网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

4 q9 E0 |+ P, ?. N0 [: W( M7 f% ]

附scrdec1.3源代码[c代码]：

/**********************************************************************/ /* scrdec.c - Decoder for Microsoft Script Encoder */ 7 ~$ p$ X( v" G& y- _) F/* Version 1.3 */ : ~) h, a5 O( Z/* */ /* COPYRIGHT: */ $ H+ C) e* C! s9 v/ h6 G/* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ /* Some changes by Joe Steele to correct minor stuff */ /* */ 3 l4 s5 d9 r/ {9 l) U( P" ]' s" M; {/* DISCLAIMER: */ # g8 | G7 v F0 f4 {( ?# v% m. r2 f/* This program is for demonstrative and educational purposes only. */ 1 J7 ~9 H7 J3 `! J, g% t0 v/* Use of this program is at your own risk. The author cannot be held */ 0 U0 M* }( e- M( F! q2 O/* responsible if any laws are broken by use of this program. */ 0 L0 l* \$ Z" @* }* H$ o) x$ v/* */ /* If you use or distribute this code, this message should be held */ % K, o3 w* z, M n9 f, ~7 V/* intact. Also, any program based upon this code should display the */ 5 g% |& k8 h, o. ~6 m& I& d, e# F/* copyright message and the disclaimer. */ # c* w1 I* U5 R* Q3 M% ^/**********************************************************************/

#include ( v8 Q+ m* \% W#include #include

- A* a ]5 d* O& r w2 _

#define LEN_OUTBUF 64 #define LEN_INBUF 1024

5 J* k% ~8 s/ R I7 N; U

#define STATE_INIT_COPY 100 7 Y7 }$ E7 S% X2 R1 ]! g' l#define STATE_COPY_INPUT 101 #define STATE_SKIP_ML 102 : s) W2 w- W& x5 E7 K, O. f \& k( h#define STATE_CHECKSUM 103 #define STATE_READLEN 104 #define STATE_DECODE 105 #define STATE_UNESCAPE 106 #define STATE_FLUSHING 107 #define STATE_DBCS 108 #define STATE_INIT_READLEN 109

6 R [1 t; ?# |7 D( U

unsigned char rawData[292] = { 4 a" `6 a7 O$ Y5 R) p% z 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, # `% D; F. i9 I# D 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, $ C6 H# a9 o9 X: N- G2 P' Q 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, , Y! T' t% |, v7 {( n 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, & z5 S2 \) ]( p: V, Q& ]( Z 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, : E: I, o& b- r( i 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, 1 R/ }& I: V/ [ 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, 3 T/ w$ n+ n- \, a% I 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, 8 a, }2 }8 O) D) | 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, ) {- [# [% V4 j 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, $ L$ l7 l3 r) o4 W& y7 A2 b 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, ; b5 N2 p% K6 `# ~# ^ 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, + H( Z2 F& `; R6 w 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, . b% g* l z# p' J 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, 0x51,0x67,0x2f } ;

const unsigned char pick_encoding[64] = { 0 O+ E) S, v. ?; j5 ~ Q1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, ! l& s# G; q$ W- ]8 y1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 9 ]* h$ U( O8 \( _! I1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 0 E2 N: T0 o+ n! v- ~};

unsigned char transformed[3][128]; - S }; |3 p2 cint digits[0x7b];

unsigned char unescape (unsigned char c) & [6 D5 N" Y( R" D! l) H% V{ static unsigned char escapes[] = "#&!*$"; static unsigned char escaped[] = "\r\n<>@"; int i=0;

0 `$ B- j' e$ J0 P1 L w3 ^

if (c > 127) ; o) O6 b5 j1 W5 }2 _! M return c; while (escapes) / U6 e0 k5 q' }3 }* z. z7 L$ ?$ e { 1 |6 ?' ^) a2 T8 d4 V, {: m if (escapes == c) return escaped; & S* ?7 E+ a" y( D) V9 b) n6 J1 Q i++; # W* U! m- |8 O$ G' P } . Z( p2 p' v& R, M return '?'; }

1 B% W2 e) n" V+ K, g

void maketrans (void) 1 Q$ G2 H% I* z- Z1 o- d7 m( ]/ [( w{ N) e* }: q! R8 L8 d$ ]3 g( A* j int i, j;

9 u( y5 k, C& ?7 Y. k8 g$ [+ W( V

for (i=31; i<=127; i++) for (j=0; j<3; j++) * s2 z- U" d! Z. L transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; 0 N& G. P5 C0 f. b}

