网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

附scrdec1.3源代码[c代码]：

: G3 K0 g5 z$ M! `; x( d

/**********************************************************************/ /* scrdec.c - Decoder for Microsoft Script Encoder */ * L0 M0 M# L( n% I) |/* Version 1.3 */ /* */ 8 x5 { M4 E, s! K/* COPYRIGHT: */ / N4 O# G- ?4 V7 V/* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ ) q+ w: c1 k# o$ q5 e% l/* Some changes by Joe Steele to correct minor stuff */ /* */ /* DISCLAIMER: */ 7 o; m* W6 y8 f: O( o1 s% a$ C/* This program is for demonstrative and educational purposes only. */ /* Use of this program is at your own risk. The author cannot be held */ 1 {" Z, [: e! |( z6 t/* responsible if any laws are broken by use of this program. */ /* */ / ]) O" n% @6 K" j( L/* If you use or distribute this code, this message should be held */ 6 c# R& V0 `5 G3 v, c$ I% [/* intact. Also, any program based upon this code should display the */ 1 m0 f2 t1 p/ z+ u; q+ v/* copyright message and the disclaimer. */ /**********************************************************************/

#include #include #include

#define LEN_OUTBUF 64 #define LEN_INBUF 1024

5 q" `0 u, N! _$ }% ^

#define STATE_INIT_COPY 100 " M' w' c c% d& v$ L& N8 u/ W3 n#define STATE_COPY_INPUT 101 #define STATE_SKIP_ML 102 #define STATE_CHECKSUM 103 #define STATE_READLEN 104 0 Q. M7 t$ h: e4 u. i#define STATE_DECODE 105 * C- c* }, Y# W' d* Q, q#define STATE_UNESCAPE 106 1 L+ N7 [" i- E3 x* _% a: A5 f2 J#define STATE_FLUSHING 107 #define STATE_DBCS 108 #define STATE_INIT_READLEN 109

, X: E% n' c/ q, C

unsigned char rawData[292] = { 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, / v9 t- c: Y3 {' Y 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, ) V. q) ?" b' G' {, d 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, ' @ H2 B$ L6 B& W+ e6 ` 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, ' ~9 O( ~. r0 \6 M2 l& b- L& r 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, % h [. p) j3 \2 R; B4 z 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, * [4 h" F( w5 g- q6 F 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, ( c' s/ Y" ?! E7 h 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, * [+ ]# h4 j6 A6 m( Y 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, ; `. K/ j# j k# n( g 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, % [+ F' z; j j) l$ Z, O, w( E- t 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, 1 z7 ]) l+ X; \* l+ O 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, . a- B5 |) q1 ^ 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, & _. T( ?9 ?- Y4 x% ~' ` 0x51,0x67,0x2f # Y+ o. q+ u* _ D3 r} ;

1 T# W1 m$ ?" N

const unsigned char pick_encoding[64] = { 1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 & d7 | P0 T# y* ~3 v" e/ ?! `};

unsigned char transformed[3][128]; int digits[0x7b];

9 e# u F- `8 O/ t9 [

unsigned char unescape (unsigned char c) { . ?( H: k! m8 |, i# k0 { static unsigned char escapes[] = "#&!*$"; ) h) g4 x# z% u5 q static unsigned char escaped[] = "\r\n<>@"; * @& p0 L& ~3 Q3 I Z R, a int i=0;

if (c > 127) 9 ]$ z% v" B5 l _0 c return c; while (escapes) ! e& }, A& N O5 {% ~& d+ m' _ { if (escapes == c) return escaped; $ J& f( v# u6 Q! w i++; } . l2 [1 p( a+ P0 M( ? return '?'; }

void maketrans (void) 0 p$ j/ h( K |. A# z' @* f% l4 W; s3 G{ int i, j;

for (i=31; i<=127; i++) * D6 p9 q) K" E# f1 m. { for (j=0; j<3; j++) transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; }

