网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

附scrdec1.3源代码[c代码]：

/**********************************************************************/ /* scrdec.c - Decoder for Microsoft Script Encoder */ /* Version 1.3 */ / j$ @3 S$ [% q/* */ ; V$ C, Q+ h( d! X( Y/* COPYRIGHT: */ 2 \6 f" j9 Z$ p/* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ /* Some changes by Joe Steele to correct minor stuff */ + f& o! @3 l" t1 A5 _% @+ o/* */ /* DISCLAIMER: */ /* This program is for demonstrative and educational purposes only. */ : |. r) L1 }% w/* Use of this program is at your own risk. The author cannot be held */ 2 `/ M0 ]# j; r3 Q; X* o% n1 J/* responsible if any laws are broken by use of this program. */ 1 k- B C7 y, b: h7 x w h' ~$ I/* */ /* If you use or distribute this code, this message should be held */ 6 Y1 t/ R1 r2 Y/ [; B+ }/* intact. Also, any program based upon this code should display the */ /* copyright message and the disclaimer. */ , h# l; S) ?' j: {! K# j: X/**********************************************************************/

1 {9 v* r' c- q) d9 d3 o. M2 e/ \

#include #include #include

#define LEN_OUTBUF 64 5 \( V" K. H! D2 {#define LEN_INBUF 1024

#define STATE_INIT_COPY 100 , ^: R. s& U8 o) m#define STATE_COPY_INPUT 101 ; Q1 m3 W8 L' V0 W) Q* E3 v#define STATE_SKIP_ML 102 #define STATE_CHECKSUM 103 #define STATE_READLEN 104 / a; T5 C1 _! {#define STATE_DECODE 105 " X# b; a3 K, M, U v0 [#define STATE_UNESCAPE 106 #define STATE_FLUSHING 107 #define STATE_DBCS 108 5 B6 E& R5 v. |) S6 r) ` k#define STATE_INIT_READLEN 109

7 w* {8 ^, }" B; x' j) E

unsigned char rawData[292] = { % l0 e' D" B' R+ m1 R! P 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, 6 A, r2 C! g$ D9 e: \: [ 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, . T/ t5 X* b+ l3 Z* H0 h 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, 6 E2 L! `% D, A5 [ 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, a L( h7 ~9 r' m* ~ 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 6 Q! s: J7 f% s' E" ]: P0 b 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 3 L4 [( z/ I+ G7 | 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, # R. n c! O% C8 y0 ~1 X. X 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, . d+ ?# B3 f$ a" _2 ^ 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, 1 Q. p W0 P1 n( C- J! I* Y# j7 o/ y 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, $ ~8 s) y# ]/ m5 V( q4 o* K 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 6 h9 u7 U# p" b 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, 0x51,0x67,0x2f : P2 A% E& _; c1 c} ;

const unsigned char pick_encoding[64] = { 1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 ! x& P2 P& B" Z0 @& e4 f% T! A};

unsigned char transformed[3][128]; int digits[0x7b];

unsigned char unescape (unsigned char c) 5 d% L* D! T0 |/ [$ I. i+ O* N/ X/ N{ # ?- z0 B, A! L static unsigned char escapes[] = "#&!*$"; static unsigned char escaped[] = "\r\n<>@"; , t( i2 f4 T5 T; ~! I int i=0;

if (c > 127) return c; while (escapes) + Q7 n5 u0 X. m9 D8 g: O d7 f { . c" ]* k' H) f if (escapes == c) return escaped; 8 n- U6 k( E! @$ [2 s. c i++; } # b8 S: e' k2 x return '?'; }

void maketrans (void) { int i, j;

for (i=31; i<=127; i++) 0 q3 h& X! X( B5 U* M3 y3 `% o for (j=0; j<3; j++) transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; }

韩冰

void makedigits (void) ; R& j# e, h8 G: ~' K& Y/ x{ ! \; c0 C$ e ^: r int i;

for (i=0; i<26; i++) 0 ~5 g: c! V. j3 N { 7 j9 g! p E3 r% T1 O8 w/ E digits['A'+i] = i; ! s3 R. g2 }: w; | digits['a'+i] = i+26; } for (i=0; i<10; i++) digits['0'+i] = i+52; digits[0x2b] = 62; digits[0x2f] = 63; 5 f+ t3 F8 N: m" `}

unsigned long int decodeBase64 (unsigned char *p) { unsigned long int val = 0;

val += (digits[p[0]] << 2); 0 F' S' ]9 a3 t$ u% @" z# Z- @ val += (digits[p[1]] >> 4); . b7 w3 l8 H. w+ b/ [9 S val += (digits[p[1]] & 0xf) << 12; ) J* k8 c4 {* K6 p% \' P, P val += ((digits[p[2]] >> 2) << 8); ( s$ Q2 ^4 b/ A/ L& A1 M5 e; Y val += ((digits[p[2]] & 0x3) << 22); B; }$ u# B6 _" w9 a m y val += (digits[p[3]] << 16); val += ((digits[p[4]] << 2) << 24); val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 0 @' y: Y( ~9 T4 D$ h; h 10 ba98 1 O* j' M, {+ Z; F fedc 0 m b T0 M0 i! M( a" ] 76 543210 ' c" ^% g1 R- ^) l1 R8 V, A fedcba 98---- |- LSB -||- -||- -| |- MSB -| */ ; l$ [: S& i! \" t7 o1 O' {: q return val; - l2 X+ V/ U0 C}

int isLeadByte (unsigned int cp, unsigned char ucByte) . o- ^& z6 H0 k& T! M{ /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f 0xe0-0xfc " n3 d! Q- L4 y1 \8 w0 F 936 - Simplified Chinese GBK - 0xa1-0xfe 949 - Korean Wansung - 0x81-0xfe 950 - Traditional Chinese Big5 - 0x81-0xfe 1361 - Korean Johab - 0x84-0xd3 0xd9-0xde 6 P$ C' g' c& Q% V1 A0 a$ X 0xe0-0xf9 */ 2 @, g1 |/ h% r9 X switch (cp) { $ b& {" O, `2 x( m6 r8 Y$ \ case 932: ) y, ~ j8 X7 I if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; 6 P" y; [0 v* F1 F4 H0 x2 f- t* G if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; else return 0; 0 M# Z* b( k3 w5 ]* F! e. c case 936: 5 N7 f5 r6 x- O. }4 t% d2 `9 u. ? if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; ) `2 d( }( C0 H/ k; R else return 0; 8 j, Q0 @0 y" l v; L7 x case 949: 5 F H3 n: @1 s: ~2 g& A& J case 950: if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; . h- l5 k* _! [9 a T, T case 1361: if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; & h* D" K5 O- T, {8 A if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; 8 z0 ?9 F3 L& [; P/ }4 J if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; else return 0; # W6 ?* |$ \, v default: 4 u& z% D! B* E$ S return 0; }

}

" u+ n0 P4 e7 T$ f$ ~) @int ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) ! ~9 T, p$ }) d{ unsigned char inbuf[LEN_INBUF+1]; unsigned char outbuf[LEN_OUTBUF+1]; unsigned char c, lenbuf[7], csbuf[7]; unsigned char marker[] = "#@~^"; int nextstate, state = 0; int i, j, k, m, ml = 0; & B0 l$ [7 M- }# q unsigned long int csum = 0, len = 0; FILE *infile, *outfile;

infile = fopen (inname, "rb"); outfile = fopen (outname, "wb"); if (!infile || !outfile) { . Q' e) q5 ? r4 S- ?7 v: t printf ("Error opening file!\n"); ; l, b6 i2 c- _% Y9 j return 10; ' o2 L, L9 b- Y# a } t9 y R4 d# m! O" k9 T3 s maketrans(); makedigits(); memset (inbuf, 0, sizeof (inbuf)); memset (outbuf, 0, sizeof (outbuf)); 6 x' f1 [$ v7 ]$ v memset (lenbuf, 0, sizeof (lenbuf)); state = STATE_INIT_COPY; i = 0; j = 0;

while (state) B$ R3 d3 v$ O; x# d8 j { & U( E8 u0 p7 t6 F, _0 Y$ \ if (inbuf == 0) { & w" f O0 T9 c ?9 d if (feof (infile)) 4 f! V+ q4 U$ S+ v7 x: \0 M ] break;

memset (inbuf, 0, sizeof (inbuf)); . i9 i) e( m: L fgets (inbuf, LEN_INBUF, infile); i = 0; continue; }

if (j == LEN_OUTBUF) ( q, u0 Q9 }, d& H2 }: Q { - | O' l6 _6 y- H# ^ fwrite (outbuf, sizeof(char), j, outfile); j = 0; }

switch (state) { ' T5 d+ B; f3 M, [9 ~2 X case STATE_INIT_COPY: ml = strlen (marker); ) T' ?$ y- C4 c, l Y+ p9 x m = 0; + y1 B7 W; q$ y* p3 d3 ?. X state = STATE_COPY_INPUT; + N7 J' d0 C9 J# E- g7 { break;

韩冰

case STATE_COPY_INPUT: if (inbuf == marker[m]) { ) s* A# Y3 `2 n7 E4 h i++; m++; } 6 n6 v- a6 V# g) V4 w* G( O, z: `* c else 3 Y5 [4 v3 \6 N4 B+ C1 x1 S { ; v% I4 f) W! o3 K if (m) { k = 0; - e# V, g1 _* P; Q& {- b1 R# |9 U5 e state = STATE_FLUSHING; 6 Z0 J. c# o! l } else ) Z: N5 z/ R s8 W; T outbuf[j++] = inbuf[i++];

} if (m == ml) : R; |% d' ^* c, O state = STATE_INIT_READLEN; ) Q% i" O: o! y break;

case STATE_FLUSHING: outbuf[j++] = marker[k++]; 2 }* \( h: Y# S$ V$ j) ^6 E" I m--; 4 W$ t- Z4 n4 z! _1 a. h: o if (m==0) state = STATE_COPY_INPUT; break; ; n+ [; ?% ^. h7 P7 C5 T% z3 c ( I+ x: o$ `6 r& V! `3 e case STATE_SKIP_ML: 6 @7 S. r0 H( t' w i++; / s; `& L4 o" ~$ N; i2 [ if (!(--ml)) , U4 f4 e( L& b, E state = nextstate; break;

case STATE_INIT_READLEN: ml = 6; # }8 x3 h3 ?4 }& N# p# d state = STATE_READLEN; break;

case STATE_READLEN: lenbuf[6-ml] = inbuf[i++]; if (!(--ml)) 6 P& A. K: e$ s, q { len = decodeBase64 (lenbuf); m = 0; ml = 2; state = STATE_SKIP_ML; * m6 n( f8 @3 m3 ]( @' r- M nextstate = STATE_DECODE; } ) |* {) \- I% A9 \# O break;

case STATE_DECODE: if (!len) { ml = 6; state = STATE_CHECKSUM; , g; `! k! P6 F: j' U. g, b2 V break; # r) ]; ]2 \) f$ U } * j3 M b' o( {1 } if (inbuf == _blank>'@') state = STATE_UNESCAPE; else { : d' t8 `, `; M f4 a. F& Q if (inbuf < 0x80) , a* f `. a% R0 b { : x; m' S: u1 i/ u2 J/ T outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; & }( G1 B! A# w+ G; J csum += c; 8 {. u! }6 n6 y; B' n w4 o m++; # {* C) f e" M) Q5 x& W } ) T. G% _, F0 ^9 \9 D- ` else $ h6 J; `2 M* p* Y& b6 ~5 r { ' }/ m6 D3 Z% w J* n+ A outbuf[j++] = inbuf; if ((cp) && (isLeadByte (cp,inbuf))) 3 e4 g+ |! ^/ Q x, y! p: j state = STATE_DBCS; + Y% J9 V$ c0 Z5 w/ U- i6 V2 } }

} ! y y* O6 J1 i i++; $ ?% s4 ^6 y- H: |7 \; Z" T$ h6 U len--; break;

case STATE_DBCS: 1 ^3 n1 y, x) T9 B3 q9 b# ]+ y3 T outbuf[j++] = inbuf[i++]; state = STATE_DECODE; break; 4 O1 j9 v) S6 D/ N) L# `) z6 c% m case STATE_UNESCAPE: outbuf[j++] = c = unescape (inbuf[i++]); : K* k7 x7 `1 Y0 y) j) y" p csum += c; len--; m++; " t$ C( F. h# z/ _7 m0 d3 n4 [+ m state = STATE_DECODE; break;

case STATE_CHECKSUM: ) A! d) ]& L$ z9 y, A csbuf[6-ml] = inbuf[i++]; if (!(--ml)) 6 @0 r5 O$ b7 @5 w; j6 J- \+ i { csum -= decodeBase64 (csbuf); 1 q- p) G k* ~ if (csum) { //printf ("Error - Incorrect checksum! (%lu)\n", csum); //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] } / e/ ?( W, {1 V, B3 X/ n3 v m = 0; . p, F' @! P4 |( v H+ ^; C7 l ml = 6; 9 x+ R' \6 }" e4 g state = STATE_SKIP_ML; 7 a/ b9 s N2 h% `2 F3 K nextstate = STATE_INIT_COPY; ! f" ^* |# z+ C8 t: P } & b9 ^/ `: Q" |# { break;

default: printf ("Invalid state: %d\n", state); * ]/ I& q& H# Z/ X5 s: y break; } } % A+ O8 y r! o, ]4 r fwrite (outbuf, sizeof (char), j, outfile); fclose (infile); 8 x3 {& ]+ g. B% b6 I fclose (outfile); return 0; }

9 E; ^# K; }% a7 c4 [2 rint main (int argc, char **argv) { % m" Y0 O6 I( [# Y int cp = 0;

if (argc < 3) # x( ~, Q- `6 Y; J4 d9 \ { printf ("Decoder for Microsoft Script Encoder v1.3\n" ! h4 v) ]* H4 T. I "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" ' l* }3 k: b( T, M5 ~5 f. b1 e! }* B "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" "Usage: scrdec13 [codepage]\n\n" ; h, ], m0 B9 T "Code pages can be 932 - Japanese\n" ( G" H: [$ X# ^$ F% _: |6 f" X$ J " 936 - Chinese (Simplified)\n" " 950 - Chinese (Traditional)\n" 7 I1 u1 _% M4 ]9 s6 z " 949 - Korean (Wansung)\n" 8 `* q E/ L9 r% x1 c5 ?" y6 t " 1361 - Korean (Johab)\n" 0 B2 s% B: H4 g) H* t9 \ "Any other code pages don't need to be specified.\n"); return 10; 9 y) f1 ]3 e7 J+ K0 v7 @( P }

if (argc > 3) cp = atoi (argv[3]); return ScriptDecoder (argv[1], argv[2], cp); }