网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

" H B8 l7 U: @9 c* x4 z

附scrdec1.3源代码[c代码]：

/**********************************************************************/ /* scrdec.c - Decoder for Microsoft Script Encoder */ - S) |8 q( [" B! w6 K% B: p" R/* Version 1.3 */ 9 ^, @, Q7 y4 J/* */ & u" n) X+ A9 ]9 L, T$ `; ^2 i/* COPYRIGHT: */ / a$ _# X; k1 W. D% o! Q/* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ /* Some changes by Joe Steele to correct minor stuff */ ; h: C6 q' y, K% d( O/* */ /* DISCLAIMER: */ & g! c# I% m) n O- `/* This program is for demonstrative and educational purposes only. */ /* Use of this program is at your own risk. The author cannot be held */ $ Q* J' j. H( i7 j/* responsible if any laws are broken by use of this program. */ " p" m6 a; {1 z! Q; ~& y( {; ~* o/* */ * _* b/ X% f; a; t4 d, k/* If you use or distribute this code, this message should be held */ /* intact. Also, any program based upon this code should display the */ /* copyright message and the disclaimer. */ " s6 x/ a- J$ o" \3 e+ @/**********************************************************************/

P3 `$ w" V b

#include + o4 i2 d4 r" ~' H- N#include & M# R" R; H: i# x3 n/ q: T#include

#define LEN_OUTBUF 64 2 r. b$ M) C2 x1 a4 H#define LEN_INBUF 1024

4 v6 U0 L4 G7 h5 j5 Z1 y# V

#define STATE_INIT_COPY 100 & N+ e, u0 ^1 P6 |#define STATE_COPY_INPUT 101 4 K: i; D2 z! X! x, p#define STATE_SKIP_ML 102 " c6 X. V* f2 p( `+ b) }#define STATE_CHECKSUM 103 #define STATE_READLEN 104 # ^6 ]0 n3 _! V1 l) M) }4 v#define STATE_DECODE 105 #define STATE_UNESCAPE 106 3 H, ^$ G6 z! V0 E+ z, K8 M: E#define STATE_FLUSHING 107 #define STATE_DBCS 108 #define STATE_INIT_READLEN 109

* s' k9 ^$ ^7 n5 A, b1 |) p

unsigned char rawData[292] = { , {0 w1 c! S `( w 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 7 G' I. }# p; q2 Q$ f, C- ]1 _ 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, $ `: G6 Z9 x! D% h7 ~# Y 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, ' O: I0 N$ A! u3 \! w) z' { 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, * ?6 H9 z; Q# |5 m 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, ) S- M/ o* _: o. Z9 q2 i 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, ! O r& y. Q$ l$ I9 h% i 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, * g, x$ ^7 N5 k# ~# f8 u' T- E 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, $ I* p3 }9 o/ ?9 \; { 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, / W- `- h+ h5 i# L7 k( L$ u3 z 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 3 ^, H" E! D: \6 P. U: _) l. H 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, ( J; l7 U! a6 |% g% S 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, 0x51,0x67,0x2f } ;

const unsigned char pick_encoding[64] = { 1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 6 Q& V1 e5 I9 m$ F8 L, R1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, " h/ ^" r. w! q2 R) b( Z, H- E1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 ) P# o! d' l1 c! T4 h' S3 Q};

unsigned char transformed[3][128]; 9 m# s( h8 B0 R) W% Xint digits[0x7b];

unsigned char unescape (unsigned char c) : b* y4 y5 I. w& n{ 8 J0 W' W& s: q7 r, M- l static unsigned char escapes[] = "#&!*$"; 4 n9 I; [. k' q& T static unsigned char escaped[] = "\r\n<>@"; & |$ ~$ B( m2 M7 Z! {& L9 I0 P int i=0;

if (c > 127) & v5 g6 M! G, `2 s/ Q2 c: B return c; 4 k. L6 S# [7 N+ M' p while (escapes) { if (escapes == c) return escaped; - C) m7 p- o8 }& n i++; } return '?'; : S( ]$ w, b k* @) ], ~7 {}

void maketrans (void) { 7 b; a9 o# f# b6 P int i, j;

for (i=31; i<=127; i++) for (j=0; j<3; j++) 1 R6 o& Z6 ~- s9 X, } transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; }