韩冰

case STATE_COPY_INPUT: 4 P! v4 e9 ?& n8 T8 d if (inbuf == marker[m]) 1 I( Y; ^: R. D5 c2 [, f: z { # @3 K4 m0 b* d1 S7 z i++; : }/ x# X( e J1 [+ s2 t s* L m++; 7 [! x0 L7 Y6 I Z } else 0 Q) O c. D3 r { 3 K/ w! v, i3 b8 [5 w4 u! _ if (m) ' ?; u0 D$ S! B* P- E; ? { - }8 b* T/ X, V, I6 N! g k = 0; 1 m/ Q* j$ m( E5 ^ x4 D j. m; v state = STATE_FLUSHING; } : l2 Y. Y+ L, Y" x5 w else outbuf[j++] = inbuf[i++];

} 5 P! X+ E/ `) |7 k if (m == ml) state = STATE_INIT_READLEN; break;

case STATE_FLUSHING: outbuf[j++] = marker[k++]; + r2 u6 |8 C( G1 m, P& } m--; if (m==0) state = STATE_COPY_INPUT; break; case STATE_SKIP_ML: i++; 0 E( A9 U: n' h6 ~ if (!(--ml)) state = nextstate; break;

; m# ?: F8 k; t6 c2 K case STATE_INIT_READLEN: : l6 R: h* Z! E ml = 6; state = STATE_READLEN; break;

case STATE_READLEN: " y4 A+ ?# C0 q! ?& F lenbuf[6-ml] = inbuf[i++]; if (!(--ml)) { 9 p) D) y/ ^2 E) W len = decodeBase64 (lenbuf); 2 V9 F' z$ I1 Q# b: R m = 0; ml = 2; / g" } X, j: p! O state = STATE_SKIP_ML; nextstate = STATE_DECODE; - Z2 h* S9 l2 H8 U; ?% r } break;

case STATE_DECODE: if (!len) w; ?$ `- |+ x% { { & g2 `8 g; u, m" a; v- \7 e0 T ml = 6; ! D2 ]5 x9 c# y$ J state = STATE_CHECKSUM; break; , M0 i: H9 x* r& J$ E' m7 y } if (inbuf == _blank>'@') + w* x0 |2 l6 Q3 K( e5 t) u) @) M [5 ] state = STATE_UNESCAPE; / h) Q+ v) T& Y5 r/ H" l. Z else ' W; `# a2 S2 V6 \3 O8 D l { if (inbuf < 0x80) { outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; $ J9 c8 G4 C- R5 P# O o1 p csum += c; m++; } else 4 \1 ^( `8 y( P; T { 6 f% r2 ]: G% v, C9 `/ Q& F outbuf[j++] = inbuf; & _ Q9 N+ L% N! G( v if ((cp) && (isLeadByte (cp,inbuf))) state = STATE_DBCS; 7 t! g1 T9 v. ?6 v5 } }

} ; A, |# y' P' e/ Z i++; len--; 1 L2 o% w1 n3 u break;

case STATE_DBCS: z3 M s$ }5 Q9 Q& j outbuf[j++] = inbuf[i++]; state = STATE_DECODE; 7 b5 |5 L p5 o2 h break; case STATE_UNESCAPE: . |- m% U% v- f* ^: [1 ~: n& }( E outbuf[j++] = c = unescape (inbuf[i++]); $ H" O1 v* g/ E' y csum += c; ' r- o" b) Y- K! t, x, _ len--; m++; 1 {* S# }- a) E& P! r2 F5 t6 _ state = STATE_DECODE; % ~! x. c. r4 f* @6 K/ m break;

