网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

2 r8 o: k/ _9 m* X7 O

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

附scrdec1.3源代码[c代码]：

& x, B# L; c3 W

/**********************************************************************/ /* scrdec.c - Decoder for Microsoft Script Encoder */ /* Version 1.3 */ /* */ 2 D% j* ^4 `3 e" f/* COPYRIGHT: */ /* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ ) G7 n! ~& M( ~) w- d% X( A' k/* Some changes by Joe Steele to correct minor stuff */ + f& p$ A/ R+ E% ^0 h/* */ /* DISCLAIMER: */ /* This program is for demonstrative and educational purposes only. */ $ M/ _0 |% l* f6 P5 y3 b/* Use of this program is at your own risk. The author cannot be held */ /* responsible if any laws are broken by use of this program. */ /* */ 3 T+ ?, W+ V# f# K' E8 I+ u/* If you use or distribute this code, this message should be held */ /* intact. Also, any program based upon this code should display the */ ( z' l. f+ j' W( y) R& w' [/* copyright message and the disclaimer. */ /**********************************************************************/

A# W! r% H: a2 b6 {! [

#include 3 ?( Y' [+ n! D7 ?#include #include

. y2 O5 Y6 J& V8 B- V9 E" z# ]

#define LEN_OUTBUF 64 #define LEN_INBUF 1024

9 M( P, P6 I/ d7 t: Y

#define STATE_INIT_COPY 100 8 W% Z3 L! o- g7 i) r$ n#define STATE_COPY_INPUT 101 #define STATE_SKIP_ML 102 ; w, q6 u1 H7 F% n* o( f' W7 [#define STATE_CHECKSUM 103 # d D! L+ ~1 ?# ~- E#define STATE_READLEN 104 #define STATE_DECODE 105 #define STATE_UNESCAPE 106 #define STATE_FLUSHING 107 ) N! p' e) l2 ]( G" A#define STATE_DBCS 108 #define STATE_INIT_READLEN 109

7 x( ]7 C: b' l! H& n+ e/ P

unsigned char rawData[292] = { 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, $ \: ?7 G- f! e2 C 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, % d* W: }) `7 y6 O 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, & B8 y0 Y4 O- ^$ v 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, $ B0 L/ n6 l( e+ L5 {6 k 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 4 t) V: \1 A0 l: h: F7 L n6 y0 G 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 4 r: h: s' v; A: Q 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, 0 C2 [# c/ S) c- [; A$ E9 z. Z 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, - `1 W7 u% f+ a0 \/ F 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, c, l& A* [8 n7 k( ` 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, 4 E+ Q- }: O; k: p5 I; K0 q; r4 z8 o 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, # q; F! |# E4 ]# k; O) T 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, ! G5 m9 q4 \! _9 c1 [ 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, * I* J* |6 G6 j; T& A2 P) R 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 4 J. t, U% B4 k8 [. L- | 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, - u! u; o U2 P' E 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, 0x51,0x67,0x2f 4 [, q; ~- N: @} ;

" e2 [0 b8 C, P$ p/ F) M4 r

const unsigned char pick_encoding[64] = { 1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 7 b& F, x( t5 I' v1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, ) B0 D* X; V5 Z/ y4 d* o6 @1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 4 i. F3 {1 v, p" v+ p( _};

unsigned char transformed[3][128]; int digits[0x7b];

unsigned char unescape (unsigned char c) $ B0 O4 ]1 X& v3 \{ static unsigned char escapes[] = "#&!*$"; static unsigned char escaped[] = "\r\n<>@"; int i=0;

3 S3 j: K* K! _5 o: S# _( H

if (c > 127) return c; 2 Q, ^# P; g+ ^/ m$ W/ D6 ` while (escapes) { if (escapes == c) 7 r+ c t* n! X: w' `3 a. ~ return escaped; % Z$ a) Q# [# ^ c& X" I: s i++; } return '?'; }

9 U/ x6 j4 S7 K& X. x6 h. e# Q0 ]# G' ^

void maketrans (void) d9 |! \' p1 Y{ int i, j;

2 X: c( w/ u$ X0 ^0 B

for (i=31; i<=127; i++) for (j=0; j<3; j++) ) [: \2 W3 r7 x& B+ y- m/ c& ^ transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; }

韩冰

case STATE_COPY_INPUT: 3 Y5 @& B2 m- a E if (inbuf == marker[m]) 0 l6 x5 e2 ~2 K8 o6 u U { R: x3 u5 I$ a) V8 j$ A) O9 n i++; m++; } else { if (m) { 6 O# D0 `8 X. N5 q# ^$ G1 h. k k = 0; state = STATE_FLUSHING; ! F& A9 b$ y( }0 s8 J( \2 r, V8 H } 4 K* N' d: [9 v2 z: P( X! ?* n else % U' t8 O- N- Y' ]' m: \ outbuf[j++] = inbuf[i++];

} if (m == ml) state = STATE_INIT_READLEN; 4 r. r% `; a* r break;

case STATE_FLUSHING: outbuf[j++] = marker[k++]; ; U9 G# r5 _( v- G; W+ M m--; if (m==0) state = STATE_COPY_INPUT; : m) j) z% \! ^- ~7 V break; / v; f( J0 p) \' {4 r) [ A1 S1 I case STATE_SKIP_ML: & U! D9 @4 k3 Y1 a* M. ? i++; if (!(--ml)) - v" S/ g- y9 V2 E1 x4 ] state = nextstate; break;

% S% ~8 D4 T* O7 C* r0 \ case STATE_INIT_READLEN: * g3 ^$ _8 h6 E0 h ml = 6; state = STATE_READLEN; ' F: T: B3 ~( C# i! ` break;

case STATE_READLEN: lenbuf[6-ml] = inbuf[i++]; $ a4 j3 j- W5 R' n if (!(--ml)) 3 W1 D& n* t3 ?2 i$ G4 s$ T { len = decodeBase64 (lenbuf); 0 |! V$ \" f9 B A7 w7 B+ }% A m = 0; ml = 2; + S6 n! l! ~) W* D state = STATE_SKIP_ML; ( |' b' h; U% z( n1 F/ y nextstate = STATE_DECODE; 7 a( {7 W, ?5 k# }5 o } C7 ^# u- d0 g- R7 i8 a break;

case STATE_DECODE: 4 r2 K- R% R6 c& I; C! [9 ]6 ? if (!len) & W. e8 \% u/ a$ m* { { ' T8 C {( L6 l+ ]% `: x ml = 6; 9 r6 F& c' _/ K& T! M state = STATE_CHECKSUM; ; V1 q! O9 ~8 P9 ^ break; 9 @# S2 r7 b5 ]# L } # a0 G& V4 p! T" v" X if (inbuf == _blank>'@') 4 f: {* t/ |0 F* x) M& i state = STATE_UNESCAPE; else ! t6 d3 g: i. k1 p5 m { if (inbuf < 0x80) . Z& V1 M. [2 B# c+ F4 ] { 9 u/ v- w* e. V% y; s3 v outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; 6 C* J1 e% `. ~& u6 @/ G2 G0 G S csum += c; % S! p6 ^8 N$ T$ @/ r2 Z) x3 K m++; } else @) o* k4 E' L6 {' q3 ?0 T) {: Z { # P' V* P% n7 k- e4 g outbuf[j++] = inbuf; + v9 K: S; b( V- E. y. C: i( n" m if ((cp) && (isLeadByte (cp,inbuf))) state = STATE_DBCS; }

} ( n$ ?9 V( Q" x, r8 ^# H* \: F1 ^ i++; # U8 d/ Q) x' J" \$ k7 I. R len--; 3 g. M u7 ]. W/ M% p# x5 {0 T break;

case STATE_DBCS: outbuf[j++] = inbuf[i++]; - B( f5 ^, r9 { m& W state = STATE_DECODE; + Y) h! @1 P; l4 L( n& J- C break; ! X& ?! P$ V1 @4 F5 e, ?2 z# A case STATE_UNESCAPE: outbuf[j++] = c = unescape (inbuf[i++]); csum += c; ) f/ n" Y z2 y2 o2 n- \. D len--; 0 p0 f) w8 r& a. U8 i1 m5 [ m++; 4 ^4 s. @7 H2 }4 b state = STATE_DECODE; 1 V: l# ?( H, @: J, G break;

case STATE_CHECKSUM: csbuf[6-ml] = inbuf[i++]; if (!(--ml)) { ; e5 q6 c+ A7 ^6 @* _: {3 l- x csum -= decodeBase64 (csbuf); 6 X; m! r3 Y- S' u# z* w if (csum) + m4 d! T( Y" r d { //printf ("Error - Incorrect checksum! (%lu)\n", csum); 9 A" {8 I9 `8 G$ Y6 C& a //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] } 5 V* L1 L5 R' w* @. K m = 0; ml = 6; 2 f8 T9 u+ {! W& G& J state = STATE_SKIP_ML; nextstate = STATE_INIT_COPY; 1 x' U! g, l7 J! N1 I7 y" e0 f: | } 0 W4 E( ~& f1 z$ n- @) M1 r+ m% @7 ` break;

default: printf ("Invalid state: %d\n", state); 9 w& s& s1 P; L7 I7 ]. f+ O break; : X% X" J/ l/ z. A& G6 x9 U } } ; p3 d5 b9 d9 k/ a ; d# O' J7 ~ y) m" Y fwrite (outbuf, sizeof (char), j, outfile); : g6 c4 s2 i( k; Q8 i& E fclose (infile); 8 h0 Z* s- v4 J$ D2 c1 V fclose (outfile); return 0; 3 y+ w, Z9 @, ^}

int main (int argc, char **argv) . e |/ V% U4 L{ int cp = 0;

if (argc < 3) ; T- X0 u) y8 Q0 Z0 g8 Z { printf ("Decoder for Microsoft Script Encoder v1.3\n" "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" "Usage: scrdec13 [codepage]\n\n" $ b& ~" B1 ?. @1 A5 {+ R: {0 y! \ "Code pages can be 932 - Japanese\n" 0 Q4 R1 q- e' l p+ l$ E " 936 - Chinese (Simplified)\n" " i0 y- [2 b5 A8 v/ J: q " 950 - Chinese (Traditional)\n" " 949 - Korean (Wansung)\n" 6 C: V0 _ N9 W6 x4 k: T2 ^ " 1361 - Korean (Johab)\n" "Any other code pages don't need to be specified.\n"); return 10; }

if (argc > 3) + D7 a. \8 }9 q" b& U cp = atoi (argv[3]); ! q0 V) C+ g4 y) q: O! L return ScriptDecoder (argv[1], argv[2], cp); / K# L8 ]% j% S}

韩冰

void makedigits (void) ; f3 X: P( D$ e3 u{ 8 N3 H y M6 n h' b& ^ int i;

for (i=0; i<26; i++) ) f1 ~6 ~3 i; O2 @4 S { - W3 _7 g& Q& A digits['A'+i] = i; 4 {8 v2 c( t% D; d digits['a'+i] = i+26; } 8 h0 P* I/ I2 p! |: Z/ |! [+ F for (i=0; i<10; i++) $ t$ j' q" P) t2 k: `' c0 z% ^* A/ l$ c digits['0'+i] = i+52; # Z3 i# B* h% Z% d5 w9 V digits[0x2b] = 62; digits[0x2f] = 63; }

unsigned long int decodeBase64 (unsigned char *p) { 7 x1 ?3 M% c- z. o unsigned long int val = 0;

val += (digits[p[0]] << 2); val += (digits[p[1]] >> 4); val += (digits[p[1]] & 0xf) << 12; val += ((digits[p[2]] >> 2) << 8); 3 _2 G* u' u7 M& j! t val += ((digits[p[2]] & 0x3) << 22); val += (digits[p[3]] << 16); val += ((digits[p[4]] << 2) << 24); val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 10 % ?; t5 t" z* p ]% a: W ba98 fedc * J$ ?- R' p2 a" F; C. f; \ 76 # m! f$ N1 ]* q) O0 I! ` 543210 fedcba 98---- |- LSB -||- -||- -| |- MSB -| */ return val; }

int isLeadByte (unsigned int cp, unsigned char ucByte) . m* D; V& `- O7 Z{ /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f @/ ^3 E/ x7 H 0xe0-0xfc 936 - Simplified Chinese GBK - 0xa1-0xfe 1 S2 v3 s) D1 ` 949 - Korean Wansung - 0x81-0xfe 950 - Traditional Chinese Big5 - 0x81-0xfe / b) ~7 e1 {4 {% r; K 1361 - Korean Johab - 0x84-0xd3 : F. c: u- q2 N& ?/ d8 k 0xd9-0xde / P" E: h! b7 c7 m 0xe0-0xf9 */ 6 O9 i+ U: h& \& ?1 u z switch (cp) { 5 a6 O' R/ H& F8 t' e case 932: ; P. L, P' F+ f4 H" t+ ^8 } if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; ( h6 S2 W2 N- k+ G" J! G8 M if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; else return 0; 0 b k2 H/ ?5 V0 x& p1 [8 L case 936: if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; % c3 t0 p, ^+ O+ W3 l/ _8 ? else return 0; 3 I' D7 C7 ?1 e! N case 949: ; |$ Z/ |, |- P( q case 950: if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; case 1361: ! j2 D* \" b. ~3 g2 q7 v" {' R if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; 4 m- c) R# n7 V% }& [ else return 0; 8 g' q' H2 H3 Y, ]: _& k default: + R2 f% b+ f$ n/ C5 V return 0; % M7 B7 l+ W$ L9 s N; v/ O- n$ L }

}

int ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) { / r5 K4 [" o1 p$ L unsigned char inbuf[LEN_INBUF+1]; unsigned char outbuf[LEN_OUTBUF+1]; unsigned char c, lenbuf[7], csbuf[7]; unsigned char marker[] = "#@~^"; % b) T9 R: n- p- ~: F4 p* K# j int nextstate, state = 0; / z- @$ o$ J/ t/ r8 H, y int i, j, k, m, ml = 0; unsigned long int csum = 0, len = 0; # [: V d. i8 s) l FILE *infile, *outfile;

infile = fopen (inname, "rb"); outfile = fopen (outname, "wb"); if (!infile || !outfile) { 4 \, T( ~7 ~& O$ O% b3 F printf ("Error opening file!\n"); return 10; 4 Z4 b9 u, k1 [" t9 I( l+ O2 e } + T' {% n' Q9 C+ V u: P/ U maketrans(); 6 i( O, Y. J- m% T s' _ makedigits(); 8 W2 I/ Q1 i# f/ G8 ? memset (inbuf, 0, sizeof (inbuf)); 3 `3 @$ S) h9 j, E% n2 F memset (outbuf, 0, sizeof (outbuf)); memset (lenbuf, 0, sizeof (lenbuf)); 7 d; `# `/ _" S j$ x state = STATE_INIT_COPY; 5 G7 U6 Y+ K/ ]3 g i = 0; . ], x2 ?1 E4 x( Q j = 0;

while (state) { 4 m. U9 i" O4 M- V+ K6 `- J if (inbuf == 0) { if (feof (infile)) break;

memset (inbuf, 0, sizeof (inbuf)); fgets (inbuf, LEN_INBUF, infile); ( `# {* a1 a8 V i = 0; / A& @. {% B# P/ e- Y2 e& \ continue; # Y7 h4 e, `# Q. ? }

if (j == LEN_OUTBUF) { fwrite (outbuf, sizeof(char), j, outfile); e" n8 Y, ?. o- I( Y j = 0; 3 P# |) q, O2 r" p& |3 H }

switch (state) / c. A+ ~, P5 Y. a { & s; ?7 X+ v0 {( ]7 C8 h" `8 R9 Y case STATE_INIT_COPY: ! ~% K5 F5 V( d" U9 t. h& q6 H; L ml = strlen (marker); ; D) l) v) d/ q8 h8 { m = 0; state = STATE_COPY_INPUT; break;