韩冰

void makedigits (void) { int i;

for (i=0; i<26; i++) { digits['A'+i] = i; digits['a'+i] = i+26; 0 X( q& ^; y# M: T, y, ] } 1 l/ u% X& Q& M4 u: @' W I for (i=0; i<10; i++) digits['0'+i] = i+52; digits[0x2b] = 62; " ? ^$ ~: I% x- }; g6 @: ~ digits[0x2f] = 63; 2 m( @$ y3 ?; ]$ j% C}

unsigned long int decodeBase64 (unsigned char *p) { unsigned long int val = 0;

val += (digits[p[0]] << 2); & s4 ^" \* f" e+ d0 m& N3 U val += (digits[p[1]] >> 4); val += (digits[p[1]] & 0xf) << 12; 0 l1 E" K D, s7 g8 Z$ P val += ((digits[p[2]] >> 2) << 8); 5 p" A: s) O$ F# } val += ((digits[p[2]] & 0x3) << 22); val += (digits[p[3]] << 16); 9 w# V/ j5 r9 Y3 [' t9 ]1 W( N val += ((digits[p[4]] << 2) << 24); val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 ) z1 J: V @. [ G5 ?5 W" @ 10 ba98 fedc * k% I w6 d7 @/ d" j; r+ Z 76 543210 fedcba 98---- 8 x" F; r- }0 h- s( M) W8 n' h6 P: O |- LSB -||- -||- -| |- MSB -| */ return val; }

int isLeadByte (unsigned int cp, unsigned char ucByte) 6 }( B( r4 V! ~! p0 c1 R3 i8 x/ S{ " n- A# I/ q( t7 m /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f # `, J; c* c' k7 F4 N/ t v 0xe0-0xfc 6 u. Y/ A& I+ j; g. t 936 - Simplified Chinese GBK - 0xa1-0xfe 949 - Korean Wansung - 0x81-0xfe 950 - Traditional Chinese Big5 - 0x81-0xfe 2 a0 R) E: j' F% y+ g) f 1361 - Korean Johab - 0x84-0xd3 0xd9-0xde 0xe0-0xf9 */ switch (cp) { case 932: if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; else return 0; case 936: if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; else return 0; , R( r. _. ^. _2 P7 L9 C: G case 949: case 950: if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; & \0 ^- o0 Z* D case 1361: . X; N+ A5 x7 t6 n2 P4 E9 x( \, ` if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; * r& P5 ~# `$ { if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; else return 0; default: return 0; }

}

+ N3 K$ a7 ]8 R: Fint ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) { unsigned char inbuf[LEN_INBUF+1]; unsigned char outbuf[LEN_OUTBUF+1]; unsigned char c, lenbuf[7], csbuf[7]; - x7 I# Z6 Q! N/ Z6 @# n: ?' X7 i. `0 h unsigned char marker[] = "#@~^"; int nextstate, state = 0; int i, j, k, m, ml = 0; unsigned long int csum = 0, len = 0; FILE *infile, *outfile;

infile = fopen (inname, "rb"); : v$ R: G! m! V) Z outfile = fopen (outname, "wb"); / L* c( C5 s3 C: Q; a& [" h if (!infile || !outfile) { 9 H( J% Q! M: u% j m printf ("Error opening file!\n"); / Z2 h7 X5 V$ e* q0 A2 Q4 } return 10; } % J$ ^6 V! M- O0 y' A maketrans(); . m0 ^* J0 I4 O; N% E) T makedigits(); ( \% j- Z* S" g5 \ memset (inbuf, 0, sizeof (inbuf)); memset (outbuf, 0, sizeof (outbuf)); memset (lenbuf, 0, sizeof (lenbuf)); " j1 h ]# n* g% H state = STATE_INIT_COPY; 9 Q; P6 k3 }+ @7 h' C2 c i = 0; j = 0;

while (state) 1 a: a; `6 L0 W, P { if (inbuf == 0) 8 S& F4 a" X) H( d- f8 q1 w { if (feof (infile)) break;

memset (inbuf, 0, sizeof (inbuf)); ( y3 e" c, Y; W" w2 W fgets (inbuf, LEN_INBUF, infile); i = 0; continue; ; l! w( A" d/ N$ r+ R6 u% b1 t% T }

if (j == LEN_OUTBUF) { ( P3 y( K/ y$ P5 V* o( Y% C fwrite (outbuf, sizeof(char), j, outfile); 1 z, Y* v8 I! I$ v0 H0 ^ j = 0; & @# M2 C3 }. Q& X: A# [- X/ q }

switch (state) { case STATE_INIT_COPY: ml = strlen (marker); m = 0; 4 c8 n. u2 ^5 ` state = STATE_COPY_INPUT; break;

韩冰

case STATE_COPY_INPUT: if (inbuf == marker[m]) ; |. |% g% i" e! E: N { i++; m++; ; e: E. ]1 Q# G4 P3 }; ^ } , F" w+ z2 e9 n6 O' A5 c: l5 N else { if (m) { k = 0; ' t: l |2 M/ j( W1 k/ r5 R, Y; E state = STATE_FLUSHING; } $ J# K5 [1 X9 ^( w else outbuf[j++] = inbuf[i++];

} if (m == ml) state = STATE_INIT_READLEN; 5 U5 g3 E7 Y3 ?( c" D1 [) W5 D' C break;

case STATE_FLUSHING: outbuf[j++] = marker[k++]; m--; if (m==0) 2 m9 V) T) b, s( b! [ state = STATE_COPY_INPUT; break; $ j; z8 X% O0 o: K P: m$ R case STATE_SKIP_ML: 0 a( i" ^( g9 B q4 w6 ^" y5 G i++; 5 l- i$ Q! T- l7 N% @ if (!(--ml)) & @5 t5 a$ U$ X1 V% P state = nextstate; + H0 |( H8 V1 ^7 } break;

case STATE_INIT_READLEN: 5 N0 v2 o( d$ I2 N) D ml = 6; state = STATE_READLEN; 3 a# b5 }/ U+ w7 Z5 m& o0 S7 z break;

case STATE_READLEN: * l% n* i3 H$ R lenbuf[6-ml] = inbuf[i++]; + K, H" E$ {5 x& V6 l" }+ g( B if (!(--ml)) { ! G5 k: }6 |5 Z1 s len = decodeBase64 (lenbuf); & u6 r3 S6 Q* @' _" a9 {" n m = 0; ml = 2; 3 V" j- f- N% H3 b state = STATE_SKIP_ML; 3 K- W1 j: B, ?$ t8 s! M nextstate = STATE_DECODE; ! ~* w1 o* m7 T% {% z& o, G/ v: h } 0 t# `2 h3 I5 Z/ s' |5 k: Q break;

case STATE_DECODE: W9 |( |+ P% g# ~% A6 C if (!len) ' d2 r5 p6 |. b h# T0 n { ml = 6; state = STATE_CHECKSUM; & s& g9 d" q$ t5 B5 v/ w5 U- l- B break; 8 J5 R! Q# w9 C0 W- M7 \ } if (inbuf == _blank>'@') , T$ E* t- H3 f state = STATE_UNESCAPE; else { ; j: k$ @) `; X) p. r) C: a if (inbuf < 0x80) { outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; & C) h) G9 T' j$ f/ Q" U csum += c; " n: ^ F5 q' O* Q m++; ; c" ~" C) L( T3 i/ ], H } else { outbuf[j++] = inbuf; 5 K' @% o3 H4 C3 A& B$ ^ if ((cp) && (isLeadByte (cp,inbuf))) 7 P' K1 [( J3 {% |* T state = STATE_DBCS; ) p1 W! q5 J2 ?! n [ }

} 8 o$ G/ E- n, t0 a i++; 5 K, M; B0 ~1 _, q3 ^8 v# Q3 z len--; $ h" x6 D2 F' |; G( ~$ z break;

case STATE_DBCS: outbuf[j++] = inbuf[i++]; : j/ o+ A ^- Z) l state = STATE_DECODE; break; case STATE_UNESCAPE: outbuf[j++] = c = unescape (inbuf[i++]); csum += c; # h! I8 Y4 [% a% V1 o% u$ _ len--; . V: q4 a1 j8 G8 s/ w# Q m++; 9 c* f/ U* e+ B8 B, _* x state = STATE_DECODE; 4 u9 c4 K: f {9 w9 r; k# K; W2 o break;

case STATE_CHECKSUM: , ^, l# k2 S; r csbuf[6-ml] = inbuf[i++]; 7 G. n2 C7 k H& h if (!(--ml)) { csum -= decodeBase64 (csbuf); ' U- ~8 |8 i! g3 T; G9 l$ h if (csum) { //printf ("Error - Incorrect checksum! (%lu)\n", csum); ) E3 x( V; {; I( `: ^% w4 J% r9 s //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] } m = 0; $ N! T# f' O% D; ^ ml = 6; ' ~7 G( g4 M) r state = STATE_SKIP_ML; * |, A5 [4 G% ^. o, d nextstate = STATE_INIT_COPY; - E5 m* I& O5 G) ], _- n2 f$ E } break;

default: ; v9 \, z( h+ J! t5 f) }/ j) e printf ("Invalid state: %d\n", state); break; } } 1 p# P" N$ b* q4 s: c3 q0 O9 v& q; @ fwrite (outbuf, sizeof (char), j, outfile); fclose (infile); fclose (outfile); * T# g' v. ]; E! X$ [ return 0; , `3 h5 c9 L4 p6 d7 f}

/ c! C9 L5 Y" e" I. L2 W; Kint main (int argc, char **argv) - z3 j9 N9 @1 h3 M{ 3 D) F- w9 d2 d. r" |, b' T int cp = 0;

if (argc < 3) : b9 M% E8 U' ?: |. u+ W" m { - K0 Q; v3 n+ c' q* A% p! y printf ("Decoder for Microsoft Script Encoder v1.3\n" "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" 2 v( p. h4 ^0 L2 C) E "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" "Usage: scrdec13 [codepage]\n\n" $ p# H& D% v4 N3 q- E: H "Code pages can be 932 - Japanese\n" " 936 - Chinese (Simplified)\n" " 950 - Chinese (Traditional)\n" - G' r) |6 |# u% [ " 949 - Korean (Wansung)\n" ! W5 v. y% x1 Y " 1361 - Korean (Johab)\n" 0 n2 H* A% Q( P2 @8 K) \' E "Any other code pages don't need to be specified.\n"); 2 d/ Y2 C% v: r+ Q& U* S' O return 10; }

if (argc > 3) cp = atoi (argv[3]); return ScriptDecoder (argv[1], argv[2], cp); }