case STATE_CHECKSUM: 7 u) m2 [4 ?3 E. U csbuf[6-ml] = inbuf[i++]; " c; u- K: d: q& x9 L4 _4 P o if (!(--ml)) { 7 ^/ ^8 ?' z& h! u& X$ w csum -= decodeBase64 (csbuf); 1 V& z8 N3 v; ^% C if (csum) 3 j! P8 |6 O" f. t: D { //printf ("Error - Incorrect checksum! (%lu)\n", csum); //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] } 3 B5 x, _6 ? p$ G% E9 D/ d3 i m = 0; . W8 `6 _" H1 F9 }2 p ml = 6; 2 I! o$ r( E& B0 W: a+ \. ]- k3 z2 j state = STATE_SKIP_ML; ! H. w0 L' Y; n$ P& ? nextstate = STATE_INIT_COPY; & d3 B) Z: v1 r! k+ \: y; _ } } * n$ W* u9 M8 X7 T' c8 B break;

default: ! Z- T- ?$ e- S" _4 r8 l" F) j; p printf ("Invalid state: %d\n", state); 2 q2 { ~: U3 E- P6 E break; 1 c, D0 O; X$ k: O2 V } 0 z4 {( [+ v- c$ s" M } fwrite (outbuf, sizeof (char), j, outfile); : E: \: M. t7 X; |: \# H' G& O" F1 P" s fclose (infile); % L8 F4 d) ^( v- }* z3 N+ l! C9 ]9 x fclose (outfile); return 0; 3 W9 b. ?9 p7 I6 } P9 t6 ^}

( [# }& g& n$ M1 h& V. Qint main (int argc, char **argv) { ! K& ~# z# s) K$ M \# ? int cp = 0;

if (argc < 3) ' K% f) F7 m! F! V6 I5 v { printf ("Decoder for Microsoft Script Encoder v1.3\n" $ J) d- ~% g4 A1 n2 |+ I "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" 3 M @0 y: b0 m' x "Usage: scrdec13 [codepage]\n\n" "Code pages can be 932 - Japanese\n" " 936 - Chinese (Simplified)\n" ( l. @, `- O2 L' e " 950 - Chinese (Traditional)\n" 6 S, a9 s0 I A) j1 l6 a " 949 - Korean (Wansung)\n" " 1361 - Korean (Johab)\n" "Any other code pages don't need to be specified.\n"); return 10; }

if (argc > 3) + M1 {9 i6 T- M" {; [ cp = atoi (argv[3]); return ScriptDecoder (argv[1], argv[2], cp); }

韩冰

void makedigits (void) / h) s- I) i$ h: p: |{ int i;

for (i=0; i<26; i++) { 3 e" I, f3 E* ~: S digits['A'+i] = i; digits['a'+i] = i+26; } for (i=0; i<10; i++) + Q& \% S h- F/ V/ z' | digits['0'+i] = i+52; " x [2 ~" J" M1 { digits[0x2b] = 62; digits[0x2f] = 63; }

unsigned long int decodeBase64 (unsigned char *p) ( H9 ~; F% q* p1 C' m! K+ G{ unsigned long int val = 0;

val += (digits[p[0]] << 2); ) G, Y1 e3 ^5 j/ s; k$ D) o! i val += (digits[p[1]] >> 4); 1 \0 g) t! X! W" E2 b% f2 R val += (digits[p[1]] & 0xf) << 12; 1 {. P5 z4 C- p val += ((digits[p[2]] >> 2) << 8); val += ((digits[p[2]] & 0x3) << 22); 1 k* l" S/ a0 f4 {: f: Z8 A val += (digits[p[3]] << 16); val += ((digits[p[4]] << 2) << 24); val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 10 - n) q* O. ?; G2 M" W. r$ Q ba98 / A2 ^' |# }. C% ^- q- F( [0 J! \ fedc 76 $ C0 O$ ]$ R( b/ U5 I 543210 fedcba 98---- $ Y1 v: r: W# D0 D3 p- _ |- LSB -||- -||- -| |- MSB -| ' k0 e+ D* s! z% W3 E/ ?3 B */ return val; 2 |6 t9 b* M% k}

int isLeadByte (unsigned int cp, unsigned char ucByte) 3 E2 Q# [& H9 b9 [, i{ * K {0 @0 a2 q /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f $ F, Q {! w( B, W5 _ 0xe0-0xfc * m& w$ X* {/ I' ^/ h# @0 T 936 - Simplified Chinese GBK - 0xa1-0xfe 949 - Korean Wansung - 0x81-0xfe # b `$ @. ]. h* F" |* M 950 - Traditional Chinese Big5 - 0x81-0xfe 1361 - Korean Johab - 0x84-0xd3 0xd9-0xde 5 \+ o i3 U4 E L 0xe0-0xf9 */ switch (cp) : p; V6 [" \9 C; T { case 932: 4 c- ~/ V: D Z, o6 Q if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; else return 0; 7 [: Z4 X0 U/ N7 p/ ?0 l9 N case 936: 1 }* R% u. T$ f2 x* p2 S( y if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; 6 G4 T$ ?) a0 R* I else return 0; # ^5 y6 t! ^6 I7 t6 h! J$ b4 }: C9 u0 V case 949: 2 r$ s$ x0 ^: f* A0 E( v5 J$ |$ z case 950: if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; , ^5 I; O; {: K- L else return 0; 3 F$ ~: p; g5 y* P4 K/ |. H9 a' c case 1361: / J# E! ^" {! ?$ k* z if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; 8 P2 `/ c+ O# r4 I+ H if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; else return 0; default: return 0; }

}

/ c6 K9 w( f+ aint ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) 1 l7 @* q. s# G; P1 K/ b* e{ unsigned char inbuf[LEN_INBUF+1]; unsigned char outbuf[LEN_OUTBUF+1]; , q+ H6 S' _% g) ~0 j/ \& A unsigned char c, lenbuf[7], csbuf[7]; unsigned char marker[] = "#@~^"; int nextstate, state = 0; int i, j, k, m, ml = 0; unsigned long int csum = 0, len = 0; ( p% B9 Y& |" D FILE *infile, *outfile;

infile = fopen (inname, "rb"); outfile = fopen (outname, "wb"); if (!infile || !outfile) { # _6 g6 h; w) B2 D1 p printf ("Error opening file!\n"); 6 ?1 K& ~1 E/ E% D" g" Z# X# P return 10; } " [- [6 q' M& A6 O: X2 F4 I# w maketrans(); makedigits(); memset (inbuf, 0, sizeof (inbuf)); 7 f7 q9 T0 y6 }6 T. m& Z7 ]; u# w memset (outbuf, 0, sizeof (outbuf)); memset (lenbuf, 0, sizeof (lenbuf)); 4 r+ q$ d" L* @, \/ n . ?* V/ i6 N4 Q! v* ^! _* c# y state = STATE_INIT_COPY; 1 l6 b' h. G, c+ b* z i = 0; j = 0;

while (state) ; b0 u" a+ t8 v2 |8 l6 u4 X9 w { if (inbuf == 0) { : R+ X% V& D0 J5 O if (feof (infile)) , w. {! }& n9 u2 f# ? break;

memset (inbuf, 0, sizeof (inbuf)); fgets (inbuf, LEN_INBUF, infile); , s, o9 B) G' L- ?7 L5 y i = 0; 3 i9 Y0 e6 t: k+ D- e' a continue; }

if (j == LEN_OUTBUF) 8 G% A+ A$ k& m9 f: \8 ? { 0 M$ A2 C& s7 b9 E# D fwrite (outbuf, sizeof(char), j, outfile); 1 @5 y1 [: ]* {4 `- X2 h3 D j = 0; + F' r0 [2 O6 T' L! o% | }

switch (state) ( c6 |$ E3 F& I+ j% ^ { # C: G4 z! U5 [8 S. q" p- G case STATE_INIT_COPY: : T+ G9 m5 M& \0 @3 C. B4 S. g ml = strlen (marker); 7 n' @& X# x. B; k/ o) R m = 0; state = STATE_COPY_INPUT; ; r, i% t. W3 _5 a+ c) S break;