韩冰

void makedigits (void) 3 ^. p; ` B! u{ + P" x: P5 Z$ r0 | int i;

for (i=0; i<26; i++) 9 @9 U* D3 T) y* } { digits['A'+i] = i; digits['a'+i] = i+26; # F f/ K4 g+ r! N } 3 {5 O/ M# ^9 y3 _7 } for (i=0; i<10; i++) digits['0'+i] = i+52; ; H4 ^3 M; s+ j2 Z6 C$ a digits[0x2b] = 62; 1 S. }, S, Q4 Q' n! { digits[0x2f] = 63; . r" u. d; e4 H! l}

unsigned long int decodeBase64 (unsigned char *p) - M8 U& k5 j# x2 ^; L1 c3 i{ unsigned long int val = 0;

val += (digits[p[0]] << 2); val += (digits[p[1]] >> 4); 6 ]" G! s/ f$ _. z9 O- y: L val += (digits[p[1]] & 0xf) << 12; val += ((digits[p[2]] >> 2) << 8); 6 ^& x2 N7 j5 L* M! E val += ((digits[p[2]] & 0x3) << 22); " K* _' K4 f$ N2 z/ B9 S$ z val += (digits[p[3]] << 16); ( R7 y8 J- d8 B val += ((digits[p[4]] << 2) << 24); $ |: j) ~4 M" \% ] ^ val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 10 ! v2 Q' m- v$ W. l5 I ba98 fedc 76 4 s, z6 J/ G# a0 g8 q! v* L 543210 fedcba 98---- % z' c+ {" w& p* T z% u |- LSB -||- -||- -| |- MSB -| */ : e2 T5 _9 U2 M; [4 a: |. \ return val; }

int isLeadByte (unsigned int cp, unsigned char ucByte) " T# Z$ B7 \ k, t f+ B{ $ U! w$ X# S5 i: Z /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f 2 n8 ~& ?" V) X- [; U 0xe0-0xfc 6 Y: p; a: D: E5 T0 Y6 q' G& o' O 936 - Simplified Chinese GBK - 0xa1-0xfe 1 c9 H# `" N* }: m+ O5 {2 Y 949 - Korean Wansung - 0x81-0xfe 950 - Traditional Chinese Big5 - 0x81-0xfe 1361 - Korean Johab - 0x84-0xd3 * m7 B5 q0 f) i! X 0xd9-0xde 0xe0-0xf9 */ g* _4 v+ p: @8 \) s0 e switch (cp) + y5 O O" q6 q6 n { case 932: if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; else return 0; case 936: if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; else return 0; 0 z* f* \1 _6 |+ ~% m case 949: case 950: if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; 7 w: T6 k0 ?7 F# L else return 0; case 1361: if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; ( h2 J7 `* U: X4 @9 [ if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; + v: E& z8 b r9 x& u( f$ l0 ]" H1 Q) Y if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; 1 l" c4 a! w5 O) ~0 ~/ Y# a6 b3 n else return 0; @$ d- A% Z+ W }5 Q$ t* M default: 7 `2 K6 X' A9 Y) k4 K( ?* r return 0; }

}

5 u; L) Y% I1 ]( E$ C7 Yint ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) 4 z- h K' ~0 o. K{ unsigned char inbuf[LEN_INBUF+1]; unsigned char outbuf[LEN_OUTBUF+1]; 3 G d; w2 o4 v8 N' c) Y, f unsigned char c, lenbuf[7], csbuf[7]; unsigned char marker[] = "#@~^"; int nextstate, state = 0; int i, j, k, m, ml = 0; 9 V3 r* d8 Y0 r) \+ t$ M unsigned long int csum = 0, len = 0; 2 r% s) N: J( q8 t8 l3 {1 u FILE *infile, *outfile;

infile = fopen (inname, "rb"); , q! ^: G9 E: T# \% c3 h outfile = fopen (outname, "wb"); if (!infile || !outfile) & O; \7 n5 v* j }/ I7 J { printf ("Error opening file!\n"); return 10; 3 H+ P' ?* o8 p% g) ? v } / t% V$ ^* o1 l4 F- C' B $ `, k$ u$ W# H. v maketrans(); makedigits(); memset (inbuf, 0, sizeof (inbuf)); memset (outbuf, 0, sizeof (outbuf)); memset (lenbuf, 0, sizeof (lenbuf)); E# `: G, U5 Y5 y % ]0 S7 O$ j- P2 u& @ state = STATE_INIT_COPY; i = 0; 0 D8 Q" l7 Y+ n1 A j = 0;

while (state) { 0 b; L2 e' \2 R) U8 l" V if (inbuf == 0) 5 J6 D0 `' y" u$ c8 A { if (feof (infile)) x; s& G$ R8 o8 U break;

memset (inbuf, 0, sizeof (inbuf)); / [& l% U; S, d2 S8 S# N fgets (inbuf, LEN_INBUF, infile); i = 0; 1 ?: A9 \) o0 o0 b8 m) I continue; }

if (j == LEN_OUTBUF) 4 v3 g0 x4 W) v( }# n" U/ w; t0 A { % u& y T2 D8 s( v% ]3 N. v fwrite (outbuf, sizeof(char), j, outfile); 5 Y; Y; l$ g G5 @ j = 0; 0 u# L5 G$ X( E }

switch (state) 1 _8 d+ z7 u0 ]7 l6 \3 { { 6 Q/ A! n5 f* c3 v! B" l7 E( K case STATE_INIT_COPY: ml = strlen (marker); 5 h* C: s i; E3 z4 z m = 0; state = STATE_COPY_INPUT; break;

韩冰

case STATE_COPY_INPUT: , y% h+ M. J# L# K if (inbuf == marker[m]) { i++; ! ~8 d0 @* `7 d8 a" Z, | m++; 0 k) l. h: A9 u% A* t. t } - H5 V* z1 I; z2 u2 H else { 6 K0 x- [1 q* C' o9 {. A if (m) { k = 0; state = STATE_FLUSHING; } % r. V: _3 V! o9 V& N else " y; } S! c1 j7 W outbuf[j++] = inbuf[i++];

} if (m == ml) V6 @" [7 m9 n- a7 b8 } state = STATE_INIT_READLEN; break;

case STATE_FLUSHING: outbuf[j++] = marker[k++]; m--; 6 j, y+ K" s8 t. O, { if (m==0) ( C9 V: }) _" Q0 w: t2 \ state = STATE_COPY_INPUT; break; case STATE_SKIP_ML: i++; if (!(--ml)) state = nextstate; break;

case STATE_INIT_READLEN: ml = 6; " s5 j, X3 l/ [6 w) i state = STATE_READLEN; break;

case STATE_READLEN: lenbuf[6-ml] = inbuf[i++]; " T- k: Q- X# |6 ~+ j1 j! n+ [ if (!(--ml)) & r+ v J4 o) Z% L { , m* A* Y% h* b. H, M len = decodeBase64 (lenbuf); m = 0; ml = 2; 5 `; K0 h+ g; N i4 v/ A0 z state = STATE_SKIP_ML; + n$ P+ j+ g7 r% G nextstate = STATE_DECODE; } # {* H3 N" e B- S; |; g9 g% p break;

case STATE_DECODE: if (!len) { 7 O, s! L1 v7 ?8 v( @6 d* @+ z ml = 6; state = STATE_CHECKSUM; % @- t! R+ c# N: ` break; 3 S( T3 [% }* Q" b } if (inbuf == _blank>'@') state = STATE_UNESCAPE; 8 _& L \( L( f9 M+ U! r0 P+ V else ! l0 }) g( ?+ C" Z- x2 } { % v- Z# P* F G if (inbuf < 0x80) { 2 _0 B4 G4 Q; a1 i; Z/ z+ | outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; 3 U6 f4 ]5 |/ k2 H/ ] csum += c; m++; 2 N( e# Y0 Z6 E. J! i } else 5 d U& E0 s1 S' f* f* s { outbuf[j++] = inbuf; if ((cp) && (isLeadByte (cp,inbuf))) " N# ^. |" s6 d7 E state = STATE_DBCS; }

} + z- B, F5 r& g/ f6 o0 v i++; len--; 1 Q7 ]5 a9 a' S% j/ r3 S break;

case STATE_DBCS: - v) X* X* S0 S outbuf[j++] = inbuf[i++]; ; t$ F- u* G9 K2 k state = STATE_DECODE; break; case STATE_UNESCAPE: outbuf[j++] = c = unescape (inbuf[i++]); csum += c; . u* R8 A) F. ?" O3 E( J len--; 5 Y+ p1 \) `" K% H m++; state = STATE_DECODE; ) [" ?7 V H. y9 B8 ^6 _ break;

case STATE_CHECKSUM: csbuf[6-ml] = inbuf[i++]; if (!(--ml)) 1 {# s& P; e$ d6 v { csum -= decodeBase64 (csbuf); / u+ L+ ]8 { b2 p7 n0 j if (csum) { //printf ("Error - Incorrect checksum! (%lu)\n", csum); 1 g, W0 s. x3 Q3 \1 ]% ] //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] + p+ R' c: x! Z, T } m = 0; ml = 6; 0 e- i; b% P5 o; L3 S7 _% z state = STATE_SKIP_ML; nextstate = STATE_INIT_COPY; } break;

default: ; b# k% w1 }( { printf ("Invalid state: %d\n", state); break; } * O& ^- W0 F( D% `1 U3 m } 8 f6 K4 e) _7 |: `1 }; I; _! ?% T+ j fwrite (outbuf, sizeof (char), j, outfile); fclose (infile); fclose (outfile); return 0; }

) y7 X; E0 ?5 f3 S; M" x% M( z# Oint main (int argc, char **argv) { int cp = 0;

if (argc < 3) { printf ("Decoder for Microsoft Script Encoder v1.3\n" % A0 T) m) S( U2 F6 T* u _( R "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" ) R: l7 b2 m/ z( d& E; o "Usage: scrdec13 [codepage]\n\n" "Code pages can be 932 - Japanese\n" ' a2 e9 W3 a/ H " 936 - Chinese (Simplified)\n" " 950 - Chinese (Traditional)\n" " 949 - Korean (Wansung)\n" " 1361 - Korean (Johab)\n" "Any other code pages don't need to be specified.\n"); return 10; }

if (argc > 3) M0 S3 k M9 e$ N2 C$ Q t cp = atoi (argv[3]); ' r& l, m# G8 B$ B7 \3 J7 f return ScriptDecoder (argv[1], argv[2], cp); 7 @: `; r. N0 \; g n Y/ v {& g}