网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

! a' `% |! c1 |5 U3 M: Q3 d4 B

附scrdec1.3源代码[c代码]：

/**********************************************************************/ /* scrdec.c - Decoder for Microsoft Script Encoder */ /* Version 1.3 */ /* */ ; T8 j* n& d3 | M/* COPYRIGHT: */ 4 O; n" \6 W. z/* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ /* Some changes by Joe Steele to correct minor stuff */ 8 q# J! V3 \' L3 m8 {/* */ /* DISCLAIMER: */ 2 t3 Z9 v1 i* N' G# L/* This program is for demonstrative and educational purposes only. */ " I# L! `. Z/ g) k, P" o/* Use of this program is at your own risk. The author cannot be held */ /* responsible if any laws are broken by use of this program. */ / f6 F; ]& B3 |0 |. ?6 _/* */ /* If you use or distribute this code, this message should be held */ /* intact. Also, any program based upon this code should display the */ /* copyright message and the disclaimer. */ /**********************************************************************/

+ u; E; v; u" S6 Q3 T

#include 6 L O; i# G% K#include & |# v9 Y; c5 ~( ]& N9 v+ D#include

#define LEN_OUTBUF 64 , x( `. g) i5 M# i) O4 r# k# u#define LEN_INBUF 1024

#define STATE_INIT_COPY 100 ! h4 Y/ ?! W' ? D5 `4 ^/ F7 ~1 a6 A% g#define STATE_COPY_INPUT 101 #define STATE_SKIP_ML 102 #define STATE_CHECKSUM 103 #define STATE_READLEN 104 #define STATE_DECODE 105 #define STATE_UNESCAPE 106 #define STATE_FLUSHING 107 & l& Q) W; t N: i! W0 v3 _#define STATE_DBCS 108 . N/ i* r. {( _4 t1 d#define STATE_INIT_READLEN 109

unsigned char rawData[292] = { 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, # V! I* t1 Y8 V7 o4 \" {6 Z 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, ' \( ?! f0 ~' p, z( _+ x 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 4 A/ T' e5 Q) m% ]7 V7 L 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, + d, B' {. m3 `. l/ W2 k 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, 8 U; x% z- S, H# ? r% d2 [+ i 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, ; G, U, F) c" ~( F. v! |: x6 C 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, 0x51,0x67,0x2f 3 C1 `3 w/ y/ d- q} ;

const unsigned char pick_encoding[64] = { X" \5 R4 o" n6 j1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 9 r6 h7 a2 a( D: {" d2 I1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, $ d1 [! Q5 ~' l2 p1 I" Q( Q! ?1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 % X9 }2 ~0 E# U0 b3 N0 ~+ p};

unsigned char transformed[3][128]; int digits[0x7b];

* P: H( y5 j' p0 I) {

unsigned char unescape (unsigned char c) 3 G& X$ B' _* y9 T) {5 @" A1 b6 p{ 9 X5 @8 `2 z' t }) \7 ~$ H static unsigned char escapes[] = "#&!*$"; static unsigned char escaped[] = "\r\n<>@"; $ V Y( o; E2 _+ V: \( o int i=0;

' y# f8 E4 n+ B. E; V; _) f

if (c > 127) return c; 0 q2 h- J( q) }. K3 r1 m2 Z2 J while (escapes) { if (escapes == c) return escaped; i++; / Q7 z3 |9 U: O* N) k( k } 1 H0 N# F3 H* D9 Z% ] return '?'; 6 T- g/ c. Z N5 x$ J3 ?}

void maketrans (void) { int i, j;

for (i=31; i<=127; i++) for (j=0; j<3; j++) 5 o' O' J: t: V- R7 X: Z" V transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; }

韩冰

void makedigits (void) { 6 | a8 W( e+ L int i;

for (i=0; i<26; i++) , o+ t! e: G7 }6 ^ ` { + N4 v$ p8 |' A. g1 b9 f Y; }# s& i digits['A'+i] = i; digits['a'+i] = i+26; " v1 A) E! I, \ } ; P4 @# a# U, |! X' _ for (i=0; i<10; i++) 9 j a$ m" Q( I! }; { digits['0'+i] = i+52; . \. |2 o$ _7 f digits[0x2b] = 62; % M6 W2 e+ \. l4 A! I$ j4 @ { b! w digits[0x2f] = 63; }

unsigned long int decodeBase64 (unsigned char *p) { unsigned long int val = 0;

val += (digits[p[0]] << 2); * z0 W! G& r" {$ f9 g! b9 I val += (digits[p[1]] >> 4); ) d4 m. y E. Q4 ?7 i. ` val += (digits[p[1]] & 0xf) << 12; $ _' K [5 C, F z& C1 I' P6 { val += ((digits[p[2]] >> 2) << 8); val += ((digits[p[2]] & 0x3) << 22); 2 K2 p- M3 ^* T% F val += (digits[p[3]] << 16); ; g( t2 A/ h c9 M% ?' t8 l6 P val += ((digits[p[4]] << 2) << 24); val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 7 ^- Q; u! d# W. j 10 0 V& T0 D. ?7 U! u( b6 N# \ ba98 fedc 8 B5 U( O; M& R" l6 } 76 8 S1 _% F. S9 T 543210 : x% u. f8 J1 l" a fedcba 98---- ! e0 B! {7 F4 j+ i) c; y( U |- LSB -||- -||- -| |- MSB -| ' J9 z$ j# n3 V; ~; y */ return val; }

int isLeadByte (unsigned int cp, unsigned char ucByte) 7 b4 g8 W9 z# p, q- i{ 1 U) G# X- ]$ N# c, n3 u: \. T /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f 3 ~. L; d# L( l9 y& R 0xe0-0xfc 936 - Simplified Chinese GBK - 0xa1-0xfe 5 W; P. G/ _" q4 N9 ] 949 - Korean Wansung - 0x81-0xfe # e W( j* w. @& |7 p O5 J* d. Y 950 - Traditional Chinese Big5 - 0x81-0xfe 1361 - Korean Johab - 0x84-0xd3 0xd9-0xde 8 [; A5 T/ r1 q- n" s/ f9 K 0xe0-0xf9 */ 3 R' r& A. m9 g/ [1 U8 U& r switch (cp) { / ]2 k7 a6 A) U3 R2 f case 932: if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; ( f2 ^8 u: a" ~) ` if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; else return 0; 3 P: F4 y: h/ L! |# {* x5 N, ~$ U case 936: if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; 8 i9 F' U7 E4 n, r4 E/ ~! J else return 0; case 949: % I! z, b; r/ [$ i, G% A; M3 N9 Q case 950: if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; 8 N1 S- f# z5 _# y; a' F |6 @ case 1361: if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; / V# c3 `+ l% \7 ]: }; b: D else return 0; ! z. L- O) k k default: return 0; ( \$ b9 [6 b2 B1 R }

}

3 E" f+ P2 m& F5 Wint ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) ( o* t' `" H8 l2 T$ C' s{ , Y( Y8 I9 r! j7 l0 e* p R4 _) n unsigned char inbuf[LEN_INBUF+1]; unsigned char outbuf[LEN_OUTBUF+1]; unsigned char c, lenbuf[7], csbuf[7]; unsigned char marker[] = "#@~^"; int nextstate, state = 0; 4 q8 W& ^9 z3 K+ h' y- { int i, j, k, m, ml = 0; / G- |# o& d k' q& ?; l unsigned long int csum = 0, len = 0; FILE *infile, *outfile;

infile = fopen (inname, "rb"); outfile = fopen (outname, "wb"); if (!infile || !outfile) { $ i( T, @' l1 ^8 v% C printf ("Error opening file!\n"); % R3 f1 H! L& `2 t& B return 10; + E$ q6 W7 o/ s5 m' C& v) E } 2 {; h- X; e1 k+ A/ Y maketrans(); ( \" D6 i8 y3 |: m1 m makedigits(); memset (inbuf, 0, sizeof (inbuf)); memset (outbuf, 0, sizeof (outbuf)); ; [7 G+ X, x4 }, ]! e memset (lenbuf, 0, sizeof (lenbuf)); . z- ~8 H0 ]/ c8 Q( B state = STATE_INIT_COPY; i = 0; - n5 Q, y8 P# h2 o+ ]1 i j = 0;

while (state) % z6 u. D: O- L" `: ]$ a& \ { if (inbuf == 0) * i9 {+ h$ m7 Q. g' y0 h9 u, K { ' u% k7 S" n. i0 F; }" w; D; M if (feof (infile)) 1 ~" [2 x4 w! V7 `8 _! z* }* y break;

memset (inbuf, 0, sizeof (inbuf)); - v/ p' C; Y. j7 A& O- j: j8 M) M fgets (inbuf, LEN_INBUF, infile); i = 0; continue; + B6 I3 r% U6 W7 L/ }- O( u }

if (j == LEN_OUTBUF) { + P) m n/ A" o# A* [' C fwrite (outbuf, sizeof(char), j, outfile); j = 0; }

switch (state) { case STATE_INIT_COPY: ml = strlen (marker); 8 e/ B& W" X! f8 g& @* a m = 0; state = STATE_COPY_INPUT; ; H$ _1 Y2 F" `; \ break;

韩冰

case STATE_COPY_INPUT: # X, S6 h1 O/ r a if (inbuf == marker[m]) { ; i; N2 N5 ]3 d1 k. V& z# f! L i++; m++; } ) C! V. A7 A% N1 D$ W6 _5 P else / P% \+ f8 ?2 o { if (m) - i6 s4 Q+ A$ C: {" ]: U! ^ { k = 0; state = STATE_FLUSHING; } else % v w4 B, A! Y" V. N" F+ J' \0 i outbuf[j++] = inbuf[i++];

} if (m == ml) state = STATE_INIT_READLEN; break;

case STATE_FLUSHING: . l5 x3 Y1 N$ g outbuf[j++] = marker[k++]; m--; if (m==0) state = STATE_COPY_INPUT; ' f6 i5 m% b6 R& u break; case STATE_SKIP_ML: i++; if (!(--ml)) * F1 G$ Q9 j5 k- _$ s! U state = nextstate; " J4 n. f2 U: S' \9 ] break;

- u0 W: k2 j8 p! h% M case STATE_INIT_READLEN: ml = 6; $ U# A, _( J# ^5 \0 d( s6 H$ R9 u state = STATE_READLEN; 7 m* a" s: t/ {* p5 \* H9 w break;

case STATE_READLEN: lenbuf[6-ml] = inbuf[i++]; if (!(--ml)) { 9 X! W: `) p4 e len = decodeBase64 (lenbuf); m = 0; " v2 C/ H/ G0 m8 y ml = 2; & X8 L- I& d. y state = STATE_SKIP_ML; nextstate = STATE_DECODE; } : x; n+ ~7 }' V! X. o1 x: ^ break;

case STATE_DECODE: if (!len) 1 ?1 o. o7 s6 J; {% Y q6 d { / Q: N1 v3 Q' s ml = 6; state = STATE_CHECKSUM; 3 B2 z: o6 j5 x6 q4 @ break; 8 E1 r9 }$ p8 A6 j" Y } if (inbuf == _blank>'@') 5 J/ t& H$ S+ \* a4 {1 x' a8 _ W state = STATE_UNESCAPE; else % A1 ^3 }) D z" j; R7 J { if (inbuf < 0x80) { 8 m: I0 r3 S( r: q5 E7 h3 L' @ outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; % f% V1 R5 \1 D3 ~3 \9 m csum += c; , K+ P, x9 Z: ]% y m++; " w" V- D1 _- I9 K s/ d! w3 y0 H } else 0 H8 B4 y4 K8 ~' U { outbuf[j++] = inbuf; o4 H: J1 z6 U9 A if ((cp) && (isLeadByte (cp,inbuf))) state = STATE_DBCS; }

} 7 W# y" L4 x+ m6 h, c i++; / U4 }: H7 F# V" y len--; break;

case STATE_DBCS: ' y$ p" `; O; b% G1 h0 d6 u outbuf[j++] = inbuf[i++]; state = STATE_DECODE; ' y5 ]. \% {( i* X' O7 v! n3 p3 d break; , E, D+ ^- H4 c/ m: \* L) ^ case STATE_UNESCAPE: outbuf[j++] = c = unescape (inbuf[i++]); ! \# l+ L+ r( x csum += c; len--; * }7 A* c4 `5 H/ e/ s m++; state = STATE_DECODE; break;

case STATE_CHECKSUM: 4 \0 ^" I" T: ~* z b1 _ csbuf[6-ml] = inbuf[i++]; 4 F3 Y1 |( @: R' M& C+ |1 q( Y! ~0 o% ? if (!(--ml)) + A$ y" b2 T2 b( I' m( x { csum -= decodeBase64 (csbuf); if (csum) { //printf ("Error - Incorrect checksum! (%lu)\n", csum); //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] } m = 0; ml = 6; state = STATE_SKIP_ML; nextstate = STATE_INIT_COPY; 3 _, o k3 }3 u4 O' v } % u! f3 g4 Q- e' U; x( Z break;

default: printf ("Invalid state: %d\n", state); break; + }# D! v" O/ F8 d j9 P$ u } . \- W: K+ i1 S6 M } ! |0 o8 b7 H( n* m, R4 G fwrite (outbuf, sizeof (char), j, outfile); : A' K" W5 o( O# r! }8 h fclose (infile); . a3 p6 k ?, | L fclose (outfile); 9 Q' K: z' K8 W) t: x: t# a return 0; , r" j5 Z m* C" b7 B7 \ D$ o* \}

0 K v+ V, O8 g- J/ |" s6 I' Pint main (int argc, char **argv) { int cp = 0;

if (argc < 3) $ W& I# e+ B) _7 c( \3 ] { printf ("Decoder for Microsoft Script Encoder v1.3\n" 4 T5 _# \, ?. T "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" ! q( A! I, F: h "Usage: scrdec13 [codepage]\n\n" - ~7 k( w& _8 A- j. ^! S0 d6 e "Code pages can be 932 - Japanese\n" " 936 - Chinese (Simplified)\n" " 950 - Chinese (Traditional)\n" 0 P4 z2 J6 I: G " 949 - Korean (Wansung)\n" " 1361 - Korean (Johab)\n" "Any other code pages don't need to be specified.\n"); return 10; ) N- U" L' x, |) J }

if (argc > 3) cp = atoi (argv[3]); return ScriptDecoder (argv[1], argv[2], cp); % `) c# U% I/ Y}