) { - `) d6 Z: G+ t- s0 Z9 S //printf ("Error - Incorrect checksum! (%lu)\n", csum); //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] } 1 l" p% E) V$ w m = 0; 8 _: B) ^$ h' d( J% ?. g5 t0 s8 v ml = 6; 7 d, ]+ v' L( v# z& i state = STATE_SKIP_ML; nextstate = STATE_INIT_COPY; : `3 z2 x' b' `7 d7 q5 W; E } 2 u7 o& a6 c& t" [. ? break;

default: printf ("Invalid state: %d\n", state); break; } . K9 V8 r, L M; A* Y# z } $ N" u& F7 Q- ^5 `+ [ - R4 p: G* ?* ~! i/ ?3 {6 R5 ^ fwrite (outbuf, sizeof (char), j, outfile); fclose (infile); fclose (outfile); return 0; . e9 H6 z% o8 L( B) P' R}

" w. \+ A" y' f' Fint main (int argc, char **argv) 9 P1 l* H: J: Y s2 i" B{ " _! r1 E: u9 Y* m5 A) I6 V! S* P int cp = 0;

if (argc < 3) { printf ("Decoder for Microsoft Script Encoder v1.3\n" 6 |: u: u, S$ K "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" H* u$ T, O( ~; ?4 N* w( u "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" "Usage: scrdec13 [codepage]\n\n" - ^& C! x, b* c# c3 J "Code pages can be 932 - Japanese\n" , y- N: }. n. w. d% j5 s# K " 936 - Chinese (Simplified)\n" " 950 - Chinese (Traditional)\n" " 949 - Korean (Wansung)\n" " 1361 - Korean (Johab)\n" ; n4 Q' w2 v) s "Any other code pages don't need to be specified.\n"); _6 p; ?; _" }7 [% o& s! K return 10; }

if (argc > 3) cp = atoi (argv[3]); return ScriptDecoder (argv[1], argv[2], cp); 5 l* L: [6 ?( X3 @* _! m; {}

韩冰

void makedigits (void) { ' Q$ Z; d) X) {/ |' ]0 i9 x int i;

for (i=0; i<26; i++) " f( }" L' K T+ c' m# }" e9 |( K+ {! w2 f { ! F$ K1 M- H9 H7 k% C) n digits['A'+i] = i; 6 q3 P! n5 l B1 \4 C digits['a'+i] = i+26; ' P9 r0 R1 x5 v1 V" L+ [, N1 _ } for (i=0; i<10; i++) . f. ?2 T5 N/ q! _+ c digits['0'+i] = i+52; % H$ F3 r% A2 h/ p8 H digits[0x2b] = 62; digits[0x2f] = 63; 3 B) `2 S% k1 c8 B* k}

unsigned long int decodeBase64 (unsigned char *p) . J* H; Z# S3 `1 Y6 l9 I{ unsigned long int val = 0;

val += (digits[p[0]] << 2); , q2 g. j! u$ F4 ` val += (digits[p[1]] >> 4); $ r$ J# f' F; u val += (digits[p[1]] & 0xf) << 12; 6 M; G( x, J8 ?! e' b& x+ t# e val += ((digits[p[2]] >> 2) << 8); 3 K, A* q& W, _ val += ((digits[p[2]] & 0x3) << 22); . }( m; S, z; V* {" s5 B val += (digits[p[3]] << 16); ( R! W* E" x6 s- a6 I val += ((digits[p[4]] << 2) << 24); ! w& k7 C/ P$ s- u val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 6 m! }" D8 |/ y0 F2 V/ f 10 G$ l: F2 }2 c& i0 r ba98 2 G+ U5 R) d9 v1 }! {4 M7 e fedc 76 543210 fedcba 98---- |- LSB -||- -||- -| |- MSB -| */ 6 F5 y9 A) z9 y0 k$ [ return val; % C4 \' Z7 R$ u0 {0 t$ I}

int isLeadByte (unsigned int cp, unsigned char ucByte) / p, c3 S, W$ L" z+ F# b" y2 D _{ ) A2 e: V/ W8 O0 t /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f 3 w1 `' c Y) |2 s- z, r0 }1 K) }+ K 0xe0-0xfc . Q0 i9 b# u$ h 936 - Simplified Chinese GBK - 0xa1-0xfe 949 - Korean Wansung - 0x81-0xfe ' B2 N2 S6 t4 j+ B 950 - Traditional Chinese Big5 - 0x81-0xfe 1361 - Korean Johab - 0x84-0xd3 $ J7 f* T2 E; o. Q/ ] 0xd9-0xde 0xe0-0xf9 */ 4 G5 q! Q' L' j$ a2 a switch (cp) { case 932: if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; # Q& q) x& G( a else return 0; 7 i3 A4 b7 C& E! p% R3 ? case 936: $ F6 P0 H- M, W$ U$ f; U if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; else return 0; case 949: 2 T6 Y( H& M/ a' q/ Q. O. q case 950: ( N0 P$ }- Z4 a. B3 O; h# Z if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; case 1361: if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; / {$ g: X5 I1 \4 n# }# L2 M: v7 F else return 0; default: & ]) X* l! Y& Q1 @ return 0; # Q1 i) R i9 _) T2 Y! V- d7 r( ^ }

}

int ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) # n) E8 {+ G) ` e3 B1 V{ 2 R: F, [/ c( w unsigned char inbuf[LEN_INBUF+1]; unsigned char outbuf[LEN_OUTBUF+1]; unsigned char c, lenbuf[7], csbuf[7]; unsigned char marker[] = "#@~^"; 0 m/ m0 H0 J8 b) W+ u2 ] int nextstate, state = 0; 7 V$ s0 b1 G. B4 h0 N8 Q- C- ^ int i, j, k, m, ml = 0; @% T0 c% t& x! `2 q1 Q, k unsigned long int csum = 0, len = 0; " D" r0 {+ y4 h9 x/ q9 t; `4 U FILE *infile, *outfile;

infile = fopen (inname, "rb"); . n' t; p7 Q0 X outfile = fopen (outname, "wb"); if (!infile || !outfile) 9 h+ k* S; M8 W, v# N0 c. y { 1 j/ G" z5 i# P) n7 {% d7 [/ v printf ("Error opening file!\n"); ( f, D" ^* z4 {5 C& @ return 10; % m9 C4 |1 @; y2 B } maketrans(); makedigits(); 6 [5 ?* z9 c) F7 t" E0 R. s2 O memset (inbuf, 0, sizeof (inbuf)); memset (outbuf, 0, sizeof (outbuf)); . q# l/ }( Z( B. P, Q, v( Z memset (lenbuf, 0, sizeof (lenbuf)); 5 q. @0 ?" N, P3 E! v3 q0 x, K# R + u8 V& O. |0 ?* P$ @ state = STATE_INIT_COPY; i = 0; 5 l; ]/ f& d A1 _ j = 0;

while (state) " `1 ?1 ^+ `; r7 L1 L2 W { - S7 c5 ]. ^6 z% r5 \ if (inbuf == 0) { if (feof (infile)) ' V4 N/ q# G: ?/ o/ [ break;

memset (inbuf, 0, sizeof (inbuf)); fgets (inbuf, LEN_INBUF, infile); 8 j: o! h8 O$ L, _ i = 0; ' \7 r, F: s" T; |; k# I4 o; F continue; }

if (j == LEN_OUTBUF) { fwrite (outbuf, sizeof(char), j, outfile); j = 0; }

switch (state) ' f( y# w9 X0 Q2 i" f0 P$ R: b { & \: v5 ~( o4 J y" D' Y' r0 G case STATE_INIT_COPY: ml = strlen (marker); m = 0; * d& z( a. i/ q) O& A state = STATE_COPY_INPUT